EPRM Template Guide v.1.0 2016 eprmHelp@alionscience.com

Table of Contents Page: 3. Introduction 4. Creating a New Template 27. Appendix A

Introduction: Templates are a feature of EPRM that provide time savings for assessors, and standardization across assessments. Templates are created by Template Managers in order to create a set of pre-loaded answers or values that can be inherited when a user creates a new assessment. These answers or values can be preloaded in any section of the assessment.

Creating a New Template: To create a template, click the Manage Templates icon.

Creating a New Template (continued): Templates that have already been created or are in the process of being created will display in the grid. To create a new template click the Start button.

Creating a New Template (continued): Name your template, paying attention to any established naming convention in your particular hierarchy. Enter the name of the organization to which the template belongs. Select the dataset that you would like to use to create your template. Select the node in which your template is to be created, keep in mind that the template must exist at or above all nodes in which it is to be used. NOTE: *You have privileges to nodes in Black *You do not have privileges to nodes in Red

Creating a New Template (continued): When you create a new template, you will be given the option to copy from any previously created templates that use the same dataset.

Creating a New Template (continued): Click on the Profile icon to begin entering data that you want to be pre-loaded in your template. The YOU ARE HERE medallion will show you which step you are currently on. You may use these administrative functions at anytime while creating your template. See Appendix A for specific instructions on how to use these functions. This is the basic template information, it includes: The template number and name. The name of the organization in possession of the template. The date the template was created and it’s status. The creator of the template. The dataset the template is using.

Icons will remain locked until the previous step is completed. Creating a New Template (continued): Click on the About the Organization icon to begin going through the template. Icons will remain locked until the previous step is completed.

Creating a New Template (continued): The About the Organization page asks questions to filter the content you will use to conduct the assessment. This is the first section where you can begin pre-populating information into the template. To save your template at any stage and finish it later you can click the Save and Back Without Finishing This Section or to finish a section and proceed to the next you can click the Complete this Section and Continue button.

Creating a New Template (continued): The Operating Environment page asks additional questions in order to determine what type of assessment will be conducted and to further refine the content of the assessment. Here you can continue to pre-populate any answers you want in your template. To save your template at any stage and finish it later you can click the Save and Back Without Finishing This Section or to finish a section and proceed to the next you can click the Complete this Section and Continue button.

Creating a New Template (continued): After you have completed the Profile section, click Back to Template Menu to continue creating your template.

Creating a New Template (continued): You are now ready to choose any critical assets you would like to include in your template. Click on the Critical Assets icon.

Creating a New Template (continued): You may now select your critical assets. This section is where you will select which assets you want to include in your template and rate their criticality. To view all of the available critical assets click on the Show All Critical Asset Types.

See Appendix A for instructions on adding a comment to an item. Creating a New Template (continued): Click Yes to include an asset in your template or No to exclude it. When you select Yes, a pop-up box will appear, use the rating scale to assign criticality. In EPRM, many screens display data in grids, see Appendix A for specific instructions on how to use their functionality. See Appendix A for instructions on adding a comment to an item. In EPRM, some screens have an Answer ‘No’ to All Unanswered button, see Appendix A for specific instructions on how this works.

Creating a New Template (continued): After you are finished selecting the assets you want to include in your template click the Complete This Section and Continue button to return to the template home page.

Creating a New Template (continued): You are now ready to select the threats to include in your template. Click on the Threat Characterization icon.

Creating a New Template (continued): You may now select the threats your organization may encounter and rate their severity. To view all of the available threats click on the Show All Threats icon or to view threats by method click on one of the icons below.

Creating a New Template (continued): Click Yes to include a threat in your template, or No to exclude it. When you select Yes, a pop-up box will appear, select the threat severity. Once you have selected responses for all of the threats you wish to include in the template, click Continue.

Creating a New Template (continued): After you have selected all of the threats you want to include in your template click the Complete This Section and Continue button to return to the template home page.

