Case studyFortune 100: 80% less compliance workRead the Story
RiskWatch
Risk support · documentation

Facility Module for Risk Assessment Management Application

User Guide: Facility Module for Risk Assessment Management Application Welcome to the Facility(s) of our Risk Assessment Management application! Facilities form the foundational units within a Risk Assessment product, serving as the primary entities for which assessments are conducted to ensure adherence to regulatory standards and operational best practices. This guide will walk you through the functionality and capabilities of the Facilities in detail.

Updated 2026-05-14DocumentationRiskWatch platform

What is the Facility Module for Risk Assessment Management Application module in RiskWatch?

User Guide: Facility Module for Risk Assessment Management Application Welcome to the Facility(s) of our Risk Assessment Management application! Facilities form the foundational units within a Risk Assessment product, serving as the primary entities for which assessments are conducted to ensure adherence to regulatory standards and operational best practices. This guide will walk you through the functionality and capabilities of the Facilities in detail. It sits inside the RiskWatch risk workspace and shares its data with assessments, the evidence vault, and the audit-pack export so a single change updates every downstream view.

How do I use the Facility Module for Risk Assessment Management Application screen?

Open the RiskWatch app, navigate to the Facility Module for Risk Assessment Management Application module from the main menu, and apply the filters or actions described in the guide below. Permissions follow your role profile, so admins see configuration, assessors see workflow actions, and viewers see read-only data. Saved views and filters persist per user across sessions.

Key concepts in this module
Facility(s)FacilitiesWhat Is Facilityfacilityregulations, audits, or standardsOverview of Facility

User Guide: Facility Module for Risk Assessment Management Application

Welcome to the Facility(s) of our Risk Assessment Management application! Facilities form the foundational units within a Risk Assessment product, serving as the primary entities for which assessments are conducted to ensure adherence to regulatory standards and operational best practices. This guide will walk you through the functionality and capabilities of the Facilities in detail.

What Is Facility?

In the context of a Risk Assessment product, the term facility often refers to a specific physical location or site where a company conducts its operations. This could include manufacturing plants, warehouses, offices, or retail outlets, depending on the nature of the business.

In Risk Assessment terms, a facility might be subject to specific regulations, audits, or standards related to safety, environmental impact, data security, or operational practices.

Overview of Facility:

Facilities play a central role in Risk Assessment management, acting as the core entities where assessments and risk treatments are conducted to evaluate adherence to regulatory standards and internal policies. Each facility is assessed based on specific criteria such as safety, environmental impact, operational efficiency, and legal Risk Assessment. By focusing on facilities, Risk Assessment products enable detailed evaluations through tailored surveys and checklists, ensuring a comprehensive understanding of risks, gaps, and improvement areas. This facility-centric approach ensures that Risk Assessment efforts are localized, actionable, and aligned with organizational objectives and regulatory requirements."

How to Open Facilities screen?

Login to Risk Assessment product and click on Facility from the main menu.

It will show a drop down with Facility(s), Facility Type(s) and Region(s).

Click on Facility(s) option.

It will navigate you to the Facilities page.

How to Create a Facility?

Creating a Facility is straight forward process, the below steps followed by screenshots will guide you how to create a facility.

  1. Navigate to the facilities screen.
  2. Click on Add New Facility Icon at Top Right of the page,
  3. It will open you the Facility creation page.
  4. The page by default will show the following fields.

a. Facility

b. Facility type

c. region

d. Likelihood

e. Impact

f. facility Likelihood

g. Risk Register score

h. Risk Assessor

i. Risk Manager

j. Include Assessment Gap score in the Facility risk score calculation and Include Risk Register score in the Facility risk score calculation check boxes.

k. Address

l. City

m. State/Country/Province/Other

n. Zip

o. Country

p. Latitude

q. longitude

r. and Facility logo.

  1. Fill The Required Details to create Facility.
  2. Facility: Here we can enter the name of the Facility, for example: “General”. And here facility name is mandatory field, we can’t skip it to create a facility and we can enter any Text like Alphabets, numbers Alphanumeric, special characters and everything. Make sure it should not exceed 255 characters, Make sure that name of the facility should be unique, application won’t accept duplicate facility name.
  1. Facility type: Facility type is a drop down field and which shows all existing facility types in the application to map for this facility.

We can select any facility type based on its requirement for this facility and facility type selection is a single check here.

We can create our own facility types also from here to map this facility by clicking + Icon beside this field.

