Creating and using a risk library

Learn how to create and manage risk libraries in 6clicks

Risk libraries allow for a bank of risk templates to be pre-prepared for use in 6clicks. These are not live records and do not appear on the register.

Libraries provide a way for organizations to define risk templates, and then push these to the register if and when they occur.

You can create these libraries at either the Hub level or the Spoke level.

Table of contents:

• Creating a risk library
• Adding a new risk to a library
• Importing risks
• Adding an existing risk to another library
• Adding risk treatment plans
  • Manually adding a risk treatment plan
  • Importing risk treatment plans via Excel
• Using published risk libraries
• Pushing risks to the risk registers
• Showing Hub level risk libraries at the Spoke level

Creating a risk library

Go to Risks > Libraries. Click Create and choose Risk library to create a new risk library.

The "Saved successfully" confirmation pop-up will appear at the bottom left of the screen after you enter the name of the new risk library.

Navigate to your new risk library by clicking the left and right arrows if needed.

Adding a new risk to a library

To create a new risk, click Create and choose Risk.

You can then fill in the following fields.

• Name
• Description
• Risk Domain: pick a suitable domain from the list or customize your own.
• Risk library: Choose the risk library you just created (you can add it to other libraries later)
• Common cause
• Potential impact

Once done, click Create a risk.

Upon creating the risk, it will appear at the top of the All tab.

It will also be in the library that you selected.

Importing risks

To bulk import risks, click More > Import risks.

Click Download Template.

Using the template provided, add your risks and fill in their details.

• Name
• Description
• Common cause: Each common cause should be on a new line in the cell.
• Potential impact: Each potential impact should be on a new line in the cell.
• Category: Use a suitable category/domain for the risk. See all categories for reference or, if you have already customized your own domains, pick from one of those instead.
• Risk Library: Add the name of the risk library you want to add the risk to. If you enter the name of a risk library that does not yet exist, the risk library will be created at import.

Here is an example of a valid import file.

Upload the completed spreadsheet where you downloaded the template, in More > Import risks.

Adding an existing risk to another library

You can also add risks from one library to another.

Choose the risks you want to add to another library and select Add to existing library at the top of the table.

Select a risk library from the drop-down list, then click Add Risk. You can then find the risks also in your destination library.

You can also add one risk to an existing library by clicking on the 3 dots to the right of the risk.

Adding risk treatment plans

Treatment plans in the libraries are abstract, i.e. they set out general treatment actions that will be assigned with due dates to users once active in the risk registers.

• Manually adding a risk treatment plan
• Importing risk treatment plans via Excel

Manually adding a risk treatment plan

Select the risk you want to add a treatment plan to, and click the + next to Risk treatment plan in the side panel.

Choose between creating a new treatment plan or linking an existing treatment plan.

For new treatment plans, fill in the Title field and then hit Enter on your keyboard. This will create the treatment plan and give you the option to fill in the Description.

Existing treatment plans from other risks can be linked via the Existing tab.

Back out into the risk detail side panel by clicking on the risk again or the back arrow at the top of the side panel, and expand the Risk treatment plan section to see treatment plans linked to the risk.

Click on the 3 dots to the right of a treatment plan to edit, delete, or unlink it.

Importing risk treatment plans via Excel

In your Risk libraries, click on More > Import risk treatment plans.

Click on Download Template.

Fill in the spreadsheet accordingly.

• RiskName: use the name of the risk that you want to link this treatment plan to.
• RTPName: name your risk treatment plan.
• RTPDescription: describe your risk treatment plan.

Upload your completed template and your risk treatment plans will populate under their risks.

Using published risk libraries

Once a risk library is published, you can then:

• Push risks to the risk registers to put them in action
• Populate the risk registers via automation in Question Based Assessments
• Populate the risk registers via automation in Requirement Based Assessments

Pushing risks to the risk registers

Select the risk/s you wish to push to the risk registers, then click Add to risk registers.

Click Yes when prompted.

You will receive a notification in the bottom-left corner of the screen when successful.

An Added to risk registers icon will appear next to applicable risks.

The Risk registers now contain the pushed risk and its treatment plans, if any. Click into the risk from the registers and go to its History tab to see which user pushed it here, and which library it came from.

Showing Hub level risk libraries at the Spoke level

You can choose to show or hide your Hub's risk libraries at the Spoke level.

If hidden, the libraries will not be shown in spokes, with no impact on assessment recommendations flows.

In your Hub, go to Administration > Settings and then the General tab.

Scroll down to find Show libraries in Spokes.

Use the checkboxes to show or hide your Hub libraries in your Spoke/s.