Welcome to RiskVault

RiskVault is where your organization keeps track of uncertain events that could affect its objectives. A risk does not simply sit in a list: it moves through a controlled process so the right people can review it, decide what to do, and keep an auditable record.

Risk management in one minute

The usual journey looks like this:

  1. Someone creates a risk and saves it as a draft.
  2. The owner submits it for review.
  3. A reviewer assesses its likelihood and impact, then validates it, returns it for more information, or rejects it.
  4. A validated risk is treated or formally accepted within tolerance.
  5. The organization monitors and reassesses it over time.
  6. When work is complete, the risk is closed and eventually archived.

Your organization can customize parts of this workflow, so names and required fields may differ slightly. See Workflow lifecycle for the full explanation.

The navigation menu can include:

  • Dashboard — personal work, portfolio indicators, heatmap, status totals, and optional SLA information.
  • My Tasks — drafts, assigned actions, approvals, and authorized operational queues.
  • Risk Register — search, filter, review, and manage risks.
  • Reports — build, save, schedule, and export reports.
  • Risk Surveys — collect information and turn responses into draft risks.
  • Assets — browse the asset catalogue and link assets to risks.
  • Workflow Rules — configure automation when you have administration access.
  • Administration — manage access, configuration, imports, integrations, monitoring, SLAs, and workflow design.

The ? icon in the top bar opens this documentation in a new tab.

Image needed: Main RiskVault layout with the navigation menu, notification bell, account menu, and help icon labeled.

Risk or issue?

  • A risk is an uncertain future event or condition that could affect an objective.
  • An issue is something that has already happened and needs a response or remediation.

Why screens differ between users

RiskVault combines four checks:

  1. Your signed-in identity.
  2. Your general roles, policies, and claims.
  3. Your access to the specific risk or asset.
  4. What the current workflow state allows.

A broad permission does not necessarily give access to every risk. Likewise, access to one risk does not grant the same access across the register.

A good first-day tour

  1. Open My Account and confirm your name, time zone, and theme.
  2. Review My Claims so you know which capabilities are available.
  3. Open Dashboard and inspect My Actions.
  4. Open My Tasks and review each queue.
  5. Open the Risk Register, try a search, and remove the filter.
  6. Open a risk you can view and explore its Details page and history.