ARIS - SHARE YOUR IDEAS
How can we make ARIS better?
ADD A NEW IDEA

Risk & Compliance

Showing 65

Survey management - allow independent responses from ALL interviewees

When a questionnaire is sent out to a group of interviewees, the first complete response marks the task as completed. As long as the questionnaire has not been completed, all users can see the answers provided so far. A Questionnaire Scheduler the...
Jörg Neves Bliesener about 2 months ago in Risk & Compliance 0 Open for voting

Dutch interface for ARCM

We have an increasing number of customers of the public sector which rely on the ARCM solution for the management of their risks and which request a dutch language interface for the solution, as some regulations and laws push them to put a risk an...
Mathieu Syx 6 months ago in Risk & Compliance 0 Open for voting

Add a comment when deaktivating a task in ARCM

To enhance the documentation of evidence in ARIS Risk & Compliance, it would be necessary to add a text / note when we deactivate a task, that has already startet. Example: A control test (or control execution) was started by the system and ha...
Sabine Runge 3 months ago in Risk & Compliance 1 Open for voting

Risk-Control-Matrix as a standard report in ARCM

Risiko-Kontroll-Matrix The report "Risk-and-Control-Matrix" is a standard requirement for GRC use cases. It is used as a documentation of the business processes with respect to the allocated risks and controls. Auditors (internal and external) use...
Sabine Runge about 2 months ago in Risk & Compliance 0 Open for voting

Change History Report (Änderungsprotokoll) on Controls should show Risk

Status: Currently, if westart the report "Change History report" (Änderungsprotokoll) on a control, it shows the subordinate elements (Control Execution Task and Test Definition). But it does not show the risk (superordinate element). Request: To ...
Sabine Runge 5 months ago in Risk & Compliance 1 Open for voting

Extend ARIS report API to collect info from several ARCM objects

Current ARIS report API can collect info just from one ARCM object types (e.g. from risk). If you need to collect info from several object types e.g. from test cases and related risks, controls and test definition you have to iterate test case and...
Radek Docekal about 1 year ago in Risk & Compliance 0 Open for voting

Add Compliance Assessments to set of evaluations available for an audit step

Right now, when opening an Audit Step, the following evaluations are available: Control tests Risk assessments Questionnaires (surveys) Losses Policy Rollouts It would be desirable to also have compliance assessments available here as well, specif...
Jörg Neves Bliesener 9 months ago in Risk & Compliance 0 Open for voting

Synchronization to deactivate risks in ARCM

To deactivate content in standard, the synchronization of the whole database is necessary. Deactivation of a risk (e.g.) should be possible by using a seperate attribute of this object. Db wide sync should be avoided as many other parts could be a...
Benjamin Heim 10 months ago in Risk & Compliance 0 Open for voting

Context based issue types

We would like to use issues for different topics. Therefor it is necessary to define the attributes as well as the permissions based on the context in which the issue is opened. A issue opened from a risk has a different content set as an issue re...
Benjamin Heim 10 months ago in Risk & Compliance 0 Open for voting

risk hierarchy

In design it's possible to define a hierarchy of risks (eg. risk X consits of risk X.1 and risk X.2). ARCM does not support this concept.If it would be added, the principle is that a risk assessment would be done only on the lower level risks and ...
Koen Maes 10 months ago in Risk & Compliance 0 Open for voting