How to create a Risk Assessment

How to create a Risk Assessment

You can create a Risk Assessment by selecting the "Add New Risk Assessment" button on the top-right of the Risks page. 

The Risk Assessment creation process involves 4 steps for initial creation, plus a verification step.

Step 1: Categorise
In this step you will select the Type and Category of the Risk Assessment, as well as the Location and Subject (Title).

The specified Owner of the Risk Assessment will be responsible for its content during creation, and duplicates of the Risk Assessment can be made later, if the option for "Master Copy" is selected at this stage.

Once these fields have been completed, you can select  "Save" and exit to return later, or "Save and Next" to proceed to the next step.

Step 2: Identify
Here, you can first specify how you identified the Risks in the Assessment.
You can select which method through which you identified them, and upload files for evidence, such as meeting minutes, or audit results. This part is optional.

Next, you select the specific Risks identified for the Assessment using the Risk Universe.

Rapid Risk provides a structure called the Risk Universe which allows for the easy identification and selection of Risks through a 3-tiered categorisation system.
Once you have selected all the Risks for the Risk Assessment, you can select  ‘Save’ and exit to return later, or ‘Save and Next’ to proceed to the next step. 

Step 3: Rate Risk

In Step 3, each Risk selected from the previous step will be listed, and can be expanded and accessed separately by clicking on it.

Once expanded, you then select the Pre-Risk Rating – this consists of the Inherent Risk Rating (IRR) and Desired Risk Rating (DRR). You do this for each type of risk that applies, and select "Not Applicable" for the rest.               

If you have the "Risk Response" field active, this will set the conditions which must be met in the next step (Step 4), in order to be able to complete the Risk.

Once you have completed this for all the Risks in this Assessment, you can select  "Save" and exit to return later, or "Save and Next" to proceed to the next step.

 

Step 4: Root Cause and Control Measures

In Step 4, each Risk will be listed, and can be expanded and accessed separately by clicking on it.

The Pre-Risk Rating  from Step 3 will be shown first for reference, followed by the fields to add Root Causes and Contributory Factors.

At least one Root Cause and Contributory Factor must be chosen for each Risk, and then at least one Control Measure must be created for each Contributory Factor.

These Control Measures can be a combination of existing Control Measures and new proposed Control Measures.

An Effectiveness must be selected ("Not Effective" to be selected for new proposed Control Measures not yet implemented), and Actions may be raised to either implement the new Control Measure, or improve an existing one.

Next, the Post-Risk Ratings must be specified for the Residual Risk Rating (RRR) and the Current Risk Rating (CRR).

Once these details have been entered, select "Save" on the bottom-right.
If all mandatory sections have been completed, and any conditions from the Risk Response are met, then the "Mark Complete" button will become available, allowing the individual Risk to be completed.

Once all Risks in a Risk Assessment have been completed, you can return to the "Risk" page dashboard, where the status of the Risk Assessment will now be Complete.