Enable Risk Management

Learn how to configure your Vault for the Risk Management feature.

About the Feature

With the 24R3 release, Vault SafetyDocs allows you to track the authoring, approval, and distribution of global and local risk management plans (RMPs) and additional risk minimization measures (aRMMs), as well as categorize and track identified risks with measures to be taken globally and by market.

After you have configured this feature, see the following articles for more information:

• Configure Countries for Local Risk Management Plans
• Track Risk Management Plans

Overview

Complete the following procedures to configure Risk Management in your Vault:

1. Configure Security
2. Configure Objects
3. Configure Document Workflows & Lifecycles

Configure Security

Complete the steps in the following sections to configure security for this feature:

• Copy the Risk Actions Permission Set
• Create the Risk Management Security Profile
• Create the Risk Users Group

For information on best practices for Vault security, see About Standard & Custom Profiles & Permission Sets.

Copy the Risk Actions Permission Set

To create a copy of the Risk Actions permission set:

1. Navigate to Admin > Users & Groups > Permission Sets.
2. Select the standard Risk Actions permission set.
3. Create a copy of the standard Risk Actions permission set.

Create the Risk Management Security Profile

To create a custom Risk Management security profile:

1. Navigate to Admin > Users & Groups > Security Profiles.
2. Select Create.
3. In the Name field, enter Risk Management.
4. Select Save.

Create the Risk Users Group

To create a custom Risk Users group associated with the relevant security profiles:

1. Navigate to Admin > Users & Groups > Groups.
2. Select Create.
3. In the Label field, enter Risk Users.
4. From the Included Security Profiles drop-down, select the following custom security profiles:
   1. Risk Management
   2. All SafetyDocs
   3. All Case & All SafetyDocs

Configure Objects

Perform the steps in each of the following sections to configure objects in your Vault for Risk Management:

• Configure the RMP Risk Measure Default Object Type & Name
• Add Object Actions
• Configure Object Layouts
• Configure Object Lifecycles

Configure the RMP Risk Measure Default Object Type & Name

To set the default object type for the RMP Risk Measure object:

1. Navigate to Admin > Configuration > Objects > RMP Risk Measure.
2. Select Edit.
3. In the Options section, from the Default Object Type drop-down list, select Core Risk Measure.
4. Select Save.
5. Navigate to the Fields tab and select the Name field:.
6. Select Edit.
7. In the Value Format field, enter the following formula:
   {measure_category__v} - {measure_sub_category__v} - v{version__v} {market__vr.abbreviation_2__v} - {#}
8. Select Save.

Add Object Actions

Add the required object actions to the risk management objects shown in the table below:

Object	Actions
Core Risk Management Plan Version	Copy to New Version Create Local RMPs
Local Risk Management Plan Version	Create Local RMP Data from Core
RMP Core Implementation Strategy	Copy to New Version Create Local Implementations

Configure Object Layouts

Perform the following steps to configure the layout for each of the Risk Management objects listed below:

1. Navigate to Admin > Configuration > Objects > [Object] > Layouts.
2. From the Actions menu of the standard layout, select Save As.
3. In the Save As dialog, select Done.
   This creates a custom version of the standard layout.
4. (Optional) Edit the custom layout to your organization’s requirements.
   See Configuring Object Layouts for more information on configuring pages and sections for object layouts.
5. Select Save.
6. From the custom layout’s Actions menu, select Set As Default.
   See Configuring Object Layouts for more information on default layouts.

Risk Management Objects

• Core Risk Management Plan
• Core Risk Management Plan Version
• Local Risk Management Plan
• Local Risk Management Plan Version
• RMP Risk
• Local RMP Risk
• RMP Core Implementation Strategy
• RMP Local Implementation Strategy
• RMP Risk Measure
  For this object, create layouts for the Core Risk Measure and Local Risk Measure object types only.
• RMP Risk Measure Tracking

Configure Object Lifecycles

Perform the steps in each of the following sections to configure the risk management object lifecycles:

1. Configure the Complete State Type
2. Configure User & Entry Actions

Configure the Complete State Type

To set the Complete state type for each of the risk management object lifecycles in the table below:

1. Navigate to Admin > Configuration > Object Lifecycles and select an object lifecycle from the table below.
2. In the State Types section, select the Complete State.
3. Select Edit.
4. From the State drop-down, select the state that corresponds to the object lifecycle shown in the table below.
5. Select Save.

