<!-- RTOSafe Help — rendered version: https://rtosafe.com.au/help/risk-register-setup -->

# Create a Risk

***

## When to Use This

Use the risk register to:

* Document potential threats to your RTO's operations or compliance
* Assess risks before you put controls in place
* Track who's responsible for managing each risk

***

## Before You Start

* Decide what you're trying to protect against (compliance, financial, operational, training quality, etc.)
* Think about what could go wrong and how likely it is

***

## Steps

<div class="help-stepper">

<div class="help-step">
<div class="help-step-number">1</div>
<div class="help-step-content">

**Open the Risk Register**

Go to [**Registers → Risk**](https://app.rtosafe.com.au/Risk). Click **Add Risk**.

</div>
</div>

<div class="help-step">
<div class="help-step-number">2</div>
<div class="help-step-content">

**Describe the risk**

Enter a clear **Title** (what could go wrong) and **Description** (more detail about the risk and its potential consequences).

Optionally select:

* **Risk Owner**: The staff member responsible for managing this risk
* **Business Area**: Helps categorise risks (Governance, Compliance, Financial Viability, Training & Assessment Quality, Student Lifecycle & Wellbeing, Staff & Capability, Systems, Technology & Resources, or Third-Party & Partner Arrangements)

</div>
</div>

<div class="help-step">
<div class="help-step-number">3</div>
<div class="help-step-content">

**Assess inherent risk**

Rate the risk _before_ any controls are in place:

* **Likelihood**: How likely is this to happen? (Rare → Almost Certain)
* **Impact**: How bad would it be if it happened? (Insignificant → Catastrophic)

RTOSafe assigns a risk level based on your ratings: Low, Medium, High, or Critical.

</div>
</div>

<div class="help-step">
<div class="help-step-number">4</div>
<div class="help-step-content">

**Save**

Click **Create**. The risk is added with `Pending` status.

</div>
</div>

</div>

***

## What Happens Next

* The risk appears on your register with its inherent risk score
* RTOSafe generates an AI analysis of the risk (takes a few moments)
* You can now [add controls](/help/risk-register-controls) to mitigate the risk
* Once you add controls and set a review date, the status changes to `Active`

From the risk details page, you can also:

* Link the risk to specific scope items (training products or units it affects)
* Link to continuous improvement initiatives that address the risk

***

## Common Issues

<details>

<summary><strong>Not sure how to rate likelihood/impact</strong></summary>

Use your best judgement based on past experience. You can always adjust ratings later as you learn more

</details>

<details>

<summary><strong>Risk score seems too high or low</strong></summary>

Reconsider your likelihood and impact ratings

</details>

<details>

<summary><strong>Want to link this risk to specific training products</strong></summary>

You can do this from the risk details page after creating the risk

</details>