How to add new facility type from facility screen?

1. In Add/edit facility screen, go to Facility type field.

2. Here you can see one + icon beside this facility type field. Click on it.

3. It will open Facility type creation page under facility screen.

4. You can enter required data in Facility type name, description and in criticality field then click on save button.

5. You will get one confirmation message for creating the facility type successfully.

New facility type will be created and you will navigate back to the Facility screen

Here the facility type field is auto selected with newly created record.

Facility type also will not accept duplicates the name should be unique.

  1. Region: Region also a drop down field and which shows all existing Regions in the application to map for this facility.

We can select any Region based on its requirement for this facility and Region selection is a single check here.

We can create our own Region also from here to map this facility.

How to add new Region from facility screen?

1. In Add/edit facility screen, go to Region field.

2. Here you can see one + icon beside this Region field. Click on it.

3. It will open Region creation page under facility screen.

4. You can enter required data in Region and description and then click on save button.

5. You will get one confirmation message for creating the Region successfully.

New Region will be created and you will navigate back to the Facility screen

Here the Region field is auto selected with newly created record.

  1. Set Likelihood: Likelihood evaluates the probability of a threat event occurring.

in the context of threat assessment for a facility refers to the probability of a specific threat occurring within a given time frame. It's an essential part of risk analysis and is used to determine how probable it is that a facility will encounter a certain threat (e.g., burglary, natural disaster, cyberattack).

Here The Set Likelihood field is drop down and provides you to set the likelihood value in 2 ways.

Which are

Manual and

Determine by data.

When you select Manual option, it will display another 2 fields in the facility screen which are Manual Likelihood and Threat source field.

In Manual Likelihood By default, it sets to low value which is enabled from the settings. And you can choose your own value from the drop down list.

Make sure that what are the levels available/enabled in settings, those levels only display here to set the likelihood manually.

And Threat source field you can add the information about the Threat in details.

When you select Determine by data option, it will display another field called

Data Partners field. This contains 3 third party options to get the Likelihood value automatically, which are Cap index, Security gauge and world Aware

When you select Cap index, likelihood for cap index field and Report type fields will display and likelihood for cap index is a drop down field having 5 options range from 1 to 10 which are available from the settings enable conditions, user can choose any one option from the drop down.

The Report Type field is a dropdown menu with two options: 3 miles and 6 miles, indicating the CAP index radius. This selection determines the likelihood value coverage within a radius of either 3 miles or 6 miles based on the chosen option.

When you select Security Gauge, likelihood for Security gauge field will display and it is drop down field having 5 options range from 1 to 10 which are available from the settings enable conditions, user can choose any one option

When you select World Aware, likelihood for World aware field will display and it is a drop down field having 5 options range from 1 to 10 which are available from the settings enable conditions, user can choose any one option

Make sure that whatever the third party option you selected for the facility, that likelihood value will display here. And that likelihood value will display in Facility likelihood field.

if you select all 3 options then the likelihood value will be the maximum of these 3 options and it should be latest value.

And the Third party likelihood values we can get again while fetch these data’s at assessment level, so the latest value will be updated at facility level.

  1. Impact: The impact of the threat level in a Risk Assessment product refers to the potential consequences or severity of harm that a threat could have on the organization, its operations, stakeholders, and legal standing if it materializes. Impact is a critical component of a comprehensive risk assessment and is often analyzed alongside likelihood to prioritize threats effectively.

In Facility screen, Impact is a drop down field having 5 options Ranges from 1 to 5 categorized as Minimal, Minor, Moderate, Major and Catastrophic based on the enabled values from settings.

.

You can get the Impact levels information by mouse over the pop up icon beside the Impact field.

  1. Risk Assessor :A risk assessor for a facility in Risk Assessment refers to a designated individual responsible for managing or performing the survey overseeing Risk Assessment-related activities and communication at a specific facility. This person acts as the primary point of contact for regulatory authorities, internal teams, or external auditors regarding the facility's Risk Assessment status, documentation of an assessment, and adherence to regulations.

The selected users will act as a assessor to do the surveys for this facility assessments and to do the analysis of the assessment and offer recommendations to the risks, and creating tasks and completing them to decrease the Risk score.

You can add new Risk assessors from facility screen by clicking + icon beside this field.

And from here we can create only Risk assessor role users.