Object Lifecycle	Complete State
Core RMP Lifecycle	Effective
Core RMP Version Lifecycle	Complete
Local RMP Lifecycle	Effective
Local RMP Version Lifecycle	Complete
RMP Core Implementation Strategy LC	Approved
RMP Local Implementation Strategy LC	Approved
RMP Risk Measure Lifecycle	Complete
RMP Risk Measure Tracking Lifecycle	Complete

Configure User & Entry Actions

Add the user actions and entry actions for each of the risk management object lifecycles and states in the table below:

Object Lifecycle	State	User Actions	Entry Actions
Core RMP Lifecycle	Planned	Always allow the following actions: Change State to Effective	N/A
	Effective	Always allow the following actions: Change State to Historical	N/A
Core RMP Version Lifecycle	Planned	Always allow the following actions: Change State to Complete	N/A
	Complete	Always allow the following actions: Copy to New Version Change State to Obsolete	Always perform actions: Create Local RMPs Update Related Record Field: Related Object: Core Risk Management Plan Fields: Effective Version Set to Value: version__v
Local RMP Lifecycle	Planned	Always allow the following actions: Change State to Effective Change State to Not Applicable	N/A
	Effective	Always allow the following actions: Change State to Historical	N/A
Local RMP Version Lifecycle	Planned	Always allow the following actions: Change State to In Progress Change State to Not Applicable	N/A
	In Progress	Always allow the following actions: Change State to Complete	Always perform actions: Create Local RMP Data from Core
	Complete	Always allow the following actions: Change State to Obsolete	Always perform actions: Update Related Record Field: Related Object: Local Risk Management Plan Fields: Effective Version Set to Value: version__v
RMP Core Implementation Strategy LC	Planned	Always allow the following actions: Change State to In Development	N/A
	In Development	Always allow the following actions: Change State to Approved	N/A
	Approved	Always perform actions: Copy to New Version Change State to Superseded	Always perform actions: Supersede Previous Version Create Local Implementations
RMP Local Implementation Strategy LC	Planned	Always allow the following actions: Change State to In Development Change State to Not Applicable	N/A
	In Development	Always allow the following actions: Change State to Approved	N/A
	Approved	Always allow the following actions: Change State to Superseded	Always perform actions: Supersede Previous Version
RMP Risk Measure Lifecycle	Planned	Always allow the following actions: Change State to In Progress	N/A
	In Progress	Always allow the following actions: Change State to Complete	N/A
	Complete	Always allow the following actions: Change State to Obsolete	N/A
RMP Risk Measure Tracking Lifecycle	Targeted	Always allow the following actions: Change State to Complete Change State to Cancelled	N/A

For more information on configuring object lifecycles, see Configuring Object Lifecycles.

Configure Document Workflows & Lifecycles

Complete the procedures in the following sections to configure risk management document workflows and lifecycles.

• Configure Document Workflows
• Configure Document Lifecycles

Configure Document Workflows

Create the following document workflows with the settings provided:

Label	Document Lifeycle	Selected Options	Workflow
Authoring - Risk	Master Risk Lifecycle	Workflow cancellation comment	Workflow: Authoring - Risk
Review - Risk	Master Risk Lifecycle	Workflow cancellation comment	Workflow: Review - Risk
Approval - Risk	Master Risk Lifecycle	Workflow cancellation comment	Workflow: Approval - Risk

Workflow: Authoring - Risk

Workflow: Review - Risk

Workflow: Approval - Risk

Configure Document Lifecycles

Perform the steps in each of the following sections to configure the risk management document lifecycles:

• Configure Security Settings
• Configure the Editor Role
• Configure User & Entry Actions

Configure Security Settings

To configure the security settings for each of the Master Risk Lifecycle states shown in the sections below:

1. Navigate to Admin > Configuration > Document Lifecycles > Master Risk Lifecycle > States.
2. Select one (1) of the states shown in the sections below.
3. In the Security Settings tab, select Edit.
4. Add the security settings that correspond to the lifecycle state as shown below.
5. Select Save.

• Security Settings: Draft
• Security Settings: In Authoring
• Security Settings: In Review
• Security Settings: Reviewed
• Security Settings: In Approval
• Security Settings: Internally Approved
• Security Settings: Approved for Use
• Security Settings: Current in Use
• Security Settings: Superseded
• Security Settings: Historical
• Security Settings: Planned

Security Settings: Draft

Role	Permissions
Owner	View Document View Content Edit Fields Edit Relationships Edit Sharing Settings Annotate Create Anchors Download Source Edit Document Manage Viewable Rendition Change Owner
Coordinator	View Document View Content Edit Fields Edit Relationships Edit Sharing Settings
Editor	View Document View Content Edit Fields Edit Relationships Edit Sharing Settings Annotate Create Anchors Download Source Edit Document
Viewer	View Document View Content Annotate
Reviewer	View Document View Content Annotate
Approver	View Document View Content Annotate

