Projection & Simulation
This option allows the user to check initially how the implementation of the controls defined in the system will affect in the system (Presentation) or for verifying in a real way how the implementation of the controls has affected (Simulation).
The option is divided in two tabs, on which, you can do a set of actions developed below.
Projected effectiveness
The projected effectiveness tab initially shows the list of controls that have been defined in the section 'Risk management planning'. Regarding these controls, it is possible to establish how their implementation would affect the organization based on the dimensions that have been defined in the risk and control methodologies. To do this, click twice on the cell and indicate the desired value in percentage reduction.
Depending on how the type of efficiency has been configured, the entered value may be a numerical value (Quantitative):
or a level of effectiveness (Qualitative):
In the case of the dimensions of controls, it is possible to configure that in this option the effectiveness of the controls is defined according to the methodology (Controls):
Once defined the values, GlobalSUITE enables the following actions:
Project Risk: It allows you to show through a table of values how the implementation of the controls will affect based on the Risk Analysis performed. For this GlobalSUITE allows you to do the calculations according to the following options:
Maximum: It performs the calculation based on the maximum percentage value of the dimensions defined.
Minimum: It performs the calculation based on the minimum percentage value of the dimensions defined.
Average: It selects as percentage value the average of the value of the dimensions defined.
Accumulated: It selects as percentage value the sum of the value of the dimensions defined.
According to the methodology of calculation that you have selected; GlobalSUITE shows the risk levels in a table of values which result after the implementation of the controls.
Additionally, the lower table details the values which are shown in the top table and it indicates simultaneously the values obtained in the risk analysis and the values that result after the implementation of the controls.
Project Cost: It allows you to check the beneftis which the organization will have with the implementation of the controls defined in the Treatment Plan of Risks. For this task GlobalSUITE allows you to perform the calculation according the following options:
Maximum: It performs the calculation based on the maximum percentage value of the dimensions defined.
Minimum: It performs the calculation based on the minimum percentage value of the dimensions defined.
Avarage: It selects as percentage value the average of the value of the dimensions defined.
Accumulated: It selects as percentage value the sum of the value of the dimensions defined.
Depending on the methodology, GlobalSUITE shows the following information:
Table of benefits y controls associated
Controls/Threats: it shows hierarchically the list of controls and those threats associated over the ARL which will be mitigated in case of being implemented.
Projected value: It shows the savings based in the calculation.
NOTE: The cost of the implementation of the controls will be always a fixed value.
Benefit: It indicates the total benefit which contributes to the organization of the implementation of the controls.
Initial value: It shows two types of values:
Value associated to the control: It indicates the economic cost which supposes to the company the implementation of the control. This value is defined in the section ‘Planning of the Risk Management’.
Value associated to the threat: It indicates the cost which the threat supposes. These value are defined in the section ‘Cost Analysis’.
Table of Controls & Threats (costs)
It shows the cost of the implementation of the controls in one side and the economic cost of the materialization of the threats (initial value) and the estimated cost in case you implement the control (Projected value) on the other side.
General Data
It shows the following data:
Cost of the Control Applied: It appears the economic cost of the implementation of the controls.
Initial Cost of the threats: It’s the total cost in case the threats which overcome the ARL will be materialized
Projected Cost of the threats: It’s the total cost in case the threats which overcome the ARL once implemented the controls.
Benefit: It shows the savings which will suppose the implementation of the controls for the organization.
Real effectiveness
When you click on the tab ‘Real effectiveness’, GlobalSUITE requests to the user if you want to copy the estimations of reduction defined in the tab ‘Projected efficiency’.
In case the estimations (percentage of the dimensions defined) have been verified after the implementation of the controls, the user must click on ‘Accept’ and automatically the platform will copy the valuations of the tab ‘Real effectiveness’. On the contrary, in case the controls have been implemented and the values are not as expected, the user must reject or cancel the copy of the values.
Once answered the request for copying the values, you access to the following screen. In case you accept the copy of the values, the table will show the same values defined in the tab ‘Projected effectiveness’. In case of cancelation, the table will appear without values and the user will have to define the percentages of real probability and impact after the implementation of the controls.
Once defined the percentages of improvements, GlobalSUITE allows you to carry out the following action:
Simulate: It allows you to show through a table of values how the risk levels have been reduced after the implementation of the controls. For this task, GlobalSUITE allows you to conduct the calculation according to the following options:
Maximum: It conducts the calculation according to the maximum value of the percentage of the dimensions previously defined.
Minimum: It conducts the calculation according to the minimum value of the percentage of the dimensions previously defined.
Average: It selects the average of the values of the dimensions previously defined as the percent value
Accumulated: It selects the sum of the values of the dimensions previously defined as the percent value.
Depending on the mode of the calculation, GlobalSUITE shows the risk levels after the implementation of the controls in a table of values.
Additionally, the lower table details the definite values after the implementation of the controls.
When you click on the button ‘Apply’, GlobalSUITE generates a historical version in the section ‘Analysis/Historical version’ of the Risk Analysis performed and it also makes a copy with the values obtained in the simulation of the section ‘Analysis/Risk Analysis’.
Simulate Incident: According to the modifications performed in the section ‘Management’ about the option ‘Risks’, the platform allows you to simulate how the event may affect to the company.