Rating Transformation

Purpose

Rating transformations provide a systematic method for adjusting risk ratings by mapping one set of risk likelihoods and severities to another.

This feature is designed to map a Baseline or Global likelihood, represented by the ALARP rating, against the current risk's metric (Inherent or Residual ratings) to produce a final Transformed rating.

This feature is particularly useful for:

• Comparing risks across different rating frameworks
• Ensuring industry-wide comparability
• Improving risk prioritisation by refining impact and likelihood assessments.

Important Notes

• Feature Activation: Rating transformations must be enabled in system settings.
• Only System Administrators can configure transformed ratings.
• Defining the matrices to map:
  • A Baseline Matrix (ALARP) representing a global likelihood metric (e.g. 1 x 5 matrix). Acts as the Source matrix.
  • Additional matrices for Inherent/Residual Ratings (e.g. 5 x 5, 4 x 5, etc.). Act as the Target matrices.
• Defining the right Rating Strategies: Ensure rating strategies are configured so that a project's ALARP rating reflects the Baseline likelihood matrix, while the Inherent rating reflects the Current likelihood matrix.

Step-by-Step Guide To Configure Rating Transformations

1. Navigate to Admin > Rating Transformations.
   
   
   
   
   
2. Select the baseline Rating Strategy (Target/ALARP) as the Source Rating Strategy
   
   
3. Choose the appropriate Source Severity Category.
   
   
4. Select the Inherent Rating Strategy as the Target Rating Strategy.
   
   
5. Choose the corresponding Target Severity Category.
   Note: Initially no cells will show a highlighted asterisk, this means that transformations have not been defined yet.
   
   
6. Select:
   1. Source matrix cell 
   2. Target matrix cell
   3. Transformed matrix cell
      Note: Once selected, the cell will be outlined with a dotted line.
      
      
      
      
      
7. Click Save button on top to apply the transformation.
   
   
8. Scroll down to expand the Transformation Table and verify the saved mappings.
   
   

Viewing Transformed Ratings on Risks

1. Configure a project with ALARP and INHERENT matrices matching with the ones in the rating transformations using rating strategies.
   
   
2. Navigate to any risk from the project.
   
   
3. Rate the risk using the ALARP Rating Strategy and severity category. Rate the same risk with the Inherent Rating Strategy and severity category (as selected in the mapping transformations).
   
   
4. Save the ratings. An asterisk (*) will appear on the transformed cell on the rating page.
   
   
5. Navigate to the Risk Show View and expand the rating pill to view the Transformed Ratings.
   
   
6. Open the Risk Bowtie View and confirm that the Transformed Ratings are displayed under the expanded inherent rating pill as well.
   
   

Other areas to access Transformed Ratings

1. Risk
   • Risk Show View
   • Bowtie
   • List View
2. Dashboard > Risk Heatmap: Transformed ratings will be displayed.
3. Filtered Risk Report (Detailed View): Shows the transformed ratings under the expanded list.
   
   
4. Exported Reports:
   • PDF Export: Includes transformed ratings.
   • CSV Export: Does not include transformed ratings.

Common Issues & Troubleshooting

What is the difference between mapped ratings and transformed ratings?

The purpose of both is different from each other:

• Mapped ratings convert ratings to a unified scale for projects with a hierarchical structure.
• Transformed ratings adjust likelihood ratings using global metrics to provide a more realistic measure.

How does the ALARP matrix differ from Inherent or Residual ratings in the context of rating transformations?

The ALARP matrix is the baseline risk framework. Inherent ratings show risk before mitigation, while Residual ratings show risk after controls.

Can rating transformations be customised for different matrices?

 Yes, Transformation mappings can be applied for various matrices to suit your organisational requirements. 

I can't see the transformed ratings on risk show view.

Make sure the following are correctly marked:

• Check if the configured matrices have been selected for rating the risk.
• Check if the severity categories are correctly selected while rating the risk.
• Check if a transformation has been configured for the selected rating.

I can see the transformed ratings on the exported PDF but not on CSV.

This is expected behaviour. Transformed ratings appear in the PDF but not in the CSV.

Can I see the transformed ratings on the output of filtered risk report?

Yes, when the 'Report style' is selected as 'Detailed', the Risk Show views will be listed below the summary which will show the Transformed Ratings as well.