Click on the + icon, it will navigate you to the add Risk assessor page from the facility screen

Which consist First name

Last name

Email

Phone

Status

Job Title

Session time out

Risk Roles (contains only Risk assessor option)

Risk Assessor

Enter all required fields and click on save, the user will created successfully and you will navigate back to facility screen and the user got selected automatically as the Risk assessor user for this facility.

  1. Risk Manager: Risk Manager for a facility in Risk Assessment is an individual responsible for overseeing daily operations and ensuring that all activities at the facility adhere to applicable Risk Assessment standards, regulations, and company policies. The Risk manager plays a critical role in maintaining regulatory Risk Assessment while managing operational efficiency and safety at the facility.

Risk Manager field is a drop down and which shows all available active risk manager users and this is a multi selection drop down, user can select one or more and even all users as risk managers for this facility.

The selected users will act as a risk manager to do the surveys for these facility assessments and to do the analysis of the assessment and offer recommendations to the risk and monitor the risk life cycle and assigning tasks. This is to monitor the all activities of the mapped assessment.

You can add new Risk managers from facility screen by clicking + icon beside this field.

And from here we can create only Risk manager role users.

Click on the + icon, it will navigate you to the add Risk manager page from the facility screen

Which consist

First name

Last name

Email

Phone

Status

Job Title

Session time out

Risk Roles (contains only Risk Manager option)

Risk Manager

Enter all required fields and click on save, the user will created successfully and you will navigate back to facility screen and the user got selected automatically as the Risk Manager user for this facility.

  1. Include Assessment Gap score in the Facility Risk score calculation: when you check this check box, Assessment gap score of this facility will be included (from compliance assessment if we map this facility survey to compliance assessment (if it is a Dual product)) to calculate the Risk scores for this facility; otherwise it will not consider the gap score value.

Include Risk Register score in the Facility Risk score calculation: when you check this check box, Risk register score from the assessment of this facility will be included (from compliance assessment if we map this facility survey to compliance assessment (if it is a Dual product)) to calculate the Risk scores otherwise it will not consider the risk register score value.

  1. Address: Address field for a facility in a Risk Assessment product, is essential to ensure the field captures all necessary components for accuracy, verification, and regulatory requirements.

A detailed line for the primary address, including street number and name. Used to specify sub-locations within the facility if applicable.

Address is a text field which accepts alphabets, numbers and alpha numeric’s and special characters.

You can enter your valid address here for your facility.

  1. City: The city where the facility is located, you can enter the facility city, it will auto populate some cities as per your entry you can select from them, cities will be auto populated based on our entry in that field.
  2. State/country/province/Others: is the administrative division within the country. you can enter the state of the facility , it will auto populate related states as per your entry you can select from them, states will be auto populated based on our entry in that field.
  3. ZIP: The postal code for precise location identification, you can enter your facility ZIP code here., it can accepts alpha numeric values.
  4. Country: This is the name of the country, and it is a drop down field, by default it will show united states, you can select any country of your facility from the drop down.
  5. Latitude & Longitude: These are the geographical co ordinates for mapping and verification purpose to locate your facility accurately., you can enter your coordinates here for better accuracy of your facility location.

If the Google Maps Address Verification checkbox is selected in the General Settings module, the latitude and longitude fields will automatically populate when a valid address, or a combination of city, state, and country, is entered and saved.

  1. Facility Logo:

This is pictured recognition of your facility, by this you can upload your facility logo using upload button and ensure that uploaded image will need to meet these dimensions 1600(w) x 544(h) pixels.

You can remove this logo anytime by just clicking the clear button.

Now click on save button, your facility with all these entries created successfully and you will get confirmation message as your facility saved successfully and it will navigate back to the Facilities grid and the grid shows your created facility.

To create the facility Not all the above fields are mandatory, you can create your facility with only providing facility name if you not required to keep all other data.

How to view/open the facility

  1. Go to Facilities screen.
  2. Click on view details icon in the 1st of column of the grid for the required facility.
  3. Or you can click on pen icon in the action column for the required facility.
  4. It will open your facility.

  1. And the facility will display with all information you provided and with appropriate Tabs as per your selections(Third party)and mappings( Document & Custom fields).

What we can edit from the existing facilities

Now in edit facility screen, you can edit every field and update. The latest changes will be applicable for all over application.

We will go through it in details in below steps.

Facility name: you can update the name of the facility by clicking on it and enter your data or modify the name, once you click on save, the facility name will be updated, so the latest change will be applicable for entire application and to the new assessments to this facility.

