Configuring the Risk Analysis (RA) module

Configuring the Risk Analysis (RA) module


Before configuring the ADR module, it is preferable to perform the steps listed in the article Initial Setup.

The platform contains all the essential elements for an organization to perform ADRs according to industry best practices.  However, it is possible that an organization has different standards and methodologies with respect to ADRs that will require different configurations according to the needs of the company.

Follow the steps on the following timeline for optimal configuration:

 

1.    Risk Assessment Factors

a)     General Settings  >  Risk Matrix > Factors Related to Assisted Calculation:

  1. By default, the platform has 4 factors to make the assessment of the initial and residual risk index.  The 4 default factors are listed below, however, they can be edited, deleted or modified according to the organization's practices. It is also possible to create a factor by clicking on the "Create a factor" button at the top of the page.
    1. Attenuation
    2. Potential severity
    3. Frequency of exposure
    4. Frequency of implementation
  2. Each factor has a value scale that can be modified according to the company's risk assessment practices.  Each factor will be used to assess the risks associated with a position, task or machine.  However, these factors will also be used for the assessment of risks related to an event or near-event, which allows a standardization of risk practices in HSE.
  3. To edit a factor, click the pencil icon to the left of the "Value" column.


Task:  Review each factor to validate their suitability with the company's processes.  Each setting can be changed by a platform administrator.

The factors can be aligned with the Dilygence parameters.  Dilygence's reference lists are available as needed.

Data migration from Dilygence to Conformit:

The reference lists between CONFORMiT and Dilygence must  be EXACTLY  the same on the description, uppercase, lowercase, accents, parentheses) in order to be able to import historical data.

2.    Configuring the Risk Matrix

https://conformitsupport.zohodesk.com/portal/en/kb/articles/setting-up-the-risk-matrix-23-2-2023 

a)     General Settings >  Risk Matrix > Axes:

ยท     The axes defined in the platform according to common names in Risk Management.  However, the vertical and horizontal axes of the risk matrix can be modified according to  the terms and definitions used by the organization.

ยท     To change the name of an axis, click the text field under "Axis Name" and enter the desired name.  


b)     Calculations of risk indexes

Risk indices are subject to change depending on the organization's practices. The initial and residual indexes will be calculated according to these parameters and will display these indices according to the selected choices according to the scales of factors established above.  

The calculation of risk indices can be based on a linear single-axis or two-axis index โ€“ see two examples below รŸ

Example of a matrix for calculating one-axis risk indexes


Example of a matrix for calculating two-axis risk indices


ยท       To edit a calculation formula, click the pencil icon to the left of the formula you want to edit the formula using the calculator.



 

To have a calculation of the risk indices identical to Dilygence, the formulas of the axes must be as follows:

ยจ

Vertical axis: Potential severity x โˆš(mitigation)

Horizontal axis:  (Exposure frequency + Realization frequency) x โˆš(Attenuation)

c)     Risk matrix axes

A 5 x 5 risk matrix (5 levels of Probability and 5 levels of Severity) is available in the platform and it is based on standard risk management practices.   However, this matrix can be modified according to the organization's practices.   The modification of the matrix will impact the initial and residual risk indices of the ADRs and the risk assessment in the event reporting.

ยท       To edit a cell, click on the cell. You will then be able to change the cell text and color.



3.    Configuring Risk Components

a)     General Settings > Risk  Analysis > Risk Components:

ยท       The platform has, by default, the components of a risk below that can be customized for business needs.  Modifying these components will impact the establishment of the risk context during the documentation of the latter.

ยท          Dangerous phenomenon

ยท          Dangerous situation.

ยท       To edit a risk component, please hover your cursor over the component title and click the pencil icon. You will then be able to edit the name, as well as the description.

 

Import of Dilygence IN COMPLIANCE:

The reference lists (Dangerous Phenomenon and Dangerous Situation) between CONFORMiT and Dilygence must be EXACTLY  the same on the description, uppercase, lowercase, accents, parentheses) in order to import historical data.  There may be additional components in CONFORMIT, however, those present in Dilygence must be a perfect match with CONFORMiT's SaaS platform.


4.    Consequence configuration

a)     General Settings >  Risk Analysis > Consequences:

ยท       The platform has, by default, a list of consequences that can be changed depending on the context of the company. 

ยท       The platform has, by default, a button that is enabled for high severity consequences to draw users' attention to the criticality of certain risk.  This tab can be activated or deactivated according to the choice of the company  . 

ยท       The platform has, by default, severity values (Severity) for each consequence that can be changed according to the company's choice 

ยง  To edit a consequence, click the arrow to the left of its name.

ยง  To create a new consequence, click the "Create Consequence" button at the top of the page.

 

ยท       The list of risk consequences is used in the Risk Assessment section  . See also: Knowledge Base - Consequences of a Risk


5.    Configure control measures

a)     General Settings >  Risk Analysis > Control Measures:

  1. The platform has, by default, a list of control measures that can be modified according to the context of the company.    Its name and effectiveness according to the hierarchy of controls can be modified according to the preferences of the organization.

  1. Control measures are used to reduce the initial risk index to obtain the residual risk index.  The platform shall consider the control measure that has the mitigating factor within the list of measures of the selected controls and is in place.  The reduction factor can be configured according to the needs and requirements of your organization.

