Workflow of risk response task
Summarize
Summary of Workflow of Risk Response Task
The risk response task workflow is a systematic approach aimed at managing identified risks through action plans that involve accepting, mitigating, avoiding, or transferring those risks. This structured process enhances governance, risk management, and compliance efforts within an organization.
Show less
Key Features
- Task States:
- Draft: Initial state upon creation.
- Work in Progress: Indicates the task is being worked on and submitted for review.
- Awaiting Approval: The task is under review by approvers.
- Closed: Indicates the task has been approved.
- Creation of Risk Response Tasks:
Risk response tasks are created by assessors who identify risk response plans. Users with the snriskadvanced.araassessor role can create and assign these tasks to users with the snrisk.user role.
- Action Items:
Assessors can create multiple strategies and granular tasks known as action items to effectively manage risks. These can be defined in the Draft or Work in Progress states.
- Approval Process:
Once a plan of action is defined, the task owner can request approval from designated approvers, transitioning the task to the Awaiting Approval state.
Key Outcomes
Upon successful completion of the workflow, approved risk response tasks are moved to the Closed state, signifying that the risk has been adequately addressed. If rejected, the task returns to the Work in Progress state for further refinement. It is essential that all action items associated with a risk response task are closed before moving to Awaiting Approval, ensuring thorough management of the risk response process.
The risk response task workflow is a structured process to manage assessed risks by defining plans of action to either accept, mitigate, avoid, or transfer those risks.
Exploring the user journey for Risk response task
- Draft: The default state when a risk response task is created.
- Work in progress: The state when the risk response task owner starts working on it and sends it to the approver for review.
- Awaiting approval: The state when the approver reviews the risk response task and either approves or rejects it.
- Closed: The state when the approver approves the risk response task, moving it to the Closed state.
- Create a risk response task
- After an assessor identifies the risk response plans, the assessor then creates risk response tasks. The user with the sn_risk_advanced.ara_assessor role can create a risk response task and assigns them to the risk user with the role sn_risk.user. After creation, the risk response task moves to the Draft state. For more information, see Create a risk response task in the Risk Workspace.
- Create action items
- The risk assessor can create multiple strategies with various action items for each risk response task. Action items are specific, granular tasks defined within a risk response task to address and manage risks effectively. Action
items can be created and defined when the risk response task is in either the Draft state or the Work in progress state. For more information, see Create an action item in the risk response task.
Action items have their own independent workflow. For more information, see Workflow of action item in risk response task.
Note:You can create risk response action items for all types of risk response tasks except for Risk acceptance tasks. - Respond to the risk response tasks
- After the risk response task is assigned, the risk response task owner moves the risk response task to the Work in progress state. In this stage, the risk response task owner defines a plan of action for the risk response task.
After defining the plan of action, the task owner can request for approval from the approvers defined in the approval configurator. By default, a single level of approval is enabled for all types of risk response tasks, where the
risk owner can approve the tasks. These approvals can be configured based on requirements. After the task owner request for approval, the risk response task moves to the Awaiting approval state.Important:All action items associated with the risk response task must be closed to move the risk response task from Work in progress to Awaiting approval state.
- Approve or reject the risk response task
- In the Awaiting approval state, the approvers defined in the approval configurator can review the plan of action and either approve or reject the risk response task. The risk response task moves to the Closed state, if the all the approvers approve the task. If any of the approvers reject the task, then the risk response task moves back to the Work in progress state.