Skip to main content

Adding an issue to the risk intake register

Roles and permissions

The following roles can add a proposed risk to the risk intake register:

  • Anyone with manager or contributor permissions for the intake register.

Issues are deficiencies, non-conformities, findings, or exceptions. If you find issues related to your risk intake register, you can add them either from the register or the Work items > Issues tab.

Note

To add an issue to a specific proposed risk, you must add the issue to the Work items > Issues tab and select the proposed risk as the source.

  1. From the left menu, select Risk.

  2. Click the Intake register card.

  3. Select the Issues tab.

    The list of issues displays.

  4. Click +New.

    The Create new issue window displays.

  5. Enter the following information:

    1. Summary (required) - A summary of the issue and the potential result if it isn't remediated

    2. Description - A detailed overview of the issue

    3. Make issue private checkbox - Select this checkbox to make the issue private. Doing so restricts inheritance—only users explicitly added to the issue’s facepile can see the issue. Other users (such as members of affected objects) can see that the issue exists, but they’ll only see the issue ID. To access the issue, they’ll need to contact the issue manager(s).

    4. Action plan - The plan to remediate the issue

    5. Impact - The impact the issue has on your organization if it isn't resolved

    6. Priority - The priority level for resolving the issue

    7. Assignee - The individual who will work to remediate the issue

    8. Effort level - The amount of effort it'll take your organization to remediate the issue

    9. Business owner - The individual who owns the issue. Note that a contact can also be an owner.

    10. Executive sponsor - The individual who is of senior level and ultimately responsible for overseeing the remediation of the issue

    11. Due date - The date that the remediation is due

    12. Discovered on - The date that the issue was discovered

    Tip

    Business owners and executive sponsors can have an Unassigned status.

    For example, if a business owner had been previously assigned to the issue, but the need for an owner is no longer required, the status can be set to Unassigned.

  6. Click Create.

In this section: