3.1 Create a New Risk
- Click Create New Risk in the top bar (the same button is available on the All Risks page).
- On the General tab, enter the Title and Description, then select Status, Risk Category, Business, Project, and Risk Profile Type as required.
- Switch to the Assessment tab and set Potential Likelihood and Potential Impact; the matrix priority updates automatically in the header. Optionally record residual ratings, causes, consequences, existing controls, and potential cost.
- Switch to the Action Plan tab. Choose a response strategy, enter the mitigation plan, assign owners, and set due dates.
- If the selected Risk Category has a linked form template, complete the additional fields shown below the main tabs (for example, an Environmental Risk form).
- Scroll down to add file attachments if needed.
- Click Save risk. A Risk ID (for example, Risk-001) is assigned automatically from Settings → Numbering.
3.2 View, Edit, and Delete
- From any list or dashboard table, click a risk title to open the detail panel.
- Click Edit to change fields, then Save risk.
- Open the Activity tab on an existing risk to view its SharePoint version history.
- Use row actions → Delete to remove a risk (requires delete permission) and confirm in the dialog.
3.3 List Tools
- Switch between table, list, and card views.
- Search by Risk ID, title, or description.
- Filter by status and matrix priority (Critical, Major, Moderate, Low).
- Apply portfolio filters for business and project.
- Export filtered results to CSV.
- Bulk delete, when you hold delete permission.
3.4 Risk Form Tabs and Supplemental Sections
| Tab / section | Typical content |
|---|---|
| General | Title, description, status, category, sub-category, business, project, profile type |
| Assessment | Likelihood, impact, residual ratings, causes, consequences, controls, potential cost |
| Action Plan | Response strategy, mitigation plan, owners, key dates |
| Category form template | Extra fields shown below the main tabs when Settings → Form Templates links a template to the selected category |
| Attachments | Files linked to the risk item (below the main tabs) |
| Activity | Version history timeline (existing risks only; not shown when creating) |
3.5 Category Form Templates (End User)
- Select a Risk Category on the General tab.
- If an administrator has linked a form template to that category, additional fields appear below the General / Assessment / Action Plan tabs.
- Complete all required template fields before saving.
- Template answers are stored with the risk and appear as custom-field columns in Report Builder.
Administrators create templates under Settings → Form Templates. Each template can include multiple field types (text, dropdown, date, people picker, currency, and more) and optional internal tabs for long forms. See Section 8.2.
3.6 Risk Lifecycle and Workflow Statuses
Each risk moves through organizational statuses (for example Draft, Open, In Progress, Mitigation, Resolved, Closed). Administrators define statuses under Settings → Risk Status & Priority and assign each status to a workflow bucket. Sidebar views group risks by bucket and by due dates.
| Workflow bucket | Sidebar views using it | Typical meaning |
|---|---|---|
| Open | Open | New or acknowledged risks awaiting action |
| In Progress | In Progress | Active treatment or monitoring |
| Mitigation | Custom views, as configured | Controls or actions underway |
| Resolved | Custom views, as configured | Risk treated; awaiting formal closure |
| Closed | Closed | No further action required |
- The Overdue, Due Today, and Due This Week views are driven by action-plan due dates, not by status alone.
- Matrix priority (Critical / Major / Moderate / Low) is separate from workflow status — it reflects Likelihood × Impact.
- Changing status may trigger notification workflows, if configured under Settings → Notification Workflows.
3.7 Attachments and Audit Trail
- On the create or edit panel, scroll to Attachments below the main tabs.
- Click Add files or drag files into the drop zone. Supported types follow SharePoint attachment rules for the Risks list.
- To remove an attachment, use the delete control on the file row before saving.
- After saving, open the Activity tab on an existing risk to view SharePoint version history — who changed what, and when.
Administrators can review changes across the whole application under Settings → Audit Log (Section 8.7).
