Logging and managing information risks

The Risk module is your information risk register. Every identified risk to personal data or information security should be recorded here, assessed, and tracked to resolution.

How to log a risk

1. 1 Go to Dashboard → Risks.
2. 2 Click + New Risk (bottom right).
3. 3 Enter a clear Risk Title (e.g. "Unencrypted laptops used for home working").
4. 4 Add a Description explaining the nature and potential impact of the risk.
5. 5 Select the Risk Category: Data Protection, Cyber Security, Physical Security, Business Continuity, Legal/Regulatory, or Other.
6. 6 Set Impact: Low, Medium, High, or Critical.
7. 7 Set Likelihood: Low, Medium, or High.
8. 8 Enter the Owner's name.
9. 9 Add a Mitigation Plan describing what actions will reduce the risk.
10. 10 Set the Status: Open, In Progress, Mitigated, or Closed.
11. 11 Click Save.

Risk rating matrix

Folelse automatically calculates a risk rating from your Impact and Likelihood scores:

• Low Impact + Low Likelihood = Low Risk.
• High Impact + High Likelihood = Critical Risk.
• High Impact + Low Likelihood = High Risk.
• Low Impact + High Likelihood = Medium Risk.

Creating a task from a risk

Click "Create Task" on a risk card to automatically generate a linked remediation task, pre-filled with the risk title and description. The task and risk remain linked so progress on the task is visible from the risk record.