Add controls and actions to a risk assessment
After you create a risk assessment, open it to add risk items that document hazards, existing controls, and planned mitigations. Matrix Section hazards are scored against the assessment matrix; Risk Register hazards use a simpler form with a description and optional controls, without scoring. Open an individual risk item to edit its details, add comments, or create follow-up tasks to assign actions to team members and track completion. For a full guide to the item detail page, see View and edit a risk assessment item.
Before you start
You need the Manager role or higher for the Risks module to add risk items and create tasks. If you do not see the Add or Create Task options, ask your site administrator to update your permissions in Settings > User Management > Edit Access. For a full role overview, see Risks roles and access.
Go to Risks and open the assessment you want to update.
In the Matrix Section where you want the hazard, click Add Risk Item.
Enter a Risk Description that describes the hazard or scenario.
In Existing Controls (optional), describe any safeguards already in place.
Under Initial Risk Assessment, click a cell in the matrix to select the severity and likelihood.
In Mitigation Controls (optional), describe the planned controls or actions that will reduce the risk.
Under Residual Risk Assessment, click a cell to assess the remaining risk after the mitigation controls are applied.
Click Add Risk Item.
The risk item is saved to the assessment. You can add more items by repeating the steps above. If the assessment has multiple Matrix Sections, choose the section that should contain the hazard.
Edit an existing risk item
Open the risk assessment and click the risk item you want to change.
The item opens in the dedicated Risk Item Details page. Update the Risk Description, Existing Controls, Mitigation Controls, or risk matrix selections. Risk Register hazards have description and controls but no matrix selections.
Click Save Changes.
Edits are only available when the assessment is in an editable draft. Published and historical versions are read-only. For more details on the item detail page, see View and edit a risk assessment item.
Create a follow-up task for a risk item
Open the risk assessment and click the risk item you want to action.
On the item detail page, click Create Task in the task section.
Review the pre-filled Title and Description. The title defaults to the risk description, and the description defaults from the mitigation controls.
Choose a Priority: Low, Standard, High, or Critical.
Under Assigned to Team, select the group responsible for the work.
Under Assigned to User, select an individual. If you choose someone outside the assigned team, a warning appears, but you can still proceed.
Optionally, set a Start Date for when the task should appear in the assignee's inbox, and a Due Date for when it becomes overdue if not completed.
Add any extra context in Notes.
Click Create Task.
The task is created and linked to the risk item. You will see a Task Created entry in the Tasks section, and the assignee can complete the task from their inbox or work order list. Completion is tracked automatically.
When the assessment is complete, publish it so the controls and tasks are locked for audit. See Working with risk assessment versions for how to publish and version your assessment.
See Work with risk assessment sections for how to add, edit, and reorder sections on the assessment page.
Add a hazard to a Risk Register
Risk Register sections record hazards without scoring. Each hazard has a required Risk Description and optional Existing Controls and Mitigation Controls.
Go to Risks and open the assessment.
In the Risk Register where you want the hazard, click Add (or Add Your First Risk on an empty register).
Enter a Risk Description (required) that describes the hazard or scenario.
In Existing Controls (optional), describe any safeguards already in place.
In Mitigation Controls (optional), describe the planned controls or actions.
Save to add the hazard to the register.
Risk Register hazards appear in the register without score columns. You can switch between card and table view. Open any hazard to access its detail page with comments, followers, tasks, and People & Groups. For the detail page, see View and edit a risk assessment item.