Adding and managing controls
After a risk is identified, you will need to plan for mitigating the risk. You can do this by creating a control and associating it with the risk. The control will reduce the severity and the impact of the risk and lower the chance of that risk happening in your organization.
Add a control to the Risk Manager
In the Risk Manager, you can keep track of your controls and record key pieces of information about each one.
Example
Scenario
You have identified and validated a risk in your organization, i.e., a Virus Threat. Now, you want to add a control to mitigate that risk.
Process
Help topicWorking with controls
You open the Risk Manager app and add the control (for example: Anti-virus Software).
Result
The Risk Manager app saves your control and automatically assigns it the Draft status.
What's next?
After you have added the controls, you have to link your controls to the risks. For more information, see Creating risk relationships.