Administration
Administration keeps the shared core that ERM Core and BCP Core both stand on: one organisation structure, one staff register, one set of roles, one action register and one audit log for each company.
Who uses it: the administrator, HR, the Entity Risk Manager for their own entity, the Group RM for the group configuration, and client IT for single sign-on. What each of them may do is set out in Roles and permissions.
The administration screens
Section titled “The administration screens”| You want to | Page | ID |
|---|---|---|
| Load or change divisions, teams and positions | Organisation structure | D1 |
| Add people, invite them, reset an authenticator, deactivate an account | People and accounts | D2 |
| Grant or revoke a role at a level of the tree | Roles and the roles panel | D3 |
| Set the criteria set, materiality tiers, reporting periods, MTPD bands or hazard set | Group configuration | D4 |
| Follow up actions from tests, breaches, findings and incidents | Action register | D5 |
| See who changed what, and when | Audit log | D6 |
| Load historical losses, risk registers, KRI observations or BIA activities | Importing data | D7 |
| Set up Microsoft or Google SSO and the sign-in policy | Single sign-on and sign-in policy | D8 |
| Export a register or report to Excel or PDF | Exports | D9 |
Setting up a company — in this order
Section titled “Setting up a company — in this order”- Organisation structure — load the Units and People sheets or the org chart, check the review diagram and commit (D1).
- People and accounts — invite everyone in the staff register (D2).
- Roles — grant each role at its level of the tree (D3).
- Group configuration — the group root sets the criteria set, materiality tiers, reporting periods, MTPD bands and hazard set (D4).
- Sign-in policy — confirm the Remember this device days and, if the company uses it, SSO (D8).
- History — import earlier loss events, risk registers, KRI observations and BIA activities (D7).