ARM5 1UserGuide
ARM5 1UserGuide
ARM Desktop............................................................................................................................9
ARM Toolbar .......................................................................................................................11
Audits ..................................................................................................................................... 41
General Audit Search ..........................................................................................................41
Folder Hierarchy
To further aid the management of risks, ARM has a predetermined hierarchy where specific
information can be stored. The ARM Administrator is responsible for adding new projects as
and when required.
The 4 levels consist of:
Business Unit
Project
Activity
Risk
What is a Risk?
TfL has defined business risk as the threat that an event or action will adversely affect the
ability to achieve business objectives. Business risk arises as much from the possibility that
opportunities will not be realised as it does from the possibility that threats will materialise or
that errors will be made.
Note: If the Remember my password box is checked, the system by-passes the log in
dialogue, and takes you directly to the welcome screen.
Control Bar
Control Bar gives access to ARM menus, toolbar and viewing controls to select data
to be shown in the Viewing Panel
Activity View (default view) displays, in a tree structure, the business areas within TfL
View Panel data shown here can relate to risks, plans and actions from a business
area or filtered data across many areas
After all data is entered each risk accumulates a Risk Level. This indicates the impact the risk
could potentially have on the project if not appropriately mitigated.
Menu The menus provide access to the all the functions within ARM
The ARM toolbar contains a set of buttons that allows you to perform
specific functions in the specific area you are working in. Note: The
Toolbar
majority of these functions are also available as shortcuts when you use the
right mouse click
Icon Meaning
Maximise the screen by hiding the Control Bar area and Activity View
area
Help guide
Run Reports
Paste data
Cut data
Aggregate PID
Refresh
Note: Some of these functions are available when the right mouse button is clicked
Using the Detailed Risk entry screens, allows all details of a risk and its mitigation to be
entered. It ensures sufficient data recorded about the risk at hand.
The detailed risk entry screen is split into 4 tabs, each one reflecting part of the risk:
Plan: What can be done to manage the risk, including high level strategies/fallback as
well as listing all related Actions
Action: What will be done to manage the risk, proactive actions, controls and
recovery fallback Actions
Note: You can also right-click in the View Panel to create a new risk or click on the
toolbar.
Note: If an ID is not entered, ARM will create one when the risk is saved.
2. Enter a Title for the risk. This should be a brief high level statement that describes the
risk
3. Select an Owner by typing in a name in the format: surname, first name or by clicking on
the Group List button . This should initially be the KRR unless the Risk Owner has
already been identified
After clicking the Group List button the Owner window displays. Names appear against 2
background colours. Blue indicates a Risk Manager, and white indicates a resource that has
been assigned to a risk.
Note: Your business area will have a specific process for approving risks and will be able to
choose from the list below.
Approved - Status when the risk and mitigation plans have been approved
Closed Mitigation - Select this status if the risk cannot occur, i.e. the probability is =
zero
Closed Impacted - Status if the risk crystallises. Probability is 100% and risk/issue flag
is set to issue
Closed Expired - Status when the period in which the risk could occur has ended.
Probability = zero
KBase -XXXX
Note: For a new risk the initial risk status by default is Emerging.
5. Select an appropriate Category by checking the box. Multiple selections can be made
here. Move the mouse away from the dropdown box to continue
6. Enter any Interested Parties using the Group List button. An interested party is any
person who is interested in the specific risk
7. Project Phase - Select an appropriate phase
(for non-projects choose Undefined)
8. Enter a date into the Risk due for review by field
Note: Clicking the plus sign next to any of the fields expands a comments box. Or click the
Maximize Fields button (located bottom right).This is also the case when viewing existing risks.
Note: If a change has not been saved, on any of the tabs, a pen symbol will be displayed to
indicate this.
If the Close button is clicked prior and changes not saved a pop up window will appear to
confirm user intention
Spell Check
Each tab holds a spell check facility.
After entering all text, click on the Spell Check button (located bottom left)
A pop up box appears, offering alternative suggestions for incorrectly spelt words.
3. Select Approved
Once approved the Approval date filed will populate with the days date.
4. Click Save
Once save is pressed the Risk Status Change window appears.
5. Enter a reason for changing the Status, i.e. risk has been approved by KRR name/Meeting
etc on 1 April 2012
Note: Meaningful information must be entered into the reason box. This will ensure that
another user has a clear understanding as to why the change had occurred. This can also be
viewed in the Audit Trail. For further information refer to page 37
6. Click OK
The Risk title is copied across to this tab and an Impact ID automatically generated.
2. Select an option from the Timeframe Impact scored over drop-down menu
3. Enter a date into the Exposure Start Date field
4. Enter a date into the Exposure End Date field
Note:
Exposure Start Date This field should be used when the risk exposure commences if the
other timeframe option has been selected from the Timeframe Impact scored over field.
Exposure End Date This field should be used to state when the risk exposure concludes if
the other timeframe option has been selected from the Time Impact scored over field.
The bottom half of the screen is where the Current Impact details (left hand side) and Target
Impact details (right hand side) are logged.
The Cost and Time impact fields always remain greyed out as they are common impacts to
monitor.
