Risk Review / Next Assessment

Risks in QSToolbox have a risk owner, "Assignee', and a "Next Assessment" due date.

For a newly identified risk, the assignee and due date can be used to set when the initial assessment should be completed.

After that, the "Next Assessment" date is when the risk should be reviewed to check things like:

• whether the risk is still relevant to the organisation
• has the context changed?, e.g., any new situations where the risk is relevant
• are the possible causes and consequences complete and correct?
• are the existing controls described still in place, any changes or new ones to add?
• have the controls been effective? Have there been any related incidents or issues?
• does new info mean the risk ratings need adjusting? (before and/or after controls)

To record a review or re-assessment, go to the "Records" tab for the risk, fill in the fields and save the new record.

Click the "+Add Form... " button if you want to include custom fields in your re-assessment record:

A selection dropdown appears for you to select a Form that has been pre-defined in the 'Forms' module. If you don't want to use a form, you can click 'No thanks" or just ignore it.

Checkbox: tick to confirm this record is a re-assessment.

Next Assessment Date: Change the due date for when the risk should be reviewed again.

Comment: describe any changes made, or comment that no changes were needed

File: optionally upload a file - e.g., a new detailed risk assessment, a scanned review record

Click SAVE.