Risk management
Create a risk with business context
Record the scenario, business impact, and initial assessment so the risk can be owned and treated.
Before you start
Who this is for: Users with permission to create risks.
- Select the organization and search the Risk Register for an existing scenario.
- Agree on the business context and use your organization's scoring methodology.
Follow these steps
Open New risk
Go to Risk > Risk Register and start a new risk. Give it a Title that names the scenario, choose the relevant Category, and describe what could happen. Explain the affected business activity rather than using only a generic topic such as cybersecurity.
Explain business impact
Complete Business impact and Description with the consequence and relevant conditions. A fictional example is loss of access to an essential service during an outage. Record what you know and identify uncertainty in the rationale instead of presenting assumptions as observed incidents.
Record the initial assessment
Choose Inherent likelihood and Inherent impact using the available scale. Add Assessment rationale explaining why those inputs are appropriate. If treatment is already agreed, expand Advanced treatment planning to record its strategy, plan, optional residual or target values, and review date.
Create and check ownership
Choose Create risk and inspect the resulting record. Review Details and assign the Owner where your permissions allow. Confirm the saved scores and follow up through Treatment, Links, Tasks, and Review as appropriate. Creating the register entry does not approve treatment or accept the risk.
What you should see
The risk is recorded with a useful scenario and initial assessment, ready for ownership and treatment work.
If something doesn’t look right
A similar risk already exists
Review its scope before creating another. Distinct business scenarios can be separate, but repeated titles alone are not a useful register.
Optional scores are unknown
Leave them unrecorded until assessed. Missing residual or target information should not be interpreted as zero.
You cannot change the owner
Ask an authorized risk manager or administrator to confirm your update permission.
Still need a little help?
Ask the assistant about these steps, or tell our team where you got stuck.
Contact support