If you do not have roles created for each group that will be requiring their own view/version of the Risk Evaluation module, you must log in as an administrator, create roles, and link the user or user group to that role. For the use case example, we would create roles for the Information Security and Physical Security stakeholder groups, and link their respective users to the role.

Once the roles have been created, you now must link each of them to the associated evaluation module. In the use case example, you would link the Physical Security and Information Security roles to their own respective Risk Evaluation modules. Once linked, only users in the Physical Security and Information Security roles would be able to view the modules to which they are linked.

To assign a role to an evaluation module:

1. Access the Page List.
   1. Select the Default GRC context from the context menu.
   2. Click the Administration tab.
   3. Select Pages from the Layout group.

      

   4. Click the page or sub page name from the list.
   5. Click Expand to view the tree to locate a sub page if necessary.

      

2. In the tabs section, go to Invisible Tabs (Portal)/SarbOx/Risk Matrices/ProcRiskform (SarbOx).
3. Highlight one of the 10 Evaluation modules in the Content Pane window in the Organize Modules section and click Edit.
4. Click Edit in the Evaluation module you have chosen.
5. Rename the module after the corresponding stakeholder group (i.e. Information Security Evaluation, or Physical Security Evaluation) and assign the roles you created for the user to the module.

Note: For more information on editing modules, see Edit a Module.

Once you have linked the Risk Evaluation forms to their respective roles, you will configure the Information Security Evaluation and Physical Security Evaluation versions of the Risk Evaluation module according to the needs of the individual stakeholder groups.

1. Open the risk form by accessing a risk through the RCM for the entity. Because you have administrative rights, you should be able to see all Risk Evaluation modules. For our use case, the Physical Security Evaluation and Information Security Evaluation modules are showing

   Note: For more information on accessing the risk form, see Add and Manage Risks.

2. Click Configure in the version of the Evaluation module you wish to configure. From here, you can configure field names, field behavior (visible, required etc.), field layout (height, width etc.), and field security.

Note: For more information on configuring a form, see Configure a Form.