Tag information is shown beneath each risk in the risk table (on the Risks tab), and below each countermeasure on the Countermeasures tab. The relevant tags will be shown in blue beneath the name of the item.
The Tags tab, below the RiskTree, shows details of the tags and tag sets in use on your RiskTree. To see the tags, click on the Tags sub-tab. This lists all of the tags that are in use (i.e., have been applied to at least one node or countermeasure).
Within the tags table, each tag is placed on a separate row. Each row contains the following information:
Clicking on the Tag and Tag set column headings will sort the table by these attributes.
You can filter the tag sets that are shown on the tab by clicking on the button. A drop-down menu will appear, listing all of the tag sets in use. Untick those that you do not want to see, and these tags will be hidden in the list. This feature can be very useful if you just want to see information about one type of tag. For example, if you have tagged your countermeasures using the ISO27001 tag set, showing just these tags and the countermeasures that they affect give you a starter for an ISO27001 Statement of Applicability. Alternatively, filtering to just show risk owner tags provides you with a list of risks grouped by owner.
Click on the button to show all tags again. Whilst any tag sets are filtered, the Filter button will have red text.
The main Tags tab has a second sub-tab for tag sets:
The tag sets table contains the following information;
These are charts that let you see the relative proportion of each type of tag that have been used within each tag set. For example, if you have tagged your risks with risk owners, the chart provides you with a quick way of seeing the relative number of risks owned by each person.
Some tag sets, with large numbers of tags, will split the charts into groups of tags. The ISO27001 tag set does this, and will show one chart segment for each of the 14 clauses in the control set, and aggregates each of the individual controls within these clauses. Moving the cursor over a segment will show the clause number and the name of the clause, for example, 8.x.x Asset management. Clicking on these segments will create a separate pie chart showing the tag distribution within this clause. The diagram below shows this for the Access control clause, which contains four tags. The right-hand pie chart shows that there are two tags in use in this clause, and each is used twice (as they each have 50% of the pie chart).
One tag distribution chart can be shown at a time. If multiple tag sets have been used, the distribution chart can be changed by using the drop-down in the top-right corner of the tab.