How to Create and Manage Controls

Who is this article for?

 Risk Managers responsible for managing risk assessments.

 Staff access to edit risk controls is needed.

Controls are assigned to risks as a way of neutralising or reducing the threats posed to the organisation. Controlled risks remain potential threats, but the probability of an associated incident or the consequences thereof have been significantly reduced. Q-Pulse Cloud allows you to create as many controls as you need in order to treat risk events.

This article outlines how to create a new control so that it can be used while performing a risk assessment. This article does not include any details on how to perform the risk assessment (please visit How to Perform a Risk Assessment for details on how to apply a control).

To make managing controls easier to learn, this article is split into 6 sections so that you can either walk through the steps in sequence or you can jump to the section relevant to what you are doing in Q-Pulse Cloud:

1. Create a New Control
2. Create a Control While Performing a Risk Assessment (Ad-Hoc)
3. Archive a Control
4. Reinstate an Archived Control
5. Delete a Control
6. Further Reading

1. Create a New Control

To create a new control:

1. Click on Risk and then Controls.
2. Review the controls listed to confirm the control you want to create does not already exist.
3. Click the [Create Control] button.
4. Enter the required information (if required):

• • Title: A clear and concise title that the user will recognise.
  • Code: A unique code for the control.
  • Description: A brief description of the control that will aid the user when selecting controls during a risk assessment.
  • Type: A categorisation of the control.
  • Owner: The name of the person responsible for maintaining this control.

5. Click [Save].

TIP! The code field is optional and may not be relevant for all. The the code could be an internal code number (such as a document number for a policy or procedure) or it could be the item number in your suppliers inventory if the control is a physical control.

2. Create a New Control While Performing a Risk Assessment (Ad-Hoc)

It is also possible to create a risk control ad-hoc while you are in the middle of a risk assessment.

To create a risk control while performing a risk assessment:

1. Open the risk assessment.
2. Go to Controls.
3. Type the name of the control you would like you add into the search box.
4. Click [Add].

NOTE: When you add a control directly through the risk assessment it will also be added to the active control list and can be used in other risk assessments.

3. Archive a Control

Archiving a control will remove the control from use completely but you can always re-instate it at a later date if needed.

To archive a control:

1. Click on Risk and then Controls.
2. Open the control you want to archive.
3. Click on the ellipsis button and then select Archive.

4. When prompted, click [Yes, Archive].

4. Reinstate an Archived Control

To reinstate an archived control:

1. Click on Risk and then Controls.
2. Change the filter to show archived controls.

3. Open the control you want to archive.
4. Click on the ellipsis button and then select Reinstate.

5. Click [Yes, Reinstate].

5. Delete a Control

Deleting a control will permanently remove the control from Q-Pulse Cloud.

To delete a control:

1. Click on Risk and then Controls.
2. Open the control you want to archive.
3. Click on the ellipsis button and then select Delete.

4. When prompted, click [Yes, Archive].

6. Further Reading

• How to Perform a Risk Assessment