Facility Type: you can change the type of the facility by clicking facility type field or you can add new facility type and map to your facility.

While clicking on save,

And based on the facility type the entire survey will show/hide from the assessors/managers/ owners/users and view only users.

So all the previous survey information will be removed and show the new survey with the new facility type.

And ensure that the facility type change will be applied for new assessments only.

You can create the new facility type as well and map to your facility.

Region: Same as the Facility type, you can change the region of your facility and save, the latest region will be mapped for your facility and the results will be updated all over the application.

You can create the new region as well and map to your facility.

Set Likelihood: if your facility is manual likelihood one and you want to change it to third party likelihood feature or vice versa, you can change it from here.

So the previous third party results will removed and update as per the manual selection and if you change it to third party, the latest maximum fetched value should be updated as your likelihood.

You can change your manual selection of cap index, security gauge and world aware ranges from their drop downs. The latest value should be update to the facility.

Risk Register score: In edit facility only, the register field will enabled and display the risk score, if this facility having compliance assessment (in dual product) and are answered earlier.

So the risk score from the survey screen will be displayed here, ensure that Risk score should be from latest assessment for this facility.

Impact: You can change the Impact value from edit facility at any time and in n. no. of times, the latest changes will be applicable for all over application including existing assessments without selecting any existing assessments.

You can check/un check the Gap score value and risk registers score value involvement in facility risk score calculation at any time and in N no. of times.

These changes will only applicable to new assessments, existing assessments wont be effected with these changes.

Risk Assessor: You can check/Un check a assessor selection for a facility, means you can remove your old assessors or you can select new assessor or you can keep the existing one add some more assessors and map o this facility.

By the result, Removed assessors will not get the assessments of this facility even that assessment is answered by the same removed assessor earlier.

And newly mapped assessor will get the assessment information of this facility.

Admin can get all assessments information even if they are not mapped to those facilities.

Risk Manager

You can change the supervisor of your facility at any time and N no. of times, so the mapped managers as a superviosrs will get the assessment survey. If you want do the survey and add recommendation and create the task assign to someone and make the risk score in low

But as a site supervisor, you will get all Tasks information related to your mapped facility assessment but you can’t edit the task until the task created by you or assigned to you, you can just view the task information.

And while changing the manager, it will not ask you to update existing assessments, it will directly update to all existing assessments and new assessments also.

Address, city, State/country/Province/Others, Country, Latitude and Longitude: You can change your address details of your facility at any time, so that all your geographical risk related calculations will be changed as per your latest update and these changes will be applicable for all over application.

Based on your location or geographical area, the risks may vary.

Facility Logo: you can change the logo by clicking clear button and upload your own logo any time and in N. no of times, all changes will be applicable for the entire application

You can click on save for any of above modifications, so your updated will be saved successfully.

How to Delete Facility:

You can delete facility in 2 ways.

  1. Open facility screen.
  2. Click on delete icon in action column for the required facility.
  3. Or open the required facility and click on delete button at the Bottom right.
  4. You will get one confirmation message as do you really want to delete the facility? With Yes or No buttons.
  5. If you click yes, the facility deleted successfully and you will get confirmation message as Facility deleted successfully at the top right
  6. 6. And you will navigate back to the Facility Grid, the grid should not have your deleted Facility.
  7. If you click on No button, pop up will be closed and get back to facility screen.

If a facility already has associated assessments and you delete the facility, it will be removed from those assessments. If an assessment only includes the deleted facility, the entire assessment will also be deleted. Additionally, the facility's license will be credited back to your account.

How to search the specific Facility from the Grid

  1. You can get the specific record from the grid by using search field and also from the Filter feature as shown below.
  1. We can filter the records by using all columns of facility in that facility data table.
  2. You can get the data by clicking filter icon in all columns of table and you can choose starts with or ends with, contains, equals and so on.. which are available in drop down.
  3. you can get whole data by clicking clear button in this drop down.
  4. You can get all the facility details into excel data by clicking export icon at the Top right. And also you can Hide or see the columns by clicking columns icon beside the export icon.

Events: Events or logs are the excellent features in applications for tracking and auditing user activities and system operations. They provide a detailed record of actions performed, helping to ensure transparency, traceability, and Risk Assessment. Here's an overview:

Purpose of Events

  1. Action Tracking: Record user actions such as creating, updating, or deleting records.
  2. Audit Trails: Maintain a history of changes for Risk Assessment and accountability..
  3. Performance Analysis: Log metrics to analyze application performance and usage.
  4. Security: Detect unauthorized access or suspicious activities.

