To manage your risk strategy (e.g. Risk Treatment Plan), click on the Risk ID and Title. This is a hyperlink that will take you to the Risk Drilldown view.
From here, users can select from the following Risk Strategies:
- Transfer: Use this for risks that will be assumed by a third party.
- Avoid: Use this when you plan to eliminate the underlying vulnerabilities of the risk.
- Mitigate: Use this when you plan to identify / implement controls to reduce the overall risk.
-
Accept: Use this when you will accept the risk and take no further action.
Once your Risk Strategy is determined, assignees can sign-off on the risk directly in the Risk Drilldown view.