What is a process?

A process is the highest level of a documented business process where information is collected and processed in a certain area in the business. Examples of processes in HR could be ‘Recruitment’ or ‘Personnel Administration’. Activities are linked under processes.

Fill out or approve the master data for the process

Start creating processes under Processes & activities in the Core module.

Title

Write the formal name of the process. It is recommended that the process is documented at the highest level possible and where it is still possible, to define the formal purpose of processing information.

Process group

Link the process to a relevant process group. Process groups are used to create an overview of large volumes of processes.

Description

Describe what the Process is about. The purpose is to let relevant people in the organization know, what goes on in this part of the organization. This is necessary in order to identify main risks and to make better priorities related to information security.

As an example, the process, Recruitment could be described as follows:

“The process, ‘Recruitment’ involves searching for and evaluation of candidates on the basis of a series of interviews and tests for the purpose of employment.”

Responsibles

Assign or approve the persons responsible for documenting the process. It is possible to add several users as responsible if necessary. One user can be marked as the final accountable, by marking this person with the star-icon.

Tags

Create tags that allow the process to be searched using this tag. This is a way of sorting and categorizing different activities. For example, a recruitment process tag can be ‘HR’ or ‘Hiring’ as an indication of the area in question. This field is not mandatory.

Policies and procedures

Select relevant supporting documents under the sheet, Basic info

Create or add underlying activities on the sheet, activities

Activities

Fill out relevant information related to privacy, under the Sheet, Privacy

Purpose
Legal Basis
Information Obligation
Risk Profile
Loss of confidentiality
Loss of Integrity
Loss of availability

Add and fill out risk scenarios under the sheet, Risk Management

Risk Scenarios

See assessments under the sheet, Assessments

Here you can see a list of impact assessment reports where the process has been included in the assessment scope.

Was this article helpful?

Related Articles

Need Support?

Can't find the answer you're looking for?
Contact Support

Want to hear more?

Let's talk about how our experience and software can help your company.