The Organization and Process model must already exist. The organization and process model is downloaded to the template along with attributes of each model. The user can perform additional filtering if necessary, and then places an "x" next to each organizational unit and / or process to which they wish to push a given Risk Matrix template. The user can choose one of three ways to push the template as outlined in the Column Headings - Entries table below. This functionality allows users to quickly replicate standard objectives, risks, controls, risk event categories, and tests to processes and organizational units
Column Headings - Entries
|
Action
|
Select Columns
|
No entry: Columns selected by the user when creating the search and downloaded to the spreadsheet.
|
Process Name
|
No entry: Identifies the process to which a risk matrix template will be pushed. This field can be used to filter for a particular process.
|
PushUseCurrentItems
|
Optional: "x" is the only valid entry. Use this column when you are pushing new objectives, risks, and controls to pre-existing risk matrices. Placing an "x" in this field will push all new objectives, risks, and controls to selected processes, but ignore duplicate objectives, risks, and controls.
Note: The "x" will only be recognized by the Governance Portal if a risk matrix for a particular process already exists. To create and push the risk matrix to a particular process where a risk matrix has not yet been created, use the Push RCM - Overwrite RCM.
|
PushUseNewItems
|
Optional: "x" is the only valid entry. Use this column when you are pushing new objectives, risks, and controls to pre-existing risk matrices. Placing an "x" in this field will push all new or duplicate objectives, risks, and controls to selected processes while retaining any existing objectives, risks, or controls (duplicate items are imported with a timestamp concatenated to the end of the name to identify duplication).
Note: The "x" will only be recognized by the Governance Portal if a risk matrix for a particular process already exists. To create and push the risk matrix to a particular process where a risk matrix has not yet been created, use the Push RCM - Overwrite RCM.
|
PushOverwriteRCM
|
Optional: "x" is the only valid entry. Use this column when you wish to initially create risk matrices for particular process or completely overwrite existing risk matrices. Placing an "x" in this field will delete existing risk matrices from selected processes, and push all objectives, risks, and controls to the risk matrix associated with selected processes.
|
REQOrgUnitId
|
No entry: Organization unit id number automatically generated by the Governance Portal
|
REQProcId
|
No entry. Process id number automatically generated by the Governance Portal.
|
Validation
|
Portal Reaction
|
Suggested Corrective Action
|
Rows are skipped.
|
All rows not containing an “x” are skipped. Rows containing an “x” in one of the Push fields are subject to other validation rules.
|
N/a – see other validation requirements.
|
Org Unit or Process does not exist in the Governance Portal (e.g. because user added the process or org. directly to the spreadsheet instead of utilizing the processes downloaded from the Governance Portal).
|
Entire import is rejected.
|
Download data from the Governance Portal to the spreadsheet.
|
Action fields contain values other than “x”.
|
Entire import is rejected.
|
Make sure that “x” is used in all action fields.
|
An “x” is marked in more than one column for a given process.
|
The Governance Portal will not know which operation to perform for the given process. Entire import is rejected
|
Verify that "x" is only contained in a single column per process. Select the appropriate operation for processes where more than one column contains an "x".
|