Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.encoreos.io/llms.txt

Use this file to discover all available pages before exploring further.

Module: GR-05 Risk Register
Audience: All Staff
Last Updated: 2025-12-14

Overview

The Risk Management module helps your organization identify, assess, and mitigate risks across operations. This guide covers how to understand risks, view risk information, and manage mitigation actions assigned to you.

Getting Started

Accessing Risk Information

  1. Navigate to GR → Risks from the main menu
  2. View the Risk Register showing all organizational risks
  3. Check your assigned mitigations on the dashboard

What You’ll See

SectionDescription
Risk RegisterAll identified risks with ratings and status
High Priority RisksCritical and high-rated risks requiring attention
My MitigationsMitigation actions assigned to you
Recent AssessmentsLatest risk assessment updates

Understanding Risk Ratings

Risks are rated based on likelihood and impact:
RatingMeaningAction Required
CriticalHighest risk level, immediate threatImmediate executive attention
HighSignificant risk requiring prompt actionAddress within 7-14 days
MediumModerate risk requiring monitoringAddress within 30 days
LowMinor risk, acceptable with monitoringMonitor quarterly

Risk Score Calculation

Risk Score = Likelihood × Impact
LikelihoodDescriptionScore
RareUnlikely to occur1
UnlikelyCould occur occasionally2
PossibleMight occur sometimes3
LikelyWill probably occur4
Almost CertainExpected to occur5
ImpactDescriptionScore
InsignificantMinimal effect1
MinorSmall impact, easily managed2
ModerateNoticeable impact, manageable3
MajorSignificant impact on operations4
CatastrophicSevere impact, potential failure5

Understanding Risk Status

StatusMeaning
ActiveRisk is identified and being managed
MitigatedControls in place, risk reduced
ResolvedRisk no longer exists
ClosedRisk formally closed after verification

Risk Categories

CategoryExamples
OperationalProcess failures, equipment issues
FinancialBudget overruns, funding loss
ClinicalResident health and safety
SafetyWorkplace safety, physical hazards
ComplianceRegulatory violations, audit failures
ReputationalPublic image, stakeholder trust

Your Role in Risk Management

Identifying Risks

You play a key role in identifying risks:
  1. Report potential risks to your supervisor
  2. Document near-misses and incidents
  3. Suggest preventive measures when you see hazards
  4. Participate in risk assessments when asked

Managing Your Assigned Mitigations

If you’re assigned mitigation actions:

Viewing Your Actions

  1. Navigate to GR → Risks
  2. Filter by My Mitigations
  3. Or check the GR Dashboard for pending actions

Mitigation Status

StatusMeaning
PlannedAction created but not yet started
In ProgressYou are actively working on it
CompletedYou have finished the action
VerifiedRisk manager has verified your work

Updating Your Progress

  1. Click on the mitigation action
  2. Click Update Status or Add Progress Note
  3. Describe what you’ve done
  4. Attach evidence if applicable
  5. When finished, mark as Completed

Evidence for Mitigations

Provide proof that the mitigation is effective:
Evidence TypeExamples
DocumentsUpdated procedures, new policies
PhotosSafety improvements, equipment changes
Training RecordsCompleted safety training
AttestationsSigned acknowledgments

Risk Notifications

Types of Notifications You May Receive

NotificationWhenAction Needed
Risk AlertNew high-priority risk identifiedBe aware
Mitigation AssignedYou’re assigned an actionReview and begin work
Due Date Reminder7 and 3 days before dueComplete your action
Overdue AlertPast due dateImmediate attention needed
Verification CompleteYour action was verifiedInformational

Responding to Notifications

  1. Click the notification to see details
  2. Review the mitigation action or risk
  3. Take required action before the due date
  4. Update progress in the system

Risk vs Other GR Features

RisksAudit FindingsCompliance Issues
Potential future problemsIssues found during auditRegulatory gaps
Proactive identificationDiscovered through reviewStandards-based
May never occurHas occurredRequirement not met
Mitigation strategiesCorrective actionsRemediation plans

FAQ

I was assigned a mitigation but I don’t understand it

Contact your supervisor or the risk manager who created the action. They can clarify expectations and provide guidance.

The due date for my mitigation is unrealistic

Contact your supervisor immediately. Due dates can sometimes be extended if there’s a valid reason, but this must be approved before the due date passes.

I completed my mitigation but it still shows “Planned”

Make sure you updated the status in the system:
  1. Open the mitigation action
  2. Update status to Completed
  3. Add completion notes
  4. Attach evidence if required
The risk manager will then verify and close it.

How do I report a new risk?

Report potential risks to your supervisor or compliance officer. They can enter it into the Risk Register and ensure proper assessment.

Who can I ask for help with risk management?

  • Your direct supervisor
  • Site compliance officer
  • Organization risk manager
  • Department lead for your area


Need Help? Contact your risk manager or system administrator.