Risks
README
Dashboard Actions
The Dashboard Actions section in Sprinto’s Risk Management module guides you through every interaction you can perform with risks inside the platform. These actions cover the entire lifecycle of a risk—from creation to closure—and ensure that your organisation stays compliant, informed, and audit-ready.
Here’s a breakdown of the actions you can perform directly from the Risk Register and associated dashboards:
1. Create a Risk Register Entry
Add risks to Sprinto using three available methods:
- Select risks from the predefined Risk Library
- Create custom risks manually
- Use CSV bulk upload to import risks at scale
This is your starting point for defining the risk profile of your organisation.
2. Score a Risk
Complete risk scoring by assigning:
- Inherent Likelihood and Impact
- Residual Likelihood and Impact
Scoring enables Sprinto to visualise the risk in heat maps and unlock further actions like treatment and assessment.
3. Map Controls to a Risk
Associate specific security controls with each risk to reduce their likelihood or impact. You can:
- Map controls manually by category or framework
- Use Sprinto AI to receive automated control suggestions
4. Define and Track Risk Treatments
Choose how you wish to treat each risk:
- Accept, Avoid, Transfer, or Further Mitigate
- Document treatment notes
- Create and assign treatment tasks with due dates and attachments
5. Conduct a Risk Assessment
Perform periodic reviews of all completed risks:
- Assess risks in-app via the Risk Register
- Upload an external risk register document
- Submit reviewed assessments to mark the cycle complete
6. Review a Risk Assessment
Senior management can review submitted assessments and formally approve them. This step finalises the risk assessment process and ensures audit trail integrity.
7. Edit or Delete a Risk
You can:
- Edit details like risk owner, parameters, and treatment plan before approval
- Delete risks that are incomplete or no longer relevant
8. System Checks and Notifications
Sprinto provides system-generated alerts for:
- Unscored risks
- Overdue assessments
- Incomplete treatment tasks
- Pending approvals
These system checks help ensure you never miss a critical compliance step.