Risk

A risk template applied to one scope item: the entry in the risk register, with an owner and a chosen response.

One template, one scope item. Mitigated by controls. Threatens strategic objectives.

Fields

Field	Type	Meaning	Example 1	Example 2
number	autonumber	Unique identifier	RSK-0093	RSK-0101
template	reference to x_irm_template	Library statement it comes from	RTM-008	RTM-015
scope_item	reference to x_irm_scope_item	Where the exposure sits	SCP-110	SCP-110
engagement	reference to x_irm_engagement, optional	Set when the exposure comes from a supplier engagement	None	None
owner	reference to auth_user	Risk owner	Head of IT Operations	Chief Information Security Officer
response	choice	Chosen treatment	Mitigate	Mitigate
status	choice	Position against risk appetite	Open, within appetite	Open, above appetite
controls	list to x_irm_control	Controls that mitigate it	CTL-0451	CTL-0467
objectives	list to x_irm_objective	Strategic objectives it threatens	SOB-02	SOB-02, SOB-05