How can I monitor closed risks?

Suppose you need to monitor risks after they've been treated, or after a project has been completed. That might be part of your risk management process, or it could be an audit requirement. You may have discovered that closed risks aren't appearing in the risk matrix nor the risk register views. This article explains how to monitor risks that have already been processed.

Step-by-step guide

Internally, Risk Register filters out any risks that have a value in the Resolution field, which is why your closed risks aren't appearing in Risk Register views.

One common approach is to introduce a new step in the risk management workflow called 'Monitoring', which appears before the 'Closed' status, and does not require that a Resolution value be set. Risks that you want to track in your audit process should be moved into the 'Monitoring' status instead of being closed.

Now, it might be that you want to record the manner in which the risks were dealt with. Until now, you might have been using the Resolution field for that purpose. We recommend that you create a new custom field, perhaps called 'Treatment' or 'Disposition'; and that you set a value for that field when you move the risk into the 'Monitoring' status.

Risks that are in 'Monitoring' status will still appear in the risk matrix and risk register, since they don't have a value in the Resolution field.