5.2 — Treatment strategy
Page /ebios/traitementrisques — for each risk identified at the end of Workshop 4, choose the treatment strategy to apply.
Toolbar
| Button | Function |
|---|---|
| ✦ Suggest treatments (A5) | AI-generated treatment proposals for each risk in the summary |
Tabs
| Tab | Content |
|---|---|
| Matrix & Risks | Severity × Likelihood matrix with risks positioned on it (drag and drop), and a detailed list |
| Default treatment | Configuration of the treatment applied automatically according to risk level, and display colours |
Matrix & Risks tab
The matrix positions each risk according to its Likelihood (rows) and Severity (columns). Risks can be dragged and dropped from one cell to another to adjust their position manually.
The detailed list under the matrix shows, for each risk:
| Column | Description |
|---|---|
| # | Risk number |
| Risk | Risk label |
| Associated FE | Attached feared event, with its severity |
| L / S | Likelihood and Severity |
| Level | Risk level (coloured badge) |
| Treatment | Selector for the type of treatment to apply |
Treatment types
- Reduce — implementation of technical or organisational measures (detailed in the PACD)
- Transfer — cyber insurance, outsourcing
- Refuse — abandoning the exposed activity
- Accept — risk deemed acceptable as it stands (to be documented and formally validated)
Default treatment tab
- Level → Default treatment table: associates a default treatment with each risk level (e.g. Critical level → Reduce), applied automatically when risks are generated
- Treatment colours table: customises the display colour of each treatment type (colour picker + ↺ button to reset)
AI generation
The ✦ Suggest treatments (A5) button analyses all the risks in the summary and proposes, for each one, a treatment type, a justification and a description of the expected residual risk. Suggestions are imported risk by risk.
Prioritise critical risks
Configure the default treatment so that Critical/High levels point to Reduce — this avoids forgetting to treat the most severe risks during a bulk generation.
Next steps
Once the treatment is chosen, detail the concrete measures in the PACD (page 5.3), then check the effect on Residual risks (page 5.4).
See also Workshop 5 — Overview.