Skip to main content

Record a risk and link mitigating controls in the library

Written by Aurora

Overview

The Risk & Control Library is where tenant administrators maintain risks and controls, then associate controls with each risk so mitigation coverage is visible. This journey follows Part 1: open the library, capture a risk, capture controls, and run Link controls from the risk side.

Who can use this

Role

Responsibility

Content administrators

Keep names, categories, and assignments consistent.

Safety managers

Read Coverage and Uncontrolled risks cards to prioritise linking work.

You need access on ContentManagement and an active tenant. Linking to checklist or form questions still happens inside those editors; this flow covers the library surface only.

Before you begin

  • Open Settings → Content Management → Risk & Control Library.

  • Decide whether you are working on the Risks tab or Controls tab before using Add actions.

  • Download a CSV template when you plan bulk import instead of manual entry.

Walk through the flow

Capture or update a risk

  1. Select the Risks tab.

  2. Click Add Risk (or the + action shown when Risks is active).

  3. Enter Name (required), optional Description, optional Category, toggle Critical risk if it applies, and optional Companies and Locations.

  4. Click Save. The new risk appears in the list or card view.

Capture or update a control

  1. Select the Controls tab.

  2. Click Add Control.

  3. Enter Name (required), optional Description, Control Type (Mitigating or Preventative), Control Hierarchy (for example Elimination or PPE), toggle Critical control if it applies, and optional Companies and Locations.

  4. Click Save.

Link controls to a risk

  1. Return to the Risks tab and locate the risk row.

  2. Choose Link controls (or the equivalent action your UI labels).

  3. In the dialog, review the risk name, search the control list, and tick or untick controls to reflect current mitigation design.

  4. Click Save or Apply so linked counts and coverage stats refresh.

What happens next

  • Linked controls appear wherever the product surfaces counts on the risk card.

  • Checklist Library and Form Builder can reference the same risks and controls when authors configure question properties.

Notes

IMPORTANT: Deleting a risk or control cannot be undone and may break existing links; confirm downstream usage first.

Use Import and Export CSV actions when your programme relies on bulk updates; follow on-screen validation messages if a file fails.

Did this answer your question?