Add a Risk

Go to the Risks module and look for the "+ ADD RISK" button over on the top right hand side of the screen. Click the button to open the Add Risk form.

You must give the Risk a name. This is what you'll see in the Risks register, so make it short and clear, and different from other risks so you can easily find the correct one in the register.

Everything else on the form is optional, so if you're quickly identifying a bunch of risks, you can add each one with just a name and come back to enter the remaining details later.

Here's all the fields:

Name (required) - a name to identify the risk in the register.

Type - type of risk - for reporting or searching. (change the list options in settings)

Inactive - check the box to make the risk inactive if it is no longer relevant to the organisation

Assignee - who is responsible for this risk? Reminders go to this person.

Next Assessment - a due date for when the risk assessment should be completed, or reviewed

Description - provide some information on the context in which this risk might arise, i.e., where / when the risk is relevant.

Causes - what circumstances could cause the risk to eventuate

Consequences - what harm would occur if the risk were to eventuate

Impact - rate the seriousness of the possible consequences

Probability - how likely are the possible causes

Rating - use the values selected for Impact and Probability to determine the Rating from the Risk Matrix

Control Strategy: Select the overall or main strategy for controlling or mitigating the risk. Will the controls reduce the probability of the risk occurring, or reduce the impact if it does occur?

Control Details: Describe the controls you already have in place. (For planned controls, use Tasks). This text can include links, so if you mention a specific procedure, create a link to it directly in the text.

Control Impact, Control Probability, Control Rating - with the controls in place, select impact and probability to determine the residual risk rating.

Projects - is this risk associated with a 'Project' Link it here so you see this risk listed under the selected project(s) risks. If you don't see anything to choose, there aren't any active projects in your site. 

Tags - used in searching and reporting. You can apply multiple tags. If you don't see anything to choose, you'll need to add some Tags in Settings.

Click [SAVE]

An Example:

The example above shows multiple risks for a single hazard. In this case we're determining an overall 'worst case' risk rating, rather than individual risk ratings for each cause and consequence.

If you need to capture the individual risk ratings, either split them up and enter them as individual risks in QSToolbox, or you can retain the summary approach and attach a file with the individual ratings.

Risk Extras

Once the Risk is saved, you can:

  • Add Tasks - to implement new controls, or improve existing controls

  • Upload File attachments
  • Add Comments
  • Add Followers - people to notify when this risk is updated

Related Articles