Managing Risk
Managing Risk
This is the day-to-day section — the pages a risk manager or risk owner uses every week. It assumes an administrator has already configured a methodology and a layout. If nothing has been set up yet, start with Configuration.
In this section
| Page | What it covers |
|---|---|
| Risk registers | Creating registers, the register list and detail views, the heat matrix. |
| Adding and editing risks | Step 1 of the Add Risk wizard — identifying and describing a risk. |
| Assessing a risk | Step 2 — inherent, residual and target scoring. |
| Risk appetite and escalation | Setting the threshold above which a risk needs a decision. |
The daily loop
Most work in the app follows the same four steps:
- Raise a risk in the register that owns that domain.
- Assess it — inherent first, then residual once controls are attached.
- Treat it, by attaching controls and building a treatment plan.
- Review it on the cadence your register defines.