AD HOC RISK ANALYSIS:
Ad Hoc Risk Escalation
Ad hoc risk escalation is similar to the risk proposal functionality. It enables analysis and
direct response when creating the risk proposal. Based on the analysis data, the escalation
is triggered by comparing with the thresholds defined in the organizational unit hierarchy. It
is possible to create a new risk (Activate Risk) from the proposal, and also associate the
proposal with an existing risk (Transfer to Risk). When activating or transferring, you can
also generate an analysis and responses.
A personal object work list (POWL) implements the reporting for this functionality.
Prerequisites
You have completed the following customization tasks:
Set the Validate Risk Proposal task as a general task and activate the work flow
linkage:
1. Choose Governance Risk and Compliance General settings
Workflow Perform Task Specific Customizing .
2. Expand the GRC node.
3. Select the GRC-RM subnode and choose Assign Agents.
4. Select the Validate Risk Proposal task and choose Attributes....
5. Select General Task and choose Transfer.
6. Choose Back and return to the Task Customizing Overview screen.
7. Select the GRC-RM subnode and choose Activate Event Linking.
8. Expand the Risk Proposal WF node and choose Detail View.
9. Choose Event linkage activated and Continue.
Enable [Link] Risk Escalation:
1. Choose Governance, Risk and Compliance Risk Management
Master Data Setup Activate Risk Proposal and/or Ad-hoc Escalation .
2. Activate RISK_ADHOC_ESCAL.
Features
You create an ad hoc risk escalation from My Home Ad-hoc Risk
Escalation .
When you Submit a completed Ad-hoc Risk Escalation screen, the system compares the
escalation analysis data with the thresholds defined for the organizational unit
(see Threshold Browser). If the impact exceeds the escalation level, the escalation is
automatically forwarded to the upper organizational unit (in some cases, this can be the
corporate organizational unit). The escalation is then sent to the recipient determined by
evaluation of the agent slot 0RM_RISK_PROPOSE.
When you, as the nominated agent open the work item in your Work Inbox, the status
changes from Created toIn Process.
In the Ad-hoc Risk Escalation screen that opens, you have the following options:
Forward
This opens the Forward Ad-hoc Risk Escalation screen, in which you can change the
organizational unit. The escalation is then forwarded to the recipient determined by
evaluation of the agent slot0RM_RISK_PROPOSE for the changed organizational unit.
You can add an explanatory note before forwarding the escalation.
Reject
When you Submit the Reject Ad-hoc Risk Escalation screen, you must add an explanatory
note.
Transfer
If you want to transfer the escalation to an existing risk, you select the risk and you can
also take over some of the proposed responses. By selecting the responses, you are
asked to enter the Response Type and, optionally, the Purpose. The responses are new
responses for the risk.
You can also enter an explanatory note.
Activate
If you decide to take over the analysis, you must specify the risk category to which it is
assigned. Based on the actual analysis profile, the probability and impact is converted to
required representation based on the customization and threshold set up.
However, if it is a corporate risk escalation, you can decide selectively for which
forecasting horizons you want to use. You can also define the impact, but it is not
mandatory. Based on analysis type the impact and probability is converted if required to
values based on the customization and the threshold definition.
In either case, you can also enter an explanatory note.
More Information