Set risk appetite and review policy
Configure tolerated severity, assessment guidance, review cadence, and escalation rules for your workspace.
Open Workspace General. The risk settings are Risk appetite and Risk review policy. You need workspace Admin or Owner access to change them, and the workspace needs an active Platform license.
Set the tolerated severity
In Risk appetite, choose Edit. Select Maximum tolerated severity, add a Statement, and provide Assessment guidance for people assessing risks. Choose Save, or Cancel to restore the saved values.
Risks at or below the configured maximum severity are within appetite; risks above it exceed appetite. Unconfigured leaves the threshold unset. Use the register's Over appetite filter to find records that need attention after reviewing the saved setting.
Set review and escalation rules
In Risk review policy, choose Edit. Set the Due-soon window in days. For each severity, choose its Cadence, the number of days under Escalate after, and whether to Notify owner on breach.
Keep Include review cadence updates selected when you want to save cadence changes. Keep Include escalation rule updates selected when you want to save escalation changes. These controls determine which groups of rules are included in the save. Review both groups before choosing Save.
Use Cancel to abandon unsaved policy edits. If saving fails, read the error and check the numeric fields before retrying. The saved summary lists the due-soon window, review cadences, and escalation rules; check it after a successful save.
The policy supplies workspace review rules. For an individual risk's cadence and resolution target, use its Lifecycle control. Complete an actual review with Mark reviewed.
If Edit is missing, ask a workspace Admin or Owner to check your role. If a section reports a license or loading problem, resolve that problem before changing its values. Contact Sorena Support if it persists.