Creating Tasks for Remediation
- Evan Thomas
- Eric Nesbitt (Unlicensed)
The first step in remediation after an assessment at your organization lies within the Location Items page in Circadian Risk. This feature allows you to create, assign, budget, and actively track remediation of deficiencies located throughout your organization. Ultimately, tasks will allow you to complete a full risk analysis process by identifying, assessing, and remediating deficiencies to reduce risk. This article will explain how to use the Tasks feature within the Circadian Risk platform. Additionally within this page is the capability to re-assess answers from assessments, and accept the risk associated with a deficiency.
Instructions
From the Dashboard, navigate to the sidebar dropdown (three white bars) in the top left of the page
From here, select Action Plan, and under that category, select Items by Status.
On this Items by Status page, a roll up of all items and their statuses found in an organization will be available. This includes: Untriaged, Deficient, Compliant, and Accepted Risk items.
This page also includes filter options, so the ability to filter these items by location is available.
Control points opportunities are also included on this page
This will show out all all the deficiencies within an organization, and the breakdown of where those deficiencies criticalities lie, and how many points each deficiency will be earned back when remediated. For this example, there are 1,100 high criticality, 1,800 medium criticality, and 355 low criticality deficiencies in this organization.
Red = high criticality, worth 3 points per deficiency remediated
Yellow = medium criticality, worth 2 points per deficiency remediated
Gray = low criticality, worth 1 point per deficiency remediated
Once a specific item has been identified that is needing further action, the specific deficiencies can be identified by hovering over the item name, where a “view” button will appear on top of that item’s name. A drawer will open from the right side of the screen. At a high level, users can see individual questions, responses, descriptions, recommendations, criticalities, and if any questions have been assigned to a task already or not.
The user will next select which questions will have a task created for them. To do so, the user will select the checkbox to the left of the question(s) that they would like to triage accordingly. Once the questions are selected, a “Remediate Selected Answers” button will appear in the bottom of the screen. Select this.
This will bring up a new modal, where the user can select “create a task for answers” for the selected deficiencies.
The user will be brought to the Create Task screen, where the user will be able to input specific information for triaging the task that will be remediated, including:
Name for the Parent Task
If you have less than 1 deficiency under a task, all the subtasks will be associated to the parent task.
Task Description
Triaging Subtasks
You are able to pull in the option for consideration information from the notes made by the assessor during the assessment (if applicable)
You can pull triage information from the option for consideration lobby that has been established at the organization level
Set your own custom triage information
Here is a photo of going through the “provide custom options for consideration” flow for task triage, where you can add information such as: Subtask Title, Subtask Description, Principle Action, Initial Cost, Ongoing Cost, Time Estimate for Completion, and Assignee
Once All the criteria for triage has been built out, you can select “Create Task” at the bottom of the task creation expierience, and the system will create the task.
To access the task page and all tasks that have been created for an organization, select the top left app navigation, and under Risk, select Tasks.
From this page, you can edit, modify, and manage each of the tasks you have created.
Additional Functionality on the Item by Status page:
Re-assessing questions: The last answer that was received for an item during an assessment can be viewed, and changed with updated information (description, photo, recommendation) if necessary if an event occurred that changes this statements answer.
Accepting Risk: for specific deficiencies/items, these can be “accepted,” where no action will be taken for that specific question. Essentially, the risk is known, but nothing will be done to remediate this.
However, when accepting a particular risk, a justification will need to be provided as to why this is being accepted, for history and compliance tracking purposes.