Risk Treatment Module

Risk Treatment Module

Overview

The Risk Treatment module provides a dedicated view for managing and tracking all risk treatment actions across your organization. It consolidates treatment plans from the Risk Register for easier monitoring and management.

Key Features

• Centralized treatment tracking
• Treatment status monitoring
• Assignment and accountability
• Due date tracking
• Progress updates
• Treatment effectiveness review

Treatment Options

Standard risk treatment strategies:

• Mitigate - Implement controls to reduce likelihood or impact
• Transfer - Transfer risk to third party (insurance, outsourcing)
• Accept - Acknowledge and accept the risk
• Avoid - Eliminate the risk by avoiding the activity

Creating Treatment Plans

Treatment plans are created from Risk Register:

1. Open a risk in Risk Register
2. Go to Treatment tab
3. Click Add Treatment
4. Fill in treatment details:
   • Treatment Type - Mitigate, Transfer, Accept, or Avoid
   • Description - Detailed treatment plan
   • Assignee - Person responsible
   • Due Date - Target completion date
   • Status - Current status
5. Save the treatment

Viewing All Treatments

Access consolidated treatment view:

1. Navigate to Risk - Risk Treatment
2. View all treatments across all risks
3. Filter by status, assignee, or due date
4. Track overall treatment progress

Updating Treatment Status

Keep treatments up to date:

1. Open the treatment
2. Update status (Not Started, In Progress, Completed)
3. Add progress notes
4. Adjust due date if needed

Treatment Effectiveness

After implementing treatments:

• Review if treatment achieved desired outcome
• Update residual risk score in Risk Register
• Document lessons learned
• Close treatment when complete

Best Practices

• Assign clear ownership for each treatment
• Set realistic due dates
• Regularly update status
• Link treatments to specific controls
• Review treatment effectiveness periodically
• Document evidence of treatment completion