ยง  To edit a control measure, click the arrow to the left of its name.

ยง  To create a new control measure, click the "Create Control Measure" button at the top of the page.

ยง  To change the reduction (mitigation) value of the risk index, choose the value from the drop-down menu that was configured earlier.


  1. The list of risk control measures is used in the Risk Mitigation section  .  See also to:

ยง  Knowledge Base - Selection (Adding) of Control Measures

ยง  Knowledge Base - How do I create a new control measure in CONFORMiT?

6.    Positions and Tasks

General settings  >  organization > Positions:

ยท       Positions held by the organization's staff must be created in the platform.   The positions will be useful for: The risk analysis on a position, linking an employee to a position when creating the latter in the personnel list and when reporting an incident.  


Importing Dyligence to CONFORMIT:

The reference lists (Position and Work Tasks) between CONFORMiT and Dilygence must  be EXACTLY  the same on the description, uppercase, lowercase, accents, parentheses) in order to be able to import the historical data otherwise they will be added to the reference list.  There may be additional items in CONFORMIT, however, those present in Dilygence must have a perfect match with CONFORMiT's SaaS platform.

General Settings >  Organization > Work Tasks:

ยท       The tasks of the organization's staff must be created in the platform.   Tasks will be useful for: Risk analysis on a task.


 

7.    Machines > select an organizational unit

ยท       Machines or machine locations in an organization must be created in the platform.   The machines will be useful for: 

ยง  Risk analysis on a machine, and

ยง  For the lockout procedure module and possibly on target inspections on equipment/machine. 

ยท       Machines must be associated with an organizational unit of the platform.

ยท       Machines must have a unique identifier but can have identical names.

ยท       The machine must have an identifier (numeric or alphanumeric) and not have a name.

ยท       The locations are indicated by a sign   and the machines by the pictogram .

 

Importing machine list from V8:

Machine and location listings can be imported from CONFORMIT V8 "on premise" and V8 SaaS on request.  The organization must tell us the exact location where this information will need to be uploaded.

 

Import of ADRs into Dilygence related to a list of machines:

If you want to attach ADRs to existing machines in the platform

CONFORMIT; machines must  be EXACTLY  the same on the description, uppercase, lowercase, accents, parentheses) in order to be able to import historical data.

Otherwise, the machines  will be added to the machine list (the machine name will be uploaded to the machine ID). The organization may, however, amend this list without affecting ADRs.

 

Note that: There may be additional machines in CONFORMIT, however, those present in Dilygence must have a perfect match with the CONFORMiT SaaS platform otherwise they will be added as a new entity in the list of machines.

Risk Analysis Configuration (checklist):

Item

Section

Status

Review risk factor reference lists

General Settings > Risk Matrix > Factors Related to Assisted Calculation

 

Validate and modify the Risk Matrix as required

General Settings > Risk Matrix > Axes

 

Validate and modify as necessary the Risk Index Calculations

General Settings > Risk Matrix > Axes

 

 Validate and modify the Risk Components as required

General Settings > Risk Analysis > Risk Components

 

Validate and modify as necessary the Consequences

General Settings > Risk Analysis > Consequences

 

Validate and modify as necessary the Control Measures

General Settings > Risk Analysis > Control Measures

 

Validate and modify as necessary the Positions and Tasks

General settings > organization > workstations

 

Validate and modify the Machines as necessary

Machinery

 

Importing data from Dilygence โ€“ Multisites

Get the list of POSITIONS references in Excel of the sites

Create a list of global items to import into CONFORMIT

 

Translate each post (FR/ENG)

 

Get the TASKS reference list in Excel of the sites

Create a list of global tasks to import into CONFORMIT

 

Translating each task (FR/ENG)

 

Get the list of MACHINES references in Excel of the sites

Create a list of global tasks to import into CONFORMIT

 

Specifies where to import each list

 

Get the list of DEPARTMENTS references in Excel of the sites

Create a list of Departments to import into CONFORMIT

 

Ensure that it is consistent with that of CONFORMIT

 




    • Related Articles

    • Duplicating a risk analysis

      Similar questions: How can I create a risk analysis copy? How to duplicate similar risks? Go to module from the home page or using the metro button menu. This opens the list of existing risks. Select the risk you’re wishing to duplicate and click on ...
    • How to approve the Risk Analysis?

      Similar questions: Where to indicate that risk analysis has been approved? How to disapprove the risk analysis? Who can approve or disapprove the Risk analysis? To approve or disapprove the risk analysis user must have such right in the set of rights ...
    • Linking existing risk analysis to machine unit

      Similar questions: How to link an existing risk analysis to a machine unit? Where to add new machine to the existing risk analysis? In order to link an existing risk analysis to a machine unit or location – they need to exist within the machine ...
    • Where to indicate the stage of Risk Analysis?

      Similar questions: What is the purpose of tags in Risk Analysis? Where to see at which stage the Risk Analysis is currently? Where to reflect the workflow of the risk analysis? System of tags should be used to indicate the current stage of Risk ...
    • How to create a new Risk for analysis?

      Similar questions: How to start a risk analysis? How to add a new risk to the list? To create and edit risks user has to have these rights according to his Role. These rights may be added if necessary by a user with Administrator role. Go to module ...