User Activities

    • Login/logout events.
    • Data creation, modification, or deletion.
    • Accessing sensitive modules or information.

Benefits of Events/Logs

  1. Improved Troubleshooting: Quickly identify issues by analyzing error logs.
  2. Risk Assessment Support: Meet regulatory requirements by maintaining detailed audit trails.
  3. Enhanced Security: Detect anomalies such as unauthorized access.

How to get the Events in facility module?

  1. Open Facilities
  2. Click on events Dropdown at the Bottom Left of the screen.
  3. It will show you the all captured events for the Facility Module.
  4. This feature will show you the Events table along with filters option, search, sort and export options.

Events Table is having the following columns

  1. Action Performed
  2. Performed By
  3. Module
  4. Action date
  5. Action Info and
  6. View details columns

Action Performed: It will describe what action could be performed

Performed By: It will display the user mail Id who performed the action.

Module: The part or section of the application where the action occurred

Action date: It tells about the Timestamp the exact date and time of the event.

Action Info: It tells about the Facility, which facility is effected for the update.

View Details: When you click on this icon, it will display complete information of the action, like create, update and delete with detailed information like what is the before change of the facility and what is after change of the facility and which field is effected under that facility.

You can get the Specific log by search the record or filter the record by using filters and search field.

Filter feature give you the all column options to get the exact record.

every time when you open the events, only default filter records will display here.

You can download the all logs data into excel sheet, there you see, what is the before change and what is the after change.

What are the Other Tabs available in facility screen?

In Edit facility screen, we have third party option tabs based on our selection while creating/updating the facility and also Document, Risk Identification and Custom Fields Tabs will be available based on the settings we setup for the facilities, here we have detailed view of all the available tabs in the facility field.

I.Documents

This is an effective feature for the Facilities, if the organization having any policies/Documents by the facility level, they can add those documents in this tab and a facility can have multiple policies/documents.

Here we can see the step by step process for the Document adding, editing and deleting to the facility.

  1. How to go to Documents?
      1. Navigate to facilities page.
      2. Open any existing facility.
      3. Click on Document tab.

      1. It will open the Documents page, which shows documents grid.
  1. How to create a new Document for the facility?
    1. Open Documents page
    2. Click on Add new Document button at the Top Left. Or you can click on + icon in the action column of documents data table.
    3. It will take you to the Document creation page.
    4. Document creation page having the following fields.

Document Number

Facility

Document Name

Effective Date

Expiry date

Status

Sub status

Document Admin/manager

Document Model/type

Approver

Upload Document Button.

Document Number: This is a system generated random number to provide ID to the Document.

Facility: This is predefined field and populated with the opened facility name, you can’t change facility here.

Document Name: Here you can provide name of your document, it can be a alpha numeric’s and combination of special characters and alpha numeric data.

Effective Date: This Document usage will be start from this selected date, this is also a input field and shows you the calendar, there you can pick one date and set as an effective date.

Expiry Date: This is an input field, it will shows you the calendar when you click on it and here you can set one date for this document life Span., so till that date, the document will be Active.

Status: This is the field which gives you document current status like is it Active or Inactive.

Sub Status: This also describes the status of the document but this is having static pre defined options to select which are

Under review

Updated

Rejected

Approved

Initial Draft

Red Lining

Correction in Process

Ready for Execution

You can select any one option from this above list for the document

And you can create your own status by clicking on the + icon beside this field.

Document Admin/Manager: This is a drop down field and which shows all available active users, here you can select one user as a document admin/Manager., This is a single selection field, so that you can map only one user to this document at a time and by default it will populate the assessor of this facility

So from this time, this selected user will be responsible for this document and this user will get mails regarding this document based on the customization we did in settings.

Document Model/type: This is also a Drop down field which tells about the type of document you uploaded here. This is providing the 13 static pre defined options to match your documents to this types.

And the options are

Insurance

Leases

Maintenance

Non Disclosure

Purchasing Agreements

Purchase orders

Service

Software license

Subscriptions

Warranties

Supply agreements

Quotations and

Others

Ensure that you can create your own customized Document type by clicking the + icon beside the field.

