TheDocumentation Index
Fetch the complete documentation index at: https://docs.encoreos.io/llms.txt
Use this file to discover all available pages before exploring further.
/gr/risks/new route does not exist in the shipped application. Risk creation is performed via the Risk Assessment wizard at /gr/risks/wizard (or /gr/risks/wizard/:riskId to edit an existing risk), both requiring gr.risks.admin.
Overview
The Risk Assessment wizard lives at/gr/risks/wizard (rendered by RiskAssessmentWizardPage) with 6 steps:
- Identification — Describe the risk
- Analysis — Likelihood × impact scoring
- Owner — Accountability assignment
- Current controls — Existing safeguards
- Mitigation plan — Strategy and actions
- Review — Confirm and submit
/gr/risks/wizard and /gr/risks/wizard/:riskId) require gr.risks.admin. The :riskId variant supports editing an existing risk.
On submission, createRisk → createAssessment → createMitigation × N are called in blocking order; PF-29 task creation follows as a best-effort operation.
Who it’s for
Requires permission:gr.risks.admin (GR_PERMISSIONS.RISKS_ADMIN). Users without this permission cannot access the wizard.
Before you start
- Navigate to
/gr/risks/wizard(not/gr/risks/new). - Have risk description, likelihood/impact scores, owner, existing controls, and mitigation strategy ready.
Steps
Analysis — score likelihood and impact
Select likelihood and impact values to compute the risk score.
Current controls — document existing safeguards
List controls already in place that address this risk.
Mitigation plan — define strategy and actions
Choose a mitigation strategy and add specific mitigation actions.
Key concepts
- WizardShell — horizontal-layout wizard platform component.
- useRiskAssessmentWizard — hook managing form state and submission for the risk wizard.
- gr.risks.admin — the permission required to access either risk wizard route.
Related
Governance & Compliance
Governance & Compliance core overview.
Governance & parity
This page documents shipped product behavior. It is not medical, legal, or
billing advice. Verify against your organization’s policies and applicable
regulations before using it for clinical, compliance, or billing decisions.
Protected health information (PHI) shown in the product is governed by your
tenant’s access controls and is never exposed in this documentation.
Documentation sources
Documentation sources
- src/routes/gr.tsx
- src/cores/gr/wizards/risk-assessment/RiskAssessmentWizardPage.tsx
- src/platform/permissions/constants.ts