Open Risk Management at /app/risk-management. The workspace is the overview, the risk register, non-conformities, improvement opportunities, activity, and configuration.
What the module holds
Assessment uses likelihood and impact for the inherent risk and again for the residual risk. The rating comes from your likelihood by impact matrix. The response is accept, treat, avoid, or transfer.
- Risks. Each risk has details, linked assets, an assessment, controls, a response, treatment and evidence, notes, and an activity history.
- Non-conformities. A failure that needs corrective action, evidence, and related links.
- Improvement opportunities. An improvement that is not itself a non-conformity.
- Activity. The combined history of those records.
When you need to change it
How risk management is done is the method. The risk record, risk assessment, response and treatment, non-conformities and improvements, and risk configuration describe the screens.