Approver: Approver is also a user field; here you can select one user as an approver for that document, so the document/policy can be valid only if the approver approves the document. Approver also a single selection field, so only one approver can approve/reject the documents of this facility.

Ensure that when you login with this approver, he can view or access this document from the facility screen.

By default, Risk assessor is mapped as approver for this document, you can change this at any time as you required.

Upload Document: Using this button, you can upload your policy document by clicking on this button. This is Mandatory field for this page, you can upload any word document file as your policy/document for this facility.

Finally click on save button, you will get a successful message at the top right and shows you the Document grid having this added document.

  1. How to Edit the Document?
  2. Go to Documents tab in Facility screen
  3. Click on edit icon in Actions column overview details icon in the first column.
  4. It will open the Edit document page.
  5. From Here except document number, Document facility, remaining all fields can be change and update by clicking save button.
  6. These changes will be updated to this facility.
  7. How to view the uploaded document?
  8. Go to document page in edit Facility screen
  9. In the grid, you have a column called Document view
  10. Copy the link on that document view column and paste in browser, you can download and view your document
  11. Also when you open the document, in edit document page, you have an option called Document View, from there you can view the document.
  12. It will preview your document in a pop up.
  13. And you can maximize your document by clicking close button and you can exit from this view by clicking close button.
  1. How to delete the Document?
  2. Go to Documents tab in edit facility screen.
  3. Click on Delete icon in Actions column.
  4. It will show you a pop up which says Do you really want to delete this document with yes or no buttons
  5. If you still click on Yes, the document will be removed from this facility.
  6. And if the facility having only one document which is deleted, then it will display empty documents page in edit facility screen.

II. Custom fields

Customize fields in facility is a powerful feature which describes the Customizable response types for the facility by providing customize fields.

This Fields should be display to the facility based on their Facility type selection.

In settings, we can configure facility fields with the facility types.

Here the facility type selection is a multi check, so a facility field can have the multiple facility types, in result, a facility having multiple facility fields and also 1 or more facilities having the same facility fields.

Facility fields are Predefined fields in settings, which are

Text

Number

Date

File

Currency

And Text Area

The facility screen displays the mapped facility fields associated with each facility type that has been assigned to those fields.

  1. How to view the custom fields?
  2. Open the facility from facility screen.
  3. Click on Custom fields
  4. It will show you the added facility fields here from the settings.
  5. If no custom fields are added from settings, no data will be shown here, it will show empty custom field page in edit facility screen.
  1. How to answer the custom fields?
  2. Open the custom fields tab.
  3. Here it can show you the fields name and field type boxes.
  4. In field type you can enter your response as Text or number or date or file or currency or text area based the type you selected for this facility.
  5. And click on save, you will get confirmation message at the top right
  6. Ensure that one facility custom fields responses should not be update to the another facility having same type of custom fields.

You can view or answer the custom fields from the facilities data table also by just clicking the custom fields icon in the actions column.

From here, you can view the custom fields of the facility and if you want answer them you can add it from same pop up showing here.

III. Cap Index:

This column will be enable only when we select the cap index option as a third party data and when we fetch the data while creating/updating the assessment of this facility.

The tab will show you the latest cap index score along with the cap index report link with time and date stamp.

It will provides you the all time records of cap index report links.

Ensure that the cap index tab will be disabled/not clickable/unable to open when we don’t fetch the data.

IV. Security gauge:

This column will be enable only when we select the security gauge option as a third party data and when we fetch the data while creating/updating the assessment of this facility.

The tab will show you the latest security gauge score along with the security gauge report link with time and date stamp.

It will provides you the all time records of security gauge report links.

Ensure that the security gauge tab will be disabled/not clickable/unable to open when we don’t fetch the data.

V. World Aware:

This column will be enable only when we select the World aware option as a third party data and when we fetch the data while creating/updating the assessment of this facility.

The tab will show you the latest World aware score.

Note: Facility module is available for manager user role also, he can able to create his own facilities and he can edit and delete his facilities.

But make sure that he cannot edit or delete the facilities which are created by the other users.

Along with his own facilities, He can only able to view the facilities which are created by other users and mapped with this user role

III. Risk Identification

The Risk Identification page in RiskWatch is a critical component of the Risk Assessment module. It serves as the workspace where you identify and map risks to specific facilities at the assessment level. Additionally, this page enables the configuration and monitoring of Key Risk Indicators (KRIs) to assess the effectiveness of controls and the likelihood of risks.