Creating a New Template (continued): You are now ready to select the countermeasures that you want to include in your assessment. Click on the Countermeasures icon.

Creating a New Template (continued): You may now select the countermeasures you want to include in your template. To view all of the available countermeasures click on the Show All Countermeasures icon or to view countermeasures by type click on one of the icons below.

Creating a New Template (continued): On the Countermeasures page you can answer countermeasures with Yes (countermeasure is in place), No (countermeasure is not in place), or N/A (countermeasure is Not Applicable). Once you have selected all of the countermeasures you want to include in your template click Continue to proceed. For guidance while completing the Countermeasures section, double click on the countermeasure to be presented with a pop-up box containing guidance, explanations, and references.

Creating a New Template (continued): In the Countermeasures section of EPRM, countermeasures are organized into Parent and Child countermeasures, the parent countermeasure must be answered ‘Yes’ in order for the child or children countermeasures to become available for answer. In a template all questions will be available for response.

Creating a New Template (continued): After you have selected all of the countermeasures you want to include in your template click the Complete This Section and Continue button to return to the assessment home page.

Creating a New Template (continued): You are now ready to lock the template. In order for a template to become available for users to inherit it must be locked. Click on the Lock Template icon.

Appendix A – Misc. Features Page 2. Rename 3. Expire Template 4. Share This Template 6. Change Owner 8. Grid Functionality 9. Answer ‘No’ to All Unanswered 10. Adding a Comment

Rename: The Rename feature allows you to change the name of the template. Click Rename, enter the new name in the box provided, then click OK to save the change.

Expire Template: The Expire Template feature allows you to expire templates that you no longer want to be used by assessments. Click Expire Template and then confirm expiration to save.

Share This Template: The Share feature allows you to give other EPRM users in your hierarchy access to your template. You may allow others to ‘Read Only’ or ‘Read/Write’ depending on the permissions you allow. Click Share This Assessment then proceed to the next slide for additional instructions.

1. Find the user you want to share the template with. Share This Template (continued): When you share a template with another user you will have to select what permissions you want them to have. Read Only: Allows another user to view all of the template’s Profile, Critical Assets, Threat Characterization and Countermeasures, but not expire, share or change anything. Read/Write: Allows another user to rename, expire and share the template. 2. Assign the permissions you want the user to have on the template you are sharing. 1. Find the user you want to share the template with. The Owner Level column indicates if a user already has full access to the template being shared by virtue of being a Template Manager or System Administrator above that template’s node in the hierarchy.

Change Owner: The Change Owner feature allows you to transfer ownership of a template to another EPRM user. Once ownership is transferred to a new owner, the original owner no longer has any access to the template. Click Change Owner then proceed to the next slide for additional instructions.

Change Owner (continued): Select a user to transfer ownership to from the drop down list, then click Change to complete. Once you click the Change button the new owner will be notified by email and you will no longer have access to the template.

Open (same as double clicking on row) Grid Functionality: Throughout the template creation process data is displayed in grids. The grids provide you the ability to sort, query, export, and print the contents to make the template process more efficient. The text fields above each column allow you to query the contents. You may query multiple columns at one time. Click on the arrow to the right of each column name to sort the contents. Double clicking on a row will display addition information about that item. Export to Excel Print Preview Open (same as double clicking on row) Reload GridData

Answer ‘No’ to All Unanswered: The Answer ‘No’ to All Unanswered button will help you save time on screens where every item or question requires an answer to proceed. Choose Yes for items or questions that apply to you, then click the Answer ‘No’ to All Unanswered button to quickly answer the remaining items or questions.

Adding a Comment: If desired, you may add a comment to a specific critical asset. You will also have the ability to add a comment to threats and countermeasures. To add a comment, click on the critical asset(1) to highlight the row then click the Add/View Comment button above the grid.(2) Type your comment in the text box, then click Save to continue.(3) A comment icon, “ ” will appear in the comment column. To view or edit your comment, double click on the comment icon.(4) (2) (1) (3) (4)