General Information
When you create a new risk analysis, you accede to the application form which allows you to define a set of parameters for carrying out the analysis.
General Data
Name: It identifies the name of the risk analysis which will be shown in the list seen before.
Head Coordinator: It allows you to identify the coordinator of managing the risk analysis
Departament: It identifies the department or departments involved in the management of the risk analysis.
Starting Date: You can indicate the starting date of the risk analysis.
Methodology: It allows you to associate the risk analysis to a methodology defined in the section ‘Administration/Analysis Methodologies’.
Acceptable Risk Level (ARL): It allows you to stablish the Acceptable Risk Level of the risk analysis. The defined level is used by the platform in different options for standing out those risk that that exceed the set level.
NOTE: The levels could be quantitative or qualitative depending on the methodology of the risk analysis and the dimension selected for the risk calculation.
Objective Risk Level (ORL): It allows you to establish the Objective Risk Level. The defined level is used by the platform in the option Risk Assessment – Risk Summary for showing the level with the ARL.
Calculation of Global Risk by Asset (RGA): It allows you to select a criterion for calculating the Global Risk Level of each Asset. The value is calculated according to the values obtained for each one of the risks that the assets have. The available criteria are ‘Minimum’, ‘Maximum’, ‘Average’ and ‘Accumulated’.
Calculation of Related Global Risk by Asset (RRGA): It allows you to select a criterion for calculating the Related Global Risk by Asset. The RRGA value of one asset is calculated according to the values obtained by each one of the risk that the asset has and their depend assets. The available criteria are ‘Minimum’, ‘Maximum’, ‘Average’ and ‘Accumulated’.
Calculation of Global Risk by Analysis: It allows you to select a criterion for calculation the Global Risk Level. The value of Global Risk by Analysis is calculated according to the RGA values of each asset on which are associated with the Risk Analysis. The available criteria are ‘Minimum’, ‘Maximum’, ‘Average’ and ‘Accumulated’.
Risk appetite:It allows you to determine the amount of risk that you want to assume for achieving your objectives.
Catalogs
This option allows the user to select those catalogs previously defined in ‘Administration/Analysis Catalog’ which will support the performing of the risk analysis.
Depending on the typology of the analysis you can select all the catalogs needed, and in this ways, the coordinator will carry out the risk analysis.
Dependencies Tree
It allows you to identify the assets defined in the Inventory which will be analyzed according to a Threat list. For this task GlobalSUITE allows the following actions:
Filter Services: It allows you to insert different filters on the risk list.
Mark Dependents: In case you select a specific service or asset, it allows automatically the assets which remain selected.
Associate: You can associate the assets which will be part of the risk analysis; you have to drag the assets from the left column to the right column.
Expand Next Level: This button expands the list of services, processes and assets by level. You have to click on this button as many times as you want to check the depth of the dependency tree.
Collapse : It collapses the list of dependencies of all the services & assets.