Folelse

Help Centre

Risks & Tasks 4 min read

Logging and managing information risks

The Risk module is your information risk register. Every identified risk to personal data or information security should be recorded here, assessed, and tracked to resolution.

How to log a risk

  1. 1 Go to Dashboard → Risks.
  2. 2 Click + New Risk (bottom right).
  3. 3 Enter a clear Risk Title (e.g. "Unencrypted laptops used for home working").
  4. 4 Add a Description explaining the nature and potential impact of the risk.
  5. 5 Select the Risk Category: Data Protection, Cyber Security, Physical Security, Business Continuity, Legal/Regulatory, or Other.
  6. 6 Set Impact: Low, Medium, High, or Critical.
  7. 7 Set Likelihood: Low, Medium, or High.
  8. 8 Enter the Owner's name.
  9. 9 Add a Mitigation Plan describing what actions will reduce the risk.
  10. 10 Set the Status: Open, In Progress, Mitigated, or Closed.
  11. 11 Click Save.

Risk rating matrix

Folelse automatically calculates a risk rating from your Impact and Likelihood scores:

  • Low Impact + Low Likelihood = Low Risk.
  • High Impact + High Likelihood = Critical Risk.
  • High Impact + Low Likelihood = High Risk.
  • Low Impact + High Likelihood = Medium Risk.

Creating a task from a risk

Click "Create Task" on a risk card to automatically generate a linked remediation task, pre-filled with the risk title and description. The task and risk remain linked so progress on the task is visible from the risk record.

Your information risk register is evidence for the DSPT, CQC, and ICO accountability requirements. Aim to have all risks reviewed at least quarterly, with Critical risks reviewed monthly.

Need more help with this?

Contact support

Related articles

Back to Risks & Tasks