Adding and managing controls

After a risk is identified, you will need to plan for mitigating the risk. You can do this by creating a control and associating it with the risk. The control will reduce the severity and the impact of the risk and lower the chance of that risk happening in your organization.

Add a control to the Risk Manager

In the Risk Manager, you can keep track of your controls and record key pieces of information about each one.

Example

Scenario

You have identified and validated a risk in your organization, i.e., a Virus Threat. Now, you want to add a control to mitigate that risk.

Process

Help topicWorking with controls

You open the Risk Manager app and add the control (for example: Anti-virus Software).

Result

The Risk Manager app saves your control and automatically assigns it the Draft status.

What's next?

After you have added the controls, you have to link your controls to the risks. For more information, see Creating risk relationships.