Add Controls and Review a Risk

Controls describe what your RTO does to reduce a risk. Link the controls you rely on, then assess the remaining (residual) risk.

Add Controls

Open the risk from Registers → Risk. In Controls, select Add control and search for an existing control before creating another one.

If nothing suitable exists, select Create new control. Describe the activity and choose its type:

Preventative: helps stop the problem happening.
Detective: helps find the problem when it happens.
Corrective: helps put things right after a problem.

You can also use Find with AI to open the risk assistant. Review its suggestions before linking or creating anything.

Record an Assessment

Link an active control before recording an assessment.

Check the controls in place

Select Record Assessment on the risk. Review Controls in place and what has changed since your last assessment. Select Manage to add or remove controls.

Assess the remaining risk

Rate the remaining likelihood and impact, considering how well the controls work. Add notes to explain your judgement.

Set the next review and save

Choose a Next Review Date after today, then select Save Assessment.

Keep Reviews Current

To clear an overdue review, complete the assessment above. Changing the date on the risk alone doesn’t record a review.

RTOSafe may also ask you to reassess a risk when its controls change.

Common Issues

I can't record an assessment

Check the controls linked to the risk. At least one must be Active or In Review and not archived. If Record Assessment is still missing, ask the person managing your access profile to check your access to Risks.