The Risk Register at admin sidebar → Risk Assessment → Risk Register is the centralised list of every psychosocial risk in your organisation. Each row shows the risk, source (adopted or custom), inherent and residual ratings, and current status.
One row per risk, with status, severity, and ownership at a glance
Filter and sort by status, severity, source, hierarchy level, owner
Click any row to open the risk and its assessment
Status totals across the register: Accepted, Monitoring, Treating, Draft
Add risks via Explore Library (adopted scenarios) or + Custom Risk Assessment
What the register shows
The header shows total risk assessments and a status bar split across Accepted, Monitoring, Treating, and Draft.
Below the header, each row displays:
Risk: name and (where applicable) source framework
Source: Adopted (from the library) or Custom
Inherent: severity rating before controls (Critical / High / Medium / Low)
Residual: severity rating after controls
Status: current lifecycle state (Draft / Treating / Monitoring / Accepted / Closed)
Click the chevron at the right of any row to open the risk's full detail and assessment.
Searching, filtering, and sorting
Use the search bar to find a risk by name. Use Filter to narrow the list by:
Status
Severity (inherent or residual)
Source (Adopted vs Custom)
Owner
Hierarchy level
Active framework
Use Sort to order by name, severity, or last updated.
Adding risks
Two routes:
Explore Library: opens the Scenario Library to adopt pre-built scenarios mapped to your active frameworks. See "Adopting risks from the scenario library" (3.9).
+ Custom Risk Assessment: creates a new custom risk with its own assessment form. See "Conducting a risk assessment" (3.7).
Multi-level identification
Risks can be identified at multiple levels of your organisation:
Role
Team or group
Site
Division
Whole organisation
The level is set when the risk is created. Group-scoped risks roll up into the organisation-wide register, so a Tenant Owner sees everything while a group-scoped admin sees their group's risks.
Linking risks to other entities
A risk in the register can be linked to:
Incidents (events that materialised this risk)
Investigations that found contributing factors
Controls that mitigate it
Evidence that supports the rating
Consultation records that informed the assessment
These links surface in each risk's detail page and feed the audit trail.
CSV import
Risks can be imported in bulk via CSV using the strict ReFresh template. See "Importing and exporting data" (8.8) for the canonical import process and the limits on what can and cannot be bulk-imported.
Related articles
Conducting a risk assessment (3.7)
Adopting risks from the scenario library (3.9)
Using the Hierarchy Dashboard (3.8 — see below)
Importing and exporting data (8.8)