Mapping KRIs to Risks

KRIs (Key Risk Indicators) are measurable metrics used to monitor potential risk exposures in real time or periodically.

  • In RiskWatch, you can map KRIs to individual risks during the risk identification process.
  • This mapping enables the system to track indicators that signal changes in the risk profile or control effectiveness.

KRI Configuration Methods

You have two primary options for configuring KRIs in RiskWatch:

1. Manual Configuration

  • Used when KRIs are updated manually by users.
  • Users enter values or status updates based on operational data, audits, or observations.
  • Suitable for KRIs like:
    • "Number of reported security incidents this quarter"
    • "Downtime hours in past 30 days"

2. Questionnaire-Based Configuration

  • KRIs are tied to responses gathered through questionnaires.
  • When users complete questionnaires, KRI values are automatically derived from the responses.
  • Ideal for subjective or procedural KRIs, such as:
    • “Is visitor log maintained daily?” (Yes/No)
    • “How frequently are access reviews conducted?” (Monthly/Quarterly/etc.)

Ensure that Risk identification tab shows you the data only when the facility having risk assessments, and risks are dumped in assessment level.

How to Navigate to the Risk Identification page?

  1. Go to facilities and open any existing facility.
  2. It will display the all available tabs beside the facility tab.
  3. Make sure that Risk identification tab enables only when the facility is having Risk assessments and the assessments having some risks and are opened at assessment level.
  4. Otherwise, facility will not show the risk identification tab.

What we can get from Risk Identification page?

In Risk identification tab, it will display the list of risks which are mapped to this facility and are opened in assessment in each template and their likelihood, impact and inherent risk scores.

The data table shows you the list of risks in the below format

Can we download this list of risks associated with this facility?

Yes, we can download all the risks associated with this facility into a separate excel sheet by clicking the excel export button at the Top right of this data table in risk identification page.

What are the default columns of this risks data table and can it manageable?

The data table to gives you 6 columns of information and one action column, which are

Assessment Name: Here the actual assessment name will display which is created for this facility.

Template Name: Displays the template of the risks which are actually belongs to

Risk name: The actual Risk name will display here.

Likelihood

Impact

Risk Score

Actions column: it contains 2 icons, Edit and delete icons.

How to open the Risk Information?

      1. Go to Risk identification tab in facilities.
      2. Click on Pen icon in Action column for specific Risk in Risks data table.
      3. It will open Risk details page with KRI’s Information

What we can do when we edit the risk in Risk identification?

  • When a risk is opened within the Risk Identification tab, the system displays a list of all Key Risk Indicators (KRIs) that have been previously mapped to that risk—whether they were added through the KRI Library, during the risk creation process in the Risk Templates module, or directly within the Risk Identification page itself.
  • From this page, users can both map existing KRIs to the selected risk and create new KRIs as needed. However, it's important to note that after a KRI is mapped to a risk, it must be fully configured in order for its values to be actively reflected and updated within the risk assessments for the corresponding facility. Only after configuration will the KRI begin to influence the risk scoring and monitoring process within the assessment.
  1. How to Map KRI’s to the Risk?

When we open the risk, it will display the Template drop down, Risk drop down and KRI’s drop down at the top and followed by KRI list data table.

In above drop downs, by default the selected risk information should be populated means risk template, risk and mapped KRI’s if any.

In the KRI’s table also if any KRI is mapped to this Risk, the list will be displayed here in each row.

You can click on KRI drop down and select any one or more KRI;s from the list, so the selected list will be added in the KRI’s table as below figure.

If you don’t want to map existing KRI’s to your risk or available KRI’s are not suitable to your risk, you can create new KRI by using + icon beside select KRI dropdown and then map to the risk.

You can select any risk from any template which are available in risk select risk and select template drop downs of this facility and you can map KRI’s.

How to monitor the Risk using KRI’s?

Key Risk Indicators (KRIs) play a crucial role in ongoing risk monitoring by providing measurable signals that help determine whether a risk is increasing, decreasing, or remaining stable. In RiskWatch, once a KRI is mapped and configured for a risk, it enables data-driven monitoring of that risk.

How to configure KRI’s?

Once you map a Key Risk Indicator (KRI) to a risk, it must be configured properly so that it starts tracking values and influencing the associated risk. Configuration defines how the KRI is measured, how often it updates, and what thresholds are acceptable.

Here we have have 2 types of configurations

Which are i. Manual configuration &

      1. Questionnaires based configuration.

What we can see in KRI list table?