Security Settings: In Authoring

Role	Permissions
Owner	View Document View Content Edit Fields Edit Relationships Edit Sharing Settings Annotate Download Source Edit Document
Coordinator	View Document View Content
Editor	View Document View Content Edit Fields Edit Sharing Settings Annotate Download Source Edit Document
Viewer	View Document View Content
Reviewer	View Document View Content Annotate
Approver	View Document View Content Annotate

Security Settings: In Review

Role	Permissions
Owner	View Document View Content Edit Sharing Settings Annotate Download Source Change Coordinator
Coordinator	View Document View Content
Editor	View Document View Content Edit Sharing Settings Annotate Download Source
Viewer	View Document View Content
Reviewer	View Document View Content Annotate Download Source
Approver	View Document View Content Annotate Download Source

Security Settings: Reviewed

Role	Permissions
Owner	View Document View Content Edit Sharing Settings Change Owner
Coordinator	View Document View Content
Editor	View Document View Content
Viewer	View Document View Content
Reviewer	View Document View Content
Approver	View Document View Content

Security Settings: In Approval

Role	Permissions
Owner	View Document View Content Edit Sharing Settings Annotate Change Owner
Coordinator	View Document View Content
Editor	View Document View Content
Viewer	View Document View Content
Consumer	View Document View Content
Reviewer	View Document View Content Annotate
Approver	View Document View Content

Security Settings: Internally Approved

Role	Permissions
Owner	View Document View Content Edit Sharing Settings Version Change Owner
Coordinator	View Document View Content
Editor	View Document View Content Version
Viewer	View Document View Content
Consumer	View Document View Content
Reviewer	View Document View Content
Approver	View Document View Content

Security Settings: Approved for Use

Role	Permissions
Owner	View Document View Content Edit Sharing Settings Version Change Owner
Coordinator	View Document View Content
Editor	View Document View Content Version
Viewer	View Document View Content
Consumer	View Document View Content
Approver	View Document View Content

Security Settings: Current in Use

Role	Permissions
Owner	View Document View Content Edit Sharing Settings Download Source Change Owner
Coordinator	View Document View Content
Editor	View Document View Content Download Source
Viewer	View Document View Content Download Source
Consumer	View Document View Content Download Source
Reviewer	View Document View Content Download Source
Approver	View Document View Content Download Source

Security Settings: Superseded

Role	Permissions
Owner	View Document View Content Edit Sharing Settings Change Owner
Coordinator	View Document View Content
Editor	View Document View Content
Viewer	View Document View Content
Reviewer	View Document View Content
Approver	View Document View Content

Security Settings: Historical

Role	Permissions
Owner	View Document View Content Edit Sharing Settings Download Source Change Owner
Coordinator	View Document View Content
Editor	View Document View Content Download Source
Viewer	View Document View Content

Security Settings: Planned

Role	Permissions
Owner	View Document View Content Edit Fields Edit Sharing Settings Annotate Create Anchors Download Source Manage Viewable Rendition Reclassify Change Owner
Coordinator	View Document View Content Edit Sharing Settings Annotate Create Anchors
Editor	View Document View Content Edit Fields Edit Sharing Settings Annotate Create Anchors Download Source

Configure the Editor Role

To configure the Editor role on the Master Risk Lifecycle:

1. From the Master Risk Lifecycle, select the Roles tab.
2. Select the Editor role.
3. Select Edit.
4. In the Options section under Add Default Users When, select the Creating a document checkbox.
5. Select Save.
6. Select the Default Rule tab.
7. Select Edit.
8. Select Add.
9. From the Allowed User/Group dropdown, select Risk Users.
10. Select the Default User checkbox for Risk Users.
11. Select Save.

Configure User & Entry Actions

To add user and entry actions to the Master Risk Lifecycle for each of the states in the table below:

1. From the Master Risk Lifecycle, select the States tab.
2. Select a state shown in the table below.
3. In the User Actions tab, select Edit.
4. Add the user actions that correspond to the state as shown in the table below.
5. Select Save.
6. In the Entry Actions section, select Edit.
7. Add the entry actions that correspond to the state as shown in the table below.
8. Select Save.

State	User Actions	Entry Actions
Planned	Always allow the following actions: Change State to Draft	N/A
Draft	Always allow the following actions: Workflow > Authoring - Risk Action Label: Author Risk Documents Workflow > Review - Risk Action Label: Review Risk Documents Workflow > Approval - Risk Action Label: Approve Risk Documents	N/A
Reviewed	Always allow the following actions: Workflow > Approval - Risk Action Label: Approve Risk Documents	N/A
Internally Approved	Always allow the following actions: Change State to Approved for Use	Always perform actions: Set new major version Set previous steady state to superseded
Approved for Use	Always allow the following actions: Change State to Current in Use	N/A
Current in Use	Always allow the following actions: Change State to Historical	N/A