Work with Treatments

To treat a risk is to create one or more plans for its remediation. Each plan relates controls to the risk, may run "residual" analysis to determine the effectiveness of those controls, and tracks costs.

• You designate one plan as "In Use," meaning that it's currently in force. You can select related controls not only as you create plans, but also in the create or edit page for the risk. In the latter case, the controls are included automatically in the in-use plan.
• You may designate another plan as "Target," meaning that it may be used to produce results in the future.
• Although you may create any number of treatment plans, there can be only one in-use plan and one target plan.

To work with treatments, select the risk you want to treat: In the Risks search page, click its name. A record of the risk opens; click its Treatment tab.

Review Results

In the Treatments landing page, summary panels provide results of analyses and evaluations you've completed for the risk. Each panel provides values only if appropriate analysis or evaluation has been performed. If so, each provides the most recent values.

A Treatment Summary panel provides:

• The inherent risk level calculated during inherent risk analysis.
• The residual risk level calculated for the in-use treatment plan and a target risk level calculated for the target treatment plan.
• Results of risk evaluation: the risk rating (100 being most severe) and evaluation results (whether to accept, monitor, or treat the risk).

  For the risk rating, an upward-pointing arrow indicates an increase from the previous evaluation, and a downward-pointing arrow indicates a decrease. Horizontal arrows pointing in each direction indicate no change.

For any of these measures, a dash indicates that an analysis or evaluation hasn't been performed.

An Analysis and Evaluation Summary panel provides greater detail about risk analyses and plan costs.

• For each of the inherent, residual, and target analyses, it provides not only the overall risk levels, but also the likelihood and impact values that contributed to the overall values.
• An Aggregated Treatment Cost area shows the treatment costs calculated for the in-use and target treatment plans.

These values are meant to be compared with one another. You may determine, for example, that residual results are better than inherent results, and so controls succeed in relieving a risk. Or you may discover that residual results are poorer, and so controls are insufficient.