Risk Management
Risk management workflow templates for assessing and treating risk, covering business risk assessments with treatment approval and monitoring, supplier risk assessments with due diligence, privacy impact assessments and root cause analysis. Ratings, treatments, approvals and residual risk decisions are recorded on each record, with a timeline of who decided what.
Benefits
- Rate risks consistently and route high ratings for approval
- Record treatments, owners and residual risk on each record
- Assess suppliers before they're engaged
Common Use Cases
Risk Management Templates(4)
Risk Assessment Workflow
Captures business risks via an intake form, tracks them through assessment, treatment approval (for High/Extreme ratings), treatment execution, monitoring, and closure, with status tracking and notifications throughout.
Supplier Risk Assessment Workflow
Collects a supplier risk assessment request, runs due diligence and (where applicable) security/privacy review, captures risk reviewer treatment and residual risk, routes it through risk manager approval with up to two rework cycles, and notifies the requester of the accepted outcome.
Privacy Impact Assessment Workflow
Manages privacy impact assessments end-to-end: intake of an initiative, privacy officer screening, full assessment by a privacy assessor when required, officer approval with rework loop, owner acceptance of residual risk, and closure with next review date tracking.
Root Cause Analysis Workflow
Manages recurring incidents/defects from intake through investigation, corrective/preventive actions, effectiveness review, and quality sign-off, with status tracking and closure notification.
Frequently Asked Questions
What Risk Management workflow templates are included?
Risk Management includes templates for business risk assessments with treatment approval and monitoring, supplier risk assessments with due diligence, privacy impact assessments, and root cause analysis of recurring incidents and defects.
Who are the Risk Management templates for?
They're designed for risk managers, compliance and procurement teams, and the managers who own risks. Owners record assessments and treatments on their tasks, and approvers sign off high ratings and residual risk.
Can I change a risk management template to suit my organisation?
Yes. Publish the template and it runs straight away, with no installation. Describe the change in plain English — for example, change the rating scale or add an extra approver for extreme risks — or edit the steps in the workflow editor. Earlier versions are kept.