6. Enter the Expected Cost impact per 1000
7. Enter the Expected Time impact in weeks
8. If any other impacts need to be logged, click on the drop-down menu under Time and
select the appropriate Impact option
9. Once selected the Expected field displays and the figures can be added. Repeat this
process if necessary
10. Click Save
Once saved, the Impact category is displayed. This is used as a guide to interpret the
consequence of a risk.
The Overall Risk Level is also calculated. Colours are also used to aid quick interpretation.
This chart can be used to directly select the rating of each impact type, based on the current
Scoring Scheme, simply by clicking in its box; however it is best practice to enter figures into
the Expected field rather then using the reasoning of low, medium, high etc. If the figures
have already been entered they will be shown on the Scoring Assessment screen.
Tolerate Risk should be tolerated as mitigation actions are not possible or not cost
effective
Transfer The risk can be transferred to an external organisation and impacts, were
the risk to occur, would not impact TfL
Actions Tab
If the plan requires actions then they must be recorded.
Having recorded a Risk click the Plan tab and click the New Action button
11. Choose a option from the drop down menu for the Delivery Urgency field
12. Enter the Planned Cost
13. Enter the Start Date (valid from) and Due Date (Review Date)
As Actions can be edited at any time, the Percent Complete and/or Due Date can be updated
when required.
14. Enter a Description of the Action
15. Enter any additional Comments
16. Click Save
17. Click the Plan tab to see the new action with its automatically generated Action ID
Editing Actions
Basic action data can be edited by clicking on the Action within the Plan tab.
To edit the full Action data first click in the Action on the Plan tab then click on the Action
tab. You can use the up / down arrows to navigate through them.
To review a risk:
1. Locate the risk and open it
2. Click on File and select Review Risk
A Comments box will open:
Note: The person undertaking the review should consider all aspects of the risk including
whether the scoring is still appropriate and whether the mitigation actions are progressing as
expected
2. Enter the ID
3. Select the Element Type
4. Click OK
The relevant screen will open, displaying all recorded data.
Customise Columns
A default set of column headings is set by your ARM Administrator. If desired you can create
and save your own set of customised headings
1. Click the Select Column Configuration button below the toolbar
3. The Default column configuration is shown which is non editable. Click the New
button to create your own
Copy
1. Click Edit on the menu > Select Copy
2. Right-click on the risk from the Desktop > Select Copy from the pop-up menu
3. Click on the Copy button in the toolbar
Cut
1. Click Edit on the menu > Select Cut
2. Right-click on the risk from the Desktop > Select Cut from the pop-up menu
Copying a Risk
1. Check the box of the required risk(s)
2. Copy the selected risk(s) using the preferred method. The selected records will be shown
in red text
3. Select the destination node within the relevant structure
4. Paste the copied risk(s) using the preferred method
Note: Using the Paste Risk Linked Here function, the established link does not enforce
any special behaviour on the copied risk, i.e. there is no logic of interdependencies created. It
is simply a way for users to identify that risk X has been created as a copy of risk Y.
Once the paste function has been selected, the Copy Masking window appears.
5. Check the box to indicate whether the Static, Ownership, Scoring, Risk or Mitigation Data
should be masked (removed) when copied. Multiple selections can be made here.
6. Click OK
Create a Filter
1. Create a new filter by clicking the funnel icon from the Control bar
All Nodes Filter records from all business area to which you have access
Current Node Filter records from the currently selected business area
9. Include risks scored using a specific scoring scheme by selecting from the dropdown
Note. If this section is not visible then click the icon to expand
10. From the Ordering section you can specify up to 3 fields with which to order the filtered
records and their sort order (ascending / descending)
13. Your results will be displayed and the Control bar will show the name of the filter
currently applied
14. To remove a filter click the filter dropdown on the Control bar and select No filter
Note. Filters can be set up without saving them for future use. Simply create the filter but do
not save. Just click the Run Filter button to see results. The filter button will read Ad hoc for
an unsaved set of criteria
3. The filter criteria will be displayed. Make the changes and click Save
4. Delete the filter using the Delete button
The Aggregate PID Filter displays. If relevant the user can select whether all children
elements should be included in the PID Diagram. Users can also select whether the data
should display Summary & Stand-alone Risks or Detailed & Stand-alone Risks as well as
applying an alternative scoring scheme for reassessment.
The above example has five probability band (vertical) and five impact bands (horizontal). The
black boxes illustrate the number of risks. White boxes illustrate the number of targets
recorded.
The chart can also be copied and used for use in external reports.
When in Point mode, users can interact with the chart by hovering over the dots to show the
link to the relevant target.
List/Data Reports
Analysis Reports
Domain Reports
Create a Report
Reoports can be access by choosing Open Reports from the Reports menu
To run a report use the Filter Selection to choose your parameters for the report you want to
run:
1. Under the Filter Selection section click on Change Business Area & change the Business
Area if required you require by clicking the tick box from the list available.
Note. Your report will be displayed in the same browser window. Use the browsers Back
button to get back to the previous screen.
2. Make any required changes and click the View Report button to apply the changes
3. Select a Function
4. Select methods to Sort the audit search using the drop-down menu. They can be sorted
by Date or by User Name, Ascending or Descending.
If there are more results than can be displayed on one page, they will be split across multiple
pages
5. Enter a Start and End Date if applicable
6. Click Search
The search data is displayed.
System Support
If you experience any problems with ARM and require system support, contact IM Helpdesk
on Auto 1555.