...

1. Open the page associated with the RegArea.

2. Click the Risks tile to display the existing list of risks associated with the RegArea.

   

3. Click Add New. The Create Risk > Create Control modal appears.

   This modal offers two ways in which you can assign a risk to a RegArea: You can either use an existing risk, or you can create a new one.

4. To select an existing risk:

   1. Click the Select an Existing Risk button in the top-right section of the modal.

   2. Use the Assign Risk modal that appears to search for existing risks and associate it with the RegArea.

5. To create a new risk:

   1. Enter a Risk Name and provide a Risk Description.

   2. Enter the Penalty amount that’s associated with compliance failure.

   3. If the risk includes Criminal Charges, switch on the toggle provided.

   4. Expand the Defaults Copied from Authoritative Document section to view the list of users who own the RegArea, and who will also own this risk once you save it.

      Click Clear All to remove the default owners from the risk, or leave this section unchanged to ensure that RegArea owners inherit this risk as well.

6. Click Save to create the risk without creating associated controls.

7. Click Create Control to add controls to the risk.

8. Specify a Control Name and Description.

9. Expand the Defaults Copied from Authoritative Document section to view the list of users who own the RegArea, and who will also own this risk once you save it.

   Click Clear All to remove the default owners from the risk, or leave this section unchanged to ensure that RegArea owners inherit this risk as well.

   Note: You can add new owners to the control by editing the control after you save it, or later on by clicking the name of the control in the RegArea or Controls page.

10. Click Save to create the control.

    A modal appears, where you must specify whether you want to navigate to the control you created, so you can start work on it, or whether you would like to return to the RegAreas page, so you can resume work on associated Authoritative Documents, risks, and so on.

11. Click Yes to navigate to the control you just created, or click Cancel to return to the RegAreas page. For guidance on working with the control, see Controls.

Editing the List of Risks Associated with a RegArea

...

To edit the details of a risk associated with a RegArea, click the name of the risk. For details on managing risk details, see Working with Risks.

Managing Controls Associated with a RegArea

...

1. Open the page associated with the RegArea.

2. Click the Controls tile to display the existing lists of controls associated with the RegArea.

3. Click Add New. The Create Control modal appears.

4. Enter a Control Name and Control Description in the fields provided.

5. Expand the Defaults Copied from Authoritative Document section to view the list of users who own the RegArea, and who will also own this control once you save it.

   Click Clear All to remove the default owners from the control, or leave this section unchanged to ensure that RegArea owners inherit this control as well.

   Note: You can add new owners to the control by editing the control after you save it, or later on by clicking the name of the control in the RegArea or Controls page.

6. Click Save to create the control.

   A modal appears, where you must specify whether you want to navigate to the control you created, so you can start work on it, or whether you would like to return to the RegAreas page, so you can resume work on associated Authoritative Documents, risks, and so on.

7. Click Yes to navigate to the control you just created, or click Cancel to return to the RegAreas page. For guidance on working with the control, see Controls.

Editing the List of Controls Associated with a RegArea

...

To edit the details of a control associated with a RegArea, click the name of the control. For details on editing a control, see Working with Controls.

Managing Policies Associated with RegAreas

...

To edit the details of a policy associated with a RegArea, click the name of the policy. The policy details appear. For guidance on working with these fields, see Editing a Policy.

Downloading Control Assessments of RegAreas

...