How it works
Risk
Risk: the register, where compliance gaps and exposures become tracked, scored risk.
Risk is the single register for tracking risk end to end: where Exposure and Compliance both end up, once something is worth tracking rather than just fixing.
Typical workflow
Review the register
Open the Register to see what's currently tracked. Open an entry for its inherent and residual scoring, and what it traces back to.
Where entries come from
Some are written by hand, some arrive via an approved proposal in Actions, and the most exploitable findings are promoted automatically.
Close a risk
A risk moves open, to in progress, to mitigated or accepted, to closed. Closing a risk doesn't resolve the finding or gap it arose from.