Working with attributes in Risk Manager

Attributes describe the objects in Risk Manager (risks, controls, processes, and objectives) to provide detailed contextual data. Each attribute is a piece of data or metadata, and can represent permanent or temporary information. A wide range of attributes are possible, and different asset types and record types can have very different attributes. Here are a few examples:

  • Name
  • ID
  • Risk/control description
  • Risk category
  • Risk owner
  • When the object was created
  • When the object was last updated
  • Control type
  • Control method
  • Relationships to other objects
  • Supporting attachments

How it works

You document attributes in the following Risk Manager objects:

  • Risks.
  • Controls
  • Processes
  • Objectives

All attributes are instances of an attribute type. An attribute type is a class that defines the format and behavior of its attributes. It specifies the types of assets and records that they appear in, the type of data that they store, whether the data is required, and the way the data appears and functions in Diligent One's user interface.

Example for attributes in Risk Manager

Scenario

You have added a risk in the Risk Manager named Virus Threat. Now, you want to add more information by using the attributes: Risk ID, Description, and Risk Owner.

Process

  1. Open the Risk Manager app.
  2. In the Risk page, search and open the risk: Virus Threat.
  3. In the Details tab, add details for Risk ID, Description, and Risk Owner.
  4. Select Save Changes.

Result

The risk is updated.

Creating attribute types

  1. Open Launchpad.
    Note

    If your company uses more than one instance in Diligent One, make sure the appropriate instance is active.

  2. Select Platform Settings > Configuration.
  3. Select the Attribute Types tile. The Attribute Types page is displayed.
  4. To add an attribute type, click Add attribute type.
  5. Enter the Admin name and Display name.
  6. Optional. Enter a tooltip. The tooltip appears under the attribute name.
  7. In the Configuration options, select Required if you want this attribute to be mandatory when used in a handler condition.
  8. Select the Response type. For example: Text, Number, Boolean, and so on.
  9. Click Add. The attribute type is added to the list.

Updating attribute types

  1. Open Launchpad.
    Note

    If your company uses more than one instance in Diligent One, make sure the appropriate instance is active.

  2. Select Platform Settings > Configuration.
  3. Select the Attribute Types tile. The Attribute Types page is displayed.
  4. Select the name of the attribute type you want to edit. The attribute details page is displayed.
  5. Select Edit. The General Information area becomes editable, and you can edit the Display Name, Tooltip, Configuration options, and Response type.
    Note

    Static fields such as the Admin name, Created by, Last updated by, and the Response type cannot be changed. While the Response type cannot be updated, you can edit some aspects of it. For example, if the Response type is Boolean, then Default True can be changed by toggling on or off.

  6. Click Save. Your changes appear on the attribute type details page.

Organizing attribute types in Risk Manager

If you want to organize the attribute types associated with any given asset or record type, get in touch with the Diligent consulting team. Here's how it works:

  • Attribute types can appear in multiple sections. For example, if you configure an asset type to have an Overview and a Key People section, you can include the Risk Owner attribute type in both. If you update a risk's Risk Owner in one section, the updated value will automatically appear in the other.
  • You can hide attribute types by not associating them with any section; however, doing so doesn't delete the attribute type or the values associated with it.

Metadata attribute types

Attribute types with details such as the date and time an object (risk, control, process, or objective) was created or updated, or the users who created or updated it, (for example, the Created By attribute type), appear only in the Details tab of every object in the Risk Manager app.

Deleting attribute types

If you want to delete an attribute type, get in touch with the Diligent consulting team.

Updating attributes

To update an attribute, open the object (risk, control, process, or objective) you want to update, and modify the attribute value.

Work with attachment attributes

The attachment attribute type allows you to upload files to objects such as a risk, a control, a process, or an objective.

Uploading to attachment attributes

Depending on how the attribute type is configured, you can upload one or more files.

  1. Open the object of your choice.
  2. In the Attachment section, either drag and drop the files or click [Select files to upload]. The file appears in the attachment attribute.

Downloading attachments

To download an attachment, click the Download icon .

Deleting attachments

To delete an attachment, click the Delete icon , then click Confirm.