Understand your Enterprise Asset Manageent Module

The Enterprise module contains two directories, one for your Contacts/users and one for your logical and physical Assets. You can add Contacts and Assets at any time.

Directory

1. As the Account Manager for your company, you will be assigned as the Super Admin. This will give you access to manage your own profile as well as the company account. To add users to your company account, please see out training in the “Getting Started Section”

2. There are 5 types of other possible contacts*:

1. Manager

2. General

3. Read Only

4. Vendor

Manager

Managers are standard admin users. Managers have the following privileges:

1. Read, write, publish access to all modules

2. User Access and Privileges Control for users (Manager, Read-Only, General, Vendor) unless otherwise specified by the Administrator.

General

General Users are occasional users who participate in the integrated risk management process. General Users have limited role access and can only see and perform assigned tasks on the 1Risk platform. 

These tasks include:

1. Policy Review, Attestation and training

2. Evidence provision for compliance controls

3. Risk Mitigation plans for findings

4. Assessment response

5. Risk Metrics: provision of risk metrics data for review and tracking of risk metrics

6. Asset Owners: can be assigned as the owner of an asset on the 1Risk platform.

Read Only

Read-Only Users are able to see reporting and dashboards on the 1Risk Platform.

Vendor

Vendor users are external users, third or 4th party. Vendor users can perform the following tasks:

1. Assessment response and review

2. Finding review

3. Risk Mitigation plans

Assets

The Asset tab provides a list view of all your Asset and Asset Types and the ability to manage all your assets for risk and compliance.

Asset Types are displayed across the top of your screen. Click on an Asset Type to see the list of Associated Assets.

Each Asset  Record contains the following subtabs:

1. Summary
2. Details
3. Assessments
4. Risk Register
5. Internal Controls
6. Issues
7. Notes/Attachments/Comments/History

Summary tab

The Summary page displays Risk Score, Impact Score, Controls, Issues and mitigation status (Managed, Unmanaged, Closed). 

• Risk Score is based on the Average Residual Risk from all associated Risk Register records.
• Impact Score is based on the latest Business Impact Analysis (See Section 5 in this training manual).

Detail tab

This page provides the Asset Description, Asset Owner, Related Assets and Status.

Assessment tab

Assessment associated with your asset. 

Risk Register tab

Risk Register associated with your asset. 

Internal Controls tab

Internal Controls associated with your asset. 

Issues tab 

Issues associated with your asset. 

All records contain the option to add custom notes, attachments, a comment thread, and activity history to track all modifications and updates to the asset record.