In your risk register, each risk has a treatment rate which is visible in the different views, in the Treatment column.
How is this rate calculated?
This score is calculated on the basis of the target level and the current level of risk.
🔎 As a reminder, these are the measures that treat risks in Tenacy.
Treatment therefore corresponds to the progress made in processing your risk.
If we keep the example of the risk above: the risk has a treatment rate of 63%.
In detail, the treatment plan includes the following measures:
As the 2 measures are implemented on the security base, they both have current levels for a total of 25%.
⚠️ The current level takes into account the progress of the implementation measures associated with the risk, and the performance of those already implemented. A target measure in your treatment plan will have no current level.
This current level is calculated as a function of the target level defined in the treatment plan and the overall performance of the measure.
If we look at the Endpoint protection against malware measure, the current level is 15%. In our risk scenario, we define that this measure can handle 20% of the risk at most. Since this device is 75% effective, its current level is 15%.
The better a measure performs, the higher the current level will reach the maximum target level defined in the treatment plan.
In our example, 25% (current level) of 40 (target level) = 62.5%, giving a 63% treatment rate.
Risks generated by risk analysis
There is a slight difference when it comes to risks generated by risk analysis in Tenacy.
In your treatment plan, the various measures combine the reduction of probability and impact, depending on what is set in your risk analysis.
If we take the example of this risk, we have 4 implemented measures in the treatment plan:
Our risk currently has a treatment rate of 53%:
So how do we obtain this achievement rate (=treatment rate)?
To obtain the various levels, here are the elements, let us take again the measures of the plan of treatment of the risk:
To calculate:
Distance between initial level and current level: √(25²+15²) (current column)
Distance between initial level and minimum level: √(50²+20²) (max column)
And when we divide √(25²+15²) / √(50²+20²), we get 53% as treatment rate.