Operations

Link a risk assessment to a schedule

Open your published risk assessment, assign a review policy, and add item-level tasks with due dates so the assessment stays current and actively monitored.

Before you start

You need the Manager or Admin role for the Risks module to edit assessment settings and assign review policies. The assessment must be published; review schedules and tasks are not available on draft versions.

Set the lifecycle dates

Effective From and Expires On dates control when the assessment version is active and when it should be replaced. Setting them keeps the review schedule aligned with the assessment's validity period.

  1. Open the published risk assessment.

  2. Click Edit to open the assessment form.

  3. In the Effective Period section, enter an Effective From date if the assessment should not go live immediately.

  4. Enter an Expires On date if the assessment has a fixed review or renewal deadline.

  5. Save the assessment.

Leaving both dates blank means the assessment is effective from the moment it is published and remains current until a newer version is published. See Working with risk assessment versions for details on publishing and versioning.

Assign a review policy

A review policy creates the recurring schedule that reminds reviewers to check the assessment for accuracy and currency. You can assign a policy when creating the assessment or at any time by editing it.

  1. Open the published risk assessment and click Edit.

  2. Select a Review Policy from the dropdown.

  3. Save the assessment.

If no review policy exists yet, create one in Settings > Governance > Review Policies. See Creating Review Policies for the full steps. Only one review policy can be active per assessment at a time.

Add follow-up tasks with due dates

Create tasks from individual risk items to track corrective or monitoring work. Each task is linked to the item and its completion is tracked automatically.

  1. Inside the risk assessment, open the risk item that needs follow-up work.

  2. Click Create Task.

  3. In the Start Date and Due Date section, set a Due Date.

  4. Assign the task to the person responsible for the work.

  5. Save the task.

Repeat for any other risk items that require active tracking. Open tasks appear under Tasks created from this risk assessment item on the item. If no tasks are needed, you can skip this step and rely on the review policy alone.

Verify the schedule is active

Confirm that the review policy is linked and that the next review is scheduled.

  1. Open the risk assessment and go to the Reviews tab.

  2. Check the schedule card:

    • If a policy is assigned, it shows Current Review Schedule with the interval, last reviewed date, next due date, and reviewers.

    • If no policy is assigned, it shows No Review Schedule and a message that the assessment does not have an automatic review schedule configured.

  3. Alternatively, go to the risk assessments list and check the Next Review column. A date here means the schedule is active; No policy means it is not.

What happens next

When the next review date is reached, the review policy sends reminders to the assigned reviewers. The assessment remains published while the review is pending. After the review is completed, the next due date is recalculated automatically from the completion date plus the policy interval. You can override the next due date before the first review happens if needed; see Change or reset a review due date for details.

Was this helpful?