KRI’s list table consist of

KRI’s name

Description

Threshold

Owner

Frequency

Trigger Date

Severity

Status

Data collection mode &

Actions

Initially, before configuring the KRI, all columns showing empty KRI name and description.

What steps need to follow to configure the KRI?

  1. Click on Action column pen icon for individual KRI of risk from the KRI list table.
  2. Now it will enables, owner, frequency, trigger date & data collection mode columns.
  3. Select one user as owner for this KRI from owners dropdown, it will display only Admin users to use as owners of KRI.
  4. Make sure that to respond this KRI, only selected owner can get the details in My actions>KRI response page.
  5. Click on Frequency drop down which contains 5 pre defined options which are

Never : No KRI monitoring will be happened when you select this option

Yearly: KRI monitoring will be occurred yearly once

Monthly: KRI monitoring will be done for every month

Weekly &: KRI monitoring will takes place weekly

Daily: KRI’s can be monitored daily.

  1. Click on Triggered date column and select one date from the calendar.
  2. So the monitoring will be triggered from this selected date.
  3. Click on data collection mode and which contains 2 options which are

Manual & : in this case user has to manually update the KRI value with some number and set the threshold value based on the current situations of that facility based on the risk.

Survey: in this case, user has to set up some set of questions and add some weight to the questions and setup the threshold value.

  1. Click on right mark in actions column, you will get one success message and
  2. if it is a survey configuration, immediately it will open add questionnaires pop up with add button.
  1. Click on add question button and it will open question creation page with following fields.

Question text

Response type(single or multiple options type)

No. of options

Response text( based on no. of options, it will be displayed) &

Response weight ( having some predefined likelihood values which are available from settings)

Save & cancel buttons.

  1. Enter all valid details and add the question weight and click on save button.

It will display the question in the grid along with success message in add question information pop up.

  1. You can add multiple questions to this KRI by using add question button.
  2. Can we edit the questionnaires? And can we download?

Yes we can edit the questions by using action column pen icon and we can download them into a excel sheet by using excel export option available in the add questions page, and also we can manage the displayed columns information by using columns button.

You can view thiese questions set at any time by just clicking the 3 lines icon in action column of KRI list table.

  1. How to set the Threshold value for the KRI?

Click on threshold column + icon in KRIs list table.

It will display threshold configuration pop up with Response list drop down and by default one response will be displayed in the table as shown in below figure.

We can select more ranges from the response list drop down, which contains 5 options

Rare

Unlikely

Possible

Likely &

Certain

  1. Add from and To ranges for each response and click on save.
  2. So once we answer the questionnaires and based on the response weight we will get one value, based on the ranges we have in threshold and we can decide the KRI level for the output we got through the questionnaires.
  3. That will be the final KRI value for your Risk and it can be changed as per the frequency and updated in severity column of the KRI list table and also in the assessment risk life cycle page.
  4. How to stop the KRI monitoring?

If in case we don’t have any use of this KRI and you want to stop monitoring it, you can click on stop icon at the Action column of the KRI list table in Risk identification, otherwise monitoring will be processed on every frequency duration.

You can get back to the risk identification grid from the KRIs list page by clicking back to grid button available at the top left.

Ensure that Manager can have facilities screen and he can do all operations on the facility but specific to his mapped or created facilities.

Risk assessor, Risk users and Risk owner not having the Facilities screen

Common questions about Facility Module for Risk Assessment Management Application

What does the Facility Module for Risk Assessment Management Application module integrate with?+

The Facility Module for Risk Assessment Management Application screen shares records with the rest of the RiskWatch risk suite: Facility(s), Facilities, What Is Facility, facility, plus the cross-mapping engine that connects risk controls to other frameworks like ISO 27001, SOC 2, HIPAA, NIST 800-53, and PCI DSS. There is nothing to wire up, the integrations are native.

Where does the Facility Module for Risk Assessment Management Application fit in the RiskWatch risk workflow?+

It is one of 27 screens that make up the Risk module. Most teams reach it from the risk dashboard while running an assessment or reviewing posture. See the related-topics sidebar for the workflows it feeds into and the upstream screens that feed it.

References and related standards

Standards and references the Facility Module for Risk Assessment Management Application module aligns with, plus related RiskWatch documentation.

Stuck on this workflow?

Talk to support, or have a solutions engineer walk you through the workflow on your tenant.

Request a Demo