Control Rules for Risk Surveys

Control rules are exclusive to risk surveys. They can be written for one or more questions and include a certain condition, which may result in true or false. If the condition is true, one or more actions defined in the rule will be automatically executed in a control. It is through these rules that it is possible to change the status of a control (Implemented, Not Implemented, etc.), change its probability or severity scores, or attach evidence (see figure below).

 

 

A rule has the following logical structure:

If

(the condition created is true)

 

Then

(execute a specific action)

 

Thus, each control rule contains a logical condition, which can be true or false depending on the responses provided by the interviewee to the questions associated with the rule. Each rule also includes one or more actions. Each action, in turn, is associated with a single control from the knowledge base associated with the survey.

When the condition for a control rule is true, the system automatically carries out actions in the control. The actions that can be executed in the controls when the condition is true are as follows:

Control Property

Action

Probability

Changes the probability of the control to the value defined in the rule.

Severity

Changes the severity of the control to the value defined in the rule.

Status

Changes the status of the control to the value defined in the rule (Implemented, Not Implemented, Not Applicable, Not Answered).

Attachments

Inserts files attached by interviewees/reviewers in the field to upload files in the interview (enabled when the Field for attachments checkbox is marked when creating the question) in the Attachments section of the control.

 

The questions with attachment fields enabled will be available for selection in the Value field when creating the rule.

Evidence

Inserts text included by interviewees/reviewers in the comment field of the interview (enabled when the Field for comments checkbox is marked when creating the question) in the Evidence section of the control.

 

The questions with comment fields enabled will be available for selection in the Value field when creating the rule.

 

Keep in mind that the system supports up to 300 rules per survey without suffering any performance loss. This number includes all rules – control, object, or question, depending on the survey – created for a single survey. Therefore, when creating new control rules, it is important to note whether there are other rule types so this limit is not exceeded. If the limit is not respected, the system performance will be compromised when managing surveys in the Knowledge module, but will not be affected when answering the interviews generated from these surveys.