Learn how to create and link Risk Treatment Plans (RTPs) to risks for remediation
This article discusses risk treatment plans in the Risk Registers specifically. To learn about risks in the registers, head here. To learn about risk treatment plans in the Risk Libraries, head here.
Risk treatment plans (RTPs) are actions used to combat risks.
Table of contents
- Where are RTPs situated?
- Linking an existing RTP
- Creating a new RTP
- Linking controls & provisions to an RTP
Where are RTPs situated?
Go to Risks > Registers and click into a risk.
Go to the Treatment tab, and in the side panel, you can see all the RTPs that are currently being used to treat risks in your Risk Registers if you switch to All from Linked. Click on the icon next to them to see their details. You can Edit or Delete them while viewing their details.
The Risk Treatment Plan permission is automatically granted to roles with general Risk module access.
You can also run a report on RTPs.
Linking an existing RTP
You may have two risks in your registers that can be combatted in the same way. This means both of these risks can be linked to the same RTP.
You can create the RTP once under one of the risks and link it to the other risk later to avoid doubling up on work.
To link an existing RTP to a risk, go to the Treatment tab in that risk and switch to All. You can search for the RTP and click on ADD to link it to this risk.
It will now be in the Treatment table for that risk. Add as many existing RTPs as necessary.
Creating a new RTP
To create a risk treatment plan, you can use the Hailey Risk Treatment Plan Generation feature, you can create a new RTP natively in the platform and, you can bulk import RTPs into the Risk Registers using an Excel spreadsheet.
Hailey Risk Treatment Plan Generation
Hailey RTP generation has been designed to automate the definition of risk remediation activities. It allows risk managers to generate potential risk treatment plans for a particular risk. To use this feature, navigate to the risk, click on Treatment and, in the resulting Treatment plans window, click on the Hailey icon to generate treatment plans for the current risk with Hailey.
You will be presented with a dialogue box comparable to the following with a list of potential risk treatment plans for this particular risk. If you do not wish to add a particular risk, you can delete it at this stage (or later, if you wish). If you are satisfied with the list presented, click on Create treatment plans. The treatment plans will be created and linked to the risk where they were generated.
Create a new RTP
To create a new RTP, click on the + and enter its name. Hit Enter to create it and to fill out more details.
After generating a new or multiple RTPs, you can perform the following actions.
- Edit the RTP name by clicking on the pencil; hit Enter to save.
- Edit the RTP description by clicking on the Aa icon; click Done to save.
- Change the status with the dropdown; when the status is set to Completed, the Completed date is populated automatically
- Set a Due date
- Add Assignee/s
Create as many RTPs as necessary for risks.
When an assignee is added to the RTP, they will see this added to their My tasks.
To learn how to complete a RTP, head here.
Linking controls & provisions to an RTP
You can link controls (or to whatever controls have been renamed) and provisions to an RTP; the steps are identical.
Within the RTP, click on the + next to Controls or Provisions.
Head to the bottom, press + again to select the control set/authority document that contains the control(s)/provision(s) you want to link, then click Add.
The control set/authority will appear at the bottom, and all its content will appear at the top in a list. Link and unlink items using the link icon, or see more of the item's details by clicking the arrow next to it.
Link multiple control sets/authorities if necessary; switch between controls and authorities using the tabs.
You can filter by which control set/authority the items in the list are from.
Click the arrow to go back, and you can see everything linked to the RTP.
Review the following linked article for more information on completing a risk treatment plan.