Adding new Matrices
Out of the box, there is a single Matrix Configuration available for use in Pentana Audit.
Version 5.4 added the option to have a different Risk and/or Control matrix size/configuration for different levels of the Org Structure. This option is off by default, and is enabled via a False/True toggle in System Settings > Local Matrices.
This article does not discuss the various issues and implications of having multiple matrices available (particularly the impact on existing assessments if an Entity is given a new Risk/Control Matrix) – please review the documentation for more information on that.
However, the current version of the documentation does not describe in enough detail the steps to add a new Risk/Control Matrix, and that is the purpose of this article.
Adding an additional Local Risk Matrix
After Local Matrices have been enabled in System Settings, a new dropdown is available in Org Unit and Entity properties panels, e.g:
This enables you to choose from one of the available matrices.
These are configured in the Admin > Matrix Configurations screen.
Most of the time, users are wanting to create *additional* Risk and Control matrices. As discussed in the main documentation, this is a Local Matrix Configuration. To do this, right click on Default Configuration and Add > Add Local Matrix Configuration:
Define the size of the grids, and the new Local Matrix Configuration will be created:
Once this is done, the new option will be available from the Configuration dropdown:
Adding a new Matrix Configuration (not Local)
The counter-intuitive thing here is that using the Add Matrix Configuration option does not create a new configuration and then make that available as an additional dropdown item.
Using Add Matrix Configuration is useful if you are going create a new one to REPLACE the existing configuration, rather than add additional local matrices.
Caution: Set as Default Configuration
If you add a new Matrix Configuration and then Set as Default Configuration then this will effectively REPLACE your existing Risk/Control Matrix configuration as the available Matrix Configuration. You will clear ALL Risk and Control assessments from:
- The Library
- All Entities
- All Open Audits
Hence, it is unlikely that you will be wanting to use the Add Matrix Configuration and Set as Default Configuration options.