I am creating BPMN 2.0 compliant process models in Aris designer. I have to tag risks and any existing controls to any applicable process step with the end goal that I am able to quickly generate a report. The report should be exportable even at a folder level and not just a single process model. We can tag risk and controls via 3 methods -> 1) Dragging risk and controls from left stencil 2) Using Risk and Controls within Risk and Compliance from details section on the right 3) Create a FAD and tag risk and controls within
The underlying need is also that it should be clearly visible which controls is tagged to which risk. Methods 1 and 2 dump risk and controls tagged to process step. In cases, where there are 2 unique risks and 2 corresponding controls on a process step, it becomes difficult to demarcate which control is mitigating which risk.
Looking for the best way forward to be able to segregate controls tying to corresponding risks and then quickly generating a report exportable to excel for further manipulation