Track risks

Find risks, assess exposure, assign responsibility, and follow treatment and review decisions.

Open Risks to work with the Risk Register for your selected workspace. Each risk belongs to a project and an artifact, such as an assessment, document, contract, or timeline.

Risk Register cards showing example risks, scores, owners, appetite, and review dates. — Compare risk context, scores, ownership, and review dates in Cards view. Example data.

The workspace needs an active Platform license. You can read risks in projects you can access. Creating or changing a risk requires Contributor, Admin, or Owner access to its project. Workspace Admins and Owners manage the workspace's risk appetite and review policy.

Start with the task you need to complete:

Find and review risks: search, filters, views, dashboard summaries, and exports.
Create a risk: choose its project context and describe what could go wrong.
Score and treat a risk: assign owners, compare exposure before and after controls, and track treatment actions.
Review and close a risk: record reviews, acceptance, dismissal, reopening, or deletion.
Add evidence and controls: attach supporting sources and map controls.
Link related risks and discuss decisions: relationships, comments, activity, and sharing.
Record threats, weaknesses, and vulnerabilities: maintain the risk's technical context.
Set risk appetite and review policy: configure workspace guidance and review rules.

If a risk is missing, check the selected workspace and clear the register's filters. If you can read a risk but cannot change it, ask a project admin to check your project role. For a persistent loading or saving problem, use Sorena Support.