Open the risk and go to Response and acceptance. The four responses are the only decisions the register offers.
Each response
- Accept (risk appetite). Who accepted it, why, the evaluation date, and how long the acceptance is valid.
- Treat (controls or plan). An evaluation date on the response. The actions and evidence are on Treatment and evidence.
- Avoid. The activity stops. Notes say what is being stopped.
- Transfer. The arrangement, such as insurance, and when the next assessment is due.