The Portfolio dropdown in this example has already been selected for “Enterprise Risks”. A User can click on the dropdown and assign the risk to a new locked Portfolio.

The list of Portfolios that a User will be able to choose from will depend on their User type and access level. Admin Users can access all Portfolios by default. Standard Users can access only the Portfolios they have been granted access to. The function and use of Portfolios has already been described in this articles of the Enterprise Risk Console overview.

When a Risk is moved to a new Portfolio, all of the items attached to the Risk in the Bow Tie Diagram will also be moved to the new Portfolio. Items that will be moved include attached Root Causes, Mitigations, and Consequences. These items are moved because they are closely associated with the Risk and often share the same level of sensitivity / confidentiality as the risk itself.

Once the Risk and its Bow Tie items have been moved to the new Portfolio, the User receives a confirmation message.

Note that Causes, Mitigations, and Consequences may be attached to multiple risks. If so, moving them along with a Risk into a new portfolio may break the connections these items have with other Risks. When this occurs, the system will automatically warn the User with a Pop Up Warning, as shown below.

The warning will identify the Bow Tie items that are also linked to other risks and will present the User with options of either moving or copying the affected items. If the User selects Move Items, the affected items will be moved to the new Portfolio along with the Risk. This action will also break the relation between these items and the other Risks they are attached to, removing them from the Bow Tie diagrams of those Risks.

If, however, the User selects Copy Items, then the affected items will be left in their old Portfolios and new copies will be created in the new Portfolio. Through this action, the Risk that is being moved to the new Portfolio will be attached to the newly created items, so that they remain in the Risk’s Bow Tie diagram.

Copying items in this manner will lead to the duplication of data across Portfolios, but this will not be detrimental to the system. It is also important to note that the duplicate items will only be visible by Admins and “super” Users who have been granted access to multiple Portfolios. Furthermore, Admin Users can easily view and manage duplicates through the items’ associated Explorer Consoles.

The following table summarizes the key resources that can be attached to a Risk and how they are affected by moving a Risk to a new Portfolio.