Using the Enterprise Risk Register
The Risk Register
Creating a new Risk
To create a new risk you will need to follow these steps. Risk Assessment > Risk Register > Create new RiskOption 1: Identify Risk
Used to identify a Risk with a description to then be assessed by Org Admin.
Identify Risk
Option 2: Identify and Analyse Risk
Used to identify and asses a risk to the business filling in the following information. You must select the Category first, this will then generate a Risk Reference.
Identify and Analyse Risk
Depending on what category is selected there may be a prompt to select which controls help to mitigate this risk.
The final step in adding the risk is to evaluate the Inherent(level with no controls in place), residual(current level), target risk(expected level).
Analysis & Evaluation