I administer the Promapp Risks Module. Risk in the module can only be assigned to a person (name) not to a role. This means there is a lot of manual handling when someone leaves. Treatments can be assigned to a role – which works better because you add the role and the person changes automatically. It would be good if risks could also be assigned to a role (or an individual) the same as treatments. This would reduce manual handling and ensure risks remain current.
ADMIN RESPONSE
Sep 7, 2022
We are working on some other transfer/delegation functionality and that may address this issue as well. More to come as we dig in.
We are currently adding our risks and controls and uplifting processes under Critical Owners for CPS230 implementation. There are discrepancies in the ability to add an owner of Processes, risks and controls between roles and individuals. Ideally, to support ongoing Operational resilience obligations, we need to assign at Role Level to allow for movements of staff and also to add alternate owners to accommodate for leave/ absence. Can you please advise if this can be considered for improvement.
We are currently adding our risks and controls and uplifting processes under Critical Owners for CPS230 implementation. There are discrepancies in the ability to add an owner of Processes, risks and controls between roles and individuals. Ideally, to support ongoing Operational resilience obligations, we need to assign at Role Level to allow for movements of staff and also to add alternate owners to accommodate for leave/ absence. Can you please advise if this can be considered for improvement.