How to Use the Risk Register

How to Use the Risk Register

Prerequisites

  • Access to the Risk Register section
  • Understanding of your organization's risk landscape

    • Accessing the Risk Register

    Navigation: Sidebar → Risk Register
  • Click Risk Register in the sidebar.
  • The risk list page loads showing all risks with search, sort, and filter options.

    • Creating a New Risk

  • Click the Add Risk button.
  • Fill in the risk details:
  • Risk Name — descriptive name
  • Description — detailed risk description
  • Assignee — user responsible for this risk
  • Due Date — target resolution date
  • Tags — optional categorization
  • Click Submit to create the risk.

    • Risk Lifecycle (4-Step Workflow)

    Click on a risk to open the Risk Management page with a 4-step stepper:

    Step 1: Risk Initiation

  • Review and confirm risk details (name, description, owner, due date).
  • Add additional context or documentation.

    • Step 2: Risk Scoring

  • Evaluate likelihood and impact.
  • The system calculates a combined risk score.
  • The score determines priority and severity.

    • Step 3: Risk Management

  • Define the treatment strategy (mitigate, accept, transfer, avoid).
  • Upload risk evidence documenting treatment actions.
  • Link related assets or controls.

    • Step 4: Risk Closure

  • Document the resolution summary.
  • Confirm closure to complete the lifecycle.
  • Closed risks are retained for historical reference.

    • Filtering and Searching

    FilterOptions
    SearchFind risks by name
    Treatment StatusPending, Planning, In Progress, On Hold, Resolved, Accepted, Closed
    SortBy date, severity, or status

    Troubleshooting

    IssueSolution
    Cannot create a riskVerify your role has Risk Create permission.
    Cannot proceed to next stepComplete all required fields in the current step.
    Evidence upload failsCheck file format and size limits.
    Risk score not calculatingEnter both likelihood and impact values in the Scoring step.