Risk register
Risks with likelihood and impact before and after controls, a heat map, and a library of controls to link.
The register
Plan → Risk register. New risk opens a form for the risk, its category, an owner, a status, and likelihood and impact on a five-point scale, both inherent (before anything is done about it) and residual (after the controls you have). The register lists risks with their scores and lets you edit or delete them, with Undo.
Heat map
The Heat map tab plots every risk on a five-by-five grid of likelihood against impact, colored from green to red, so the ones in the top right corner are the ones to talk about. Filter by category.
Controls
The Controls tab is a library of around forty standard controls (preventive, detective, corrective and compensating) with an effectiveness rating and framework tags, plus any your organization adds. Link to risk attaches a control to a risk in the register, and each control shows how many risks it covers.
Comments