Having walked through the previous ISO 31000 steps, we now come to the “Recording and Reporting” step. Recording is about recording information in a risk register so that this information can then be reported to decision-makers.
In a sense this is what the bowtie does best – it records risks which can then be reported more effectively to stakeholders. But perhaps a more traditional risk register is required. In this blog we will look at the different ways in which BowTieXP supports recording your risk register and reporting that information.
Recording risk information with BowTieXP
For recording your risk register, BowTieXP has something called the Case Overview. You can find the case overview in the main menu: View →Windows → Case Overview.
The case file overview presents many views onto the data in the case file from different perspectives (“overview”), allowing visualization of relationships, which might otherwise be less evident, this also helps you to quickly find related data.
As you can see in the image below (figure 1), there are many lists available in the Case Overview, we will highlight just a couple in this blog.
Figure 1: Case overview options
The classic perspective lists all bowtie groups, hazards, threats and consequences present in the current file along with each consequence’s risk assessments. This overview is similar to a classic hazard register. This will, therefore, allow you to record your risk register. But perhaps a different focus is required, doing bowties is all about barrier focused risk management, so the barrier register might be of particular interest for you.
By clicking on the case overview columns, you can change the ordering for a better overview. In the example below (figure 2), the barriers in the Barrier Register overview, have been sorted on most times occurring.
Figure 2: Barrier Register overview, sorted on most times occurring
Reporting with BowTieXP
And now, for the second step, reporting. You’ll note that on each page, there is an ‘Export to Excel button’ (figure 3). Simply left-click on this button and you will be presented with the same view, only now in Excel where you’ll be able to more easily import or export existing values to some of your pre-existing risk registers.
Figure 3: Export your risk register to Excel
Using these two key features, it will be easier to capture relevant information in a simple clean overview that will allow you to more effectively communicate that information to decision-makers.
In the next and final ISO 31000 blog of this series, we will explore in more depth how to communicate information to not only decision-makers but also to the rest of the company.