Learn how to create and link Risk Treatment Plans (RTPs) to risks for remediation
This article discusses risk treatment plans in the Risk Registers specifically. To learn about risks in the registers, head here. To learn about risk treatment plans in the Risk Libraries, head here.
Risk treatment plans (RTPs) are actions used to combat risks.
Table of contents
- Where are RTPs situated?
- Linking an existing RTP
- Creating a new RTP
- Linking controls & provisions to an RTP
Where are RTPs situated?
Go to Risks > Registers and click into a risk.
Go to the Treatment tab, and in the side panel, you can see all the RTPs that are currently being used to treat risks in your Risk Registers if you switch to All from Linked. Click on the icon next to them to see their details. You can Edit or Delete them while viewing their details.
The Risk Treatment Plan permission is automatically granted to roles with general Risk module access.
You can also run a report on RTPs.
Linking an existing RTP
You may have two risks in your registers that can be combatted in the same way. This means both of these risks can be linked to the same RTP.
You can create the RTP once under one of the risks and link it to the other risk later to avoid doubling up on work.
To link an existing RTP to a risk, go to the Treatment tab in that risk and switch to All. You can search for the RTP and click on ADD to link it to this risk.
It will now be in the Treatment table. Add as many existing RTPs as necessary.
Creating a new RTP
You can bulk import RTPs into the Risk Registers using an Excel spreadsheet, or create a new RTP natively in the platform.
To create a new RTP, click on the + and enter its name. Hit Enter to create it and fill out more details.
Here, you can perform the following actions.
- Edit the RTP name by clicking on the pencil; hit Enter to save.
- Edit the RTP description by clicking on the Aa icon; click Done to save.
- Change the status with the dropdown; when the status is set to Completed, the Completed date is populated automatically
- Set a Due date
- Add Assignee/s
Create as many RTPs as necessary for risks.
When an assignee is added to the RTP, they will see this added to their My tasks.
To learn how to complete a RTP, head here.
Linking controls & provisions to an RTP
You can link controls (or what they are renamed to) and provisions to an RTP; steps are identical.
Click on the + next to Controls or Provisions.
Head to the bottom, press + again to select the control set/authority document that contains the control(s)/provision(s) you want to link, then click Add.
The control set/authority will appear at the bottom, and all its content will appear at the top in a list. Link and unlink items using the link icon, or see more of the item's details by clicking the arrow next to it.
Link multiple control sets/authorities if necessary; switch between controls and authorities using the tabs.
You can filter by which control set/authority the items in the list are from.
Click the arrow to go back, and you can see everything linked to the RTP.
