From the Treatment view in Risks, you can create risks.
⚠️ It is important to distinguish between risk treatment and risk analysis. In this way, you can create risks that have already been identified and qualified internally.
If you want to create risks from a risk analysis, read this article.
Create a risk register
As with recurring tasks and actions, you need to create a risk register in order to create your various identified risks.
In principle, your register is automatically linked to the root of your main tree. You can always change this by clicking on Edit and then changing the attachment of your register:
🔎 A risk may be into several risk registers.
Current reduction and target of a risk register
In the Treatment view, you have an overall view of the current reduction and target for each register.
The current reduction of a register corresponds to the overall rate of reduction of the risks of this register. It is calculated on the basis of the measures associated with each risk. This figure is expressed as a percentage.
The current target for a risk register takes into account all the measures in each risk treatment plan and their maximum target level. This determines the maximum level of risk reduction in your register.
Example: in the Risks 2025 register, we have a current reduction of 0% and a current target of 30%.
As there is only one risk in this register, we can find this data in the treatment plan for the risk in question:
In my treatment plan, we have combined 2 measures: 1 is already implemented on our security base and 1 is in implementation.
Together, these 2 measures can reduce the risk by 30% (current register target). At the moment, based on the performance of the implemented measure and the fact that a measure is still under implementation in the organization, the current reduction in this risk is 0%.
According to our treatment plan, the target risk reduction cannot exceed 30%.
Create a risk
Once the register has been created, you can add a risk to a register by clicking on Add a risk.
When creating, you must enter :
Name of the risk
Perimeter concerned
Risk status
Approver
Initial and minimum probability
Initial and minimum impact
🔎 You can define an approver for the risk, which must then be submitted for formal approval. Any change to the classification or treatment plan will result in de-validation and re-approval required.
🔎 The initial level corresponds to the level of the risk without treatment. The minimum level is that below which it is not possible to go.
Once you have entered the various parameters, you can save the risk.
💡To find out how to create your risk treatment plan, read this article.