Risks

Read the risk dashboard

Interpret risk summaries, evidence grounding, trends, and follow-up counts within their displayed scope.

Open the Risk Dashboard and confirm the selected workspace. The workspace needs an active Platform license, and you need access to the projects whose risks you review. Reading the dashboard does not require contribution access. Changes to a risk require Contributor, Admin, or Owner access to both the workspace and its project.

Check the scope before comparing counts

Use the register's search and filters to focus the dashboard. The Risk cockpit bar shows the matching count, filter summary, and trend date range. Check each panel's scope label: panels marked Workspace stats can cover more risks than your current detailed filters.

The headline cards show total and active risks, high or very high inherent exposure, appetite breaches, overdue reviews, open treatment actions, and a Risks Reduced count. Inherent exposure is the exposure before controls; residual exposure is what remains after controls. Appetite is the workspace's tolerated severity.

Select an available card or row to open its register selection, then check the resulting filters. The Total Risks card opens an active-risk preset, so its selection can differ from the total including inactive records. Risks Reduced has no register preset.

Find where follow-up work is needed

  • Risk pressure combines active risks, appetite breaches, overdue reviews, and open actions. Select an appetite row to inspect that group.
  • Concentration groups risks by the selected project, artifact, or more specific context. Change the grouping and select a group to inspect it. Page risks and each group's percentage describe the returned group page; the panel can show only the largest groups. Ungrouped identifies risks without that grouping context. A pressure count can include both overdue and appetite signals for one risk.
  • Ownership workload has Owners and Reviewers tabs. Select a person to inspect assigned risks. Unowned means no accountable owner, Unreviewed means no review coverage, and No actions means no treatment activity. These gap counts overlap, and unreviewed here does not mean the same as an overdue review.
  • Treatment motion compares completed actions with the total and identifies blocked work. Completing an action does not automatically close the risk; review its score and record the lifecycle decision.

Use the matrix to compare severity patterns. Review response strategy, risk aging, exposure by category, and top residual exposures to decide which records to open next. Read each chart's labels and scoring basis before comparing it with another panel.

Risk Dashboard with five matching example risks and summary totals for severity, appetite, reviews, actions and reduced risks.
Compare workspace risk totals, exposure and appetite with no filters applied. Example data.

Read evidence grounding

Evidence grounding describes where risks originate and what supports them:

TabWhat to read or do
TargetsShows the kinds of supporting material linked to risks. Select a target kind to filter the register. Evidence-target totals count targets, so they need not equal the number of risks.
OriginShows the source types from which risks originate. Select an origin to filter the register. When the panel shows Workspace stats, origin totals use that broader scope.
GeographyShows direct geographic assignments on events linked to timeline-origin risks. These rows follow the current filters, as do target rows. Use the register's Timeline geography filter to investigate a place.

Unspecified applicability means the linked timeline event has no geographic scope recorded. One event can have several scopes, so geography counts overlap and must not be added to obtain a distinct total. Direct-assignment rows can also differ from hierarchical geography-filter results.

Interpret activity over time

In Risk Trend, choose Weekly or Monthly to group the displayed period. Read the series as follows:

  • Opened events counts risks by their creation date.
  • Closed events counts currently closed or dismissed risks by their closure date, using their last update when no closure date is recorded.
  • Overdue groups risks by their effective review date when that date has passed and falls within the period.
  • Above appetite counts risks created in each period that currently exceed appetite.
  • Net movement subtracts closures from openings. A positive value means more openings; a negative value means more closures.

These series use the risks' current records and dates. They do not reconstruct every past status change or show the risk position as it stood at each earlier date. The same risk can contribute to several series, so do not add them to obtain a distinct-risk total. Use a risk's Activity to review its individual changes.

If the chart says there is not enough activity yet, check the period and scope before concluding that no risks exist.

Interpret Risks Reduced

The Risks Reduced card currently counts risks with status Treatment planned, Treatment in progress, Mitigated, Transferred, Avoided, Accepted, or Closed. It indicates treatment or decision progress. The count can include a risk whose residual severity has not fallen, so it does not establish that a control reduced exposure.

Open the underlying scores and treatment evidence to compare inherent and residual exposure and judge whether the treatment worked.

Export or recover missing data

Choose Export, then Dashboard PNG, to download an image with its filter context. Wait for the charts to load and review the scope labels before sharing it. For record-level downloads, return to the register export.

An unavailable panel means its data could not refresh. The dashboard retries automatically; visible panels may retain their latest available values. An unavailable count is unknown. An empty panel can mean the selected scope has no matching data. If the problem persists, reload the page, check the selected workspace, and contact Sorena Support.

On this page