Risk management involves managing initiatives to mitigate risks of varying degrees of criticality for the company.
These risks are declared in the Administration > Risks & Risk types > Risks section.
A risk is characterized by:
- A title
- A risk type
- A risk controller (the person responsible for monitoring the risk)
- A status (Opened, Rejected, Closed with success, Closed without success)
- A scope (site, organizational unit, process, and/or product)
- A cause
- A description
- A consequence
- A criticality analysis
Risk types are used to organize risks based on their nature. For example:
- Operational risks
- Economic risks
- Regulatory risks
- GDPR / RGAA
- HR legal obligations
- Strategic risks
- ...
Considering that it is a hierarchical structure, risks types can be defined with the desired level of precision/structuring.