Process

Draw your organization's processes and keep your DORA registers.

Process installs on your device (Windows and Linux) and opens with your Prophetix account, the same one as for the web applications.

Process models your processes in BPMN, EPC or value chain on a workspace where business objects are reused from one diagram to the next. Impact analysis shows what depends on an object before you change it.

For financial entities subject to DORA, Process keeps the registers of ICT providers, incidents and risks, and produces an XML export of the register of information from them (a format specific to Process, not yet the official filing format).

Diagrams export to PNG or PDF, and reports to Word.

Every feature of Process

56 features in 11 areas

Process diagrams

Draws BPMN, EPC and value chain (VACD) diagrams, each notation having its own toolbox of symbols.
Creates a diagram beneath a parent diagram to drill down from the overall process to detailed processes, and navigates the tree.
Works on several diagrams at once, each in its own tab, and reopens recent diagrams in one click.
Links objects with arrow connectors (flow, association, sequence, message, data) with adjustable label, color, thickness and arrow style.
Draws non-straight connectors using waypoints, and creates a connector from the quick arrow next to an object.
Records the name, type and description of each diagram in its properties.

Editing and layout

Moves and resizes elements with the mouse, with magnetic snapping to the grid that can be switched on or off.
Selects several elements, then cuts, copies, pastes or deletes them.
Undoes and redoes drawing actions.
Aligns elements (left, right, top, bottom, centers) and distributes them horizontally or vertically.
Zooms in, zooms out, resets to 100%, fits everything or fits the selection; a minimap gives the overall view.
Shows or hides the toolbox, the object browser and the properties panel depending on the space needed.

Reusable business objects

Attaches each placed symbol to a business object: as you type the name, the application suggests existing objects before creating a new one.
Shows the same object on several diagrams; if a name already exists, offers to reuse the object or duplicate it.
Browses all objects and diagrams in a tree browser with search; a double-click opens the diagram.
Edits the attributes of the selected object in the properties panel.
Creates its own symbols (shape, color, default size, notation) which join the toolbox.
Records on each object whether it contains personal data, its category and the chosen legal basis (consent, contract, legal obligation, vital interest, public interest task, legitimate interest).

Impact, validation and reports

Shows, before an object is changed, all the diagrams that use it, along with the number of elements and connectors affected.
Checks a diagram: errors (missing name, invalid connector source or destination), warnings (isolated element, looping connector, BPMN without start or end) and remarks.
Flags an object with personal data whose legal basis has not been filled in.
Exports a diagram as a PNG image or a PDF.
Generates a Word report of the diagram, an impact analysis report and the list of processes.

DORA registers

Brings together in a dashboard the number of ICT providers, active incidents and risks, with an alert on missed notification deadlines.
Keeps the register of third-party ICT providers: contract reference, LEI or EUID identifier, type, criticality, status, and the dates and locations of the services and of data processing.
Declares an ICT incident (classification, severity, affected services, cause) and tracks the deadlines for the initial notification, the 72-hour report and the final report.
Marks each stage of an incident as sent, then closes it; filters active incidents, major incidents or those past their deadlines.
Keeps the ICT risk register: likelihood by impact on five levels, inherent and residual risk, category, owner and mitigation measures.
Exports the register of information to XML, and text reports on third-party providers and the risk portfolio.

Audit trail

Browses the audit log filtered by dates, user, action type and entity type.
Shows for each entry the state before and after the change, the IP address and the reason.
Seals each entry with a SHA-256 fingerprint and checks in one click that the log has not been tampered with.

Executable processes

Starts, tracks and cancels process instances in a monitor: status, current step, duration, errors and the history of each step.
Distributes tasks: an available task is claimed, started, then completed or declared failed.
Defines performance indicators (lead time, throughput, quality, cost...) with a target value, warning and alert thresholds and measurement frequency.
Offers a startup wizard that loads sample data, which can then be erased without touching your own data.

Performance analysis

Discovers the execution variants of a process and the deviations from the standard flow.
Detects bottlenecks (slow steps, saturated resources), proposes recommendations and lets you mark a bottleneck as resolved.
Calculates the cost of instances and the average cost, and details the breakdown, resource utilization and the trend over the chosen period.
Simulates scenarios (change in duration, cost, volume, resources or path), compares them with the starting situation and runs a Monte Carlo simulation.

On your devices

Windows: full desktop application, local database on the computer, connection to the Prophetix account and licence.
Linux: diagram editor, business objects, impact analysis, validation, PNG and PDF exports and Word reports, with the same data file as on Windows.
The DORA registers, the audit trail, executable processes and performance analysis are today only in the Windows version.
No web or mobile version.

Good to know

The DORA registers help you keep your lists; the XML export follows a format specific to Process, not the official filing format, and does not constitute an attestation.
The audit trail can sign, filter and verify its entries, but changes made in the application do not yet feed it automatically.
The monitor, tasks, indicators, variants, bottlenecks, costs and simulation work on executable processes: two examples are provided, but no screen yet creates any from a diagram.
The windows for executable processes and performance analysis are in English.
The personal data fields help to spot processing activities; they do not form a complete register.
PDF export on Linux has not been tried on a real system.

Planned (not available yet)

Open a diagram from a file, Save as, and import or export in BPMN format.
Conversion of an EPC diagram to BPMN and vice versa.
Register of personal data processing activities and custom registers.
Checking that events and functions alternate in EPC diagrams.
Correction of an incident already declared, a register of suppliers' contractual arrangements and a register of resilience tests.
Application and technology catalogs, capability map and data lineage: the screens exist but are not yet reachable from the menus.