Once a risk has been identified and its risk response set to Mitigate, the next step is to create a Remediation Plan (RP) to address the risk effectively. This section covers creating and defining remediation plans from within a demand; the Remediation Plans module section covers tracking them centrally.

1. Steps to add a remediation plan

  • Open the demand's Risk Assessment tab and expand the relevant risk.
  • Go to the risk's Remediation Plan tab.
  • Click Add RP and confirm with Add New.

The RP_ID is generated automatically for the new plan. Once created, you can define its details.

Note: A remediation plan can only be created when the risk's response is Mitigate. If the response is Avoid, Accept or Transfer, or no response has been recorded yet, the drawer explains why creation is blocked. A single risk can carry up to 10 remediation plans.

2. Define the remediation plan details

Each plan carries four detail tabs. Provide:

  • Contacts: the RP Responsible, the person accountable for executing the plan. A plan cannot be completed without a responsible.
  • Due Date: the deadline for the remediation work, with an optional SLA. The due date shows a live countdown pill on the plan; changing an existing due date requires a written justification, and the full change history stays attached to the plan.
  • Description: the RP Description, a clear summary of the remediation actions to perform.
  • Implementation Challenges: the RP Implementation Difficulty (Low, Medium or High) and free-text RP Implementation Challenges notes.

Repeat these steps for each remediation plan you create.

3. Remediation plan options

Each plan also offers management actions:

  • Comments: discuss the plan with stakeholders.
  • Evidences: attach proof of the remediation work.
  • Owners: assign resource owners.
  • Delete RP: permanently delete the plan (a confirmation is requested; completed plans must be reopened before they can be deleted).

4. Where the plan appears

Once created, the plan is referenced in the demand's flow diagram, linking the demand, its risks and their remediation plans, and it is automatically added to the Remediation Plans module, the centralised registry that ensures visibility, accountability and traceability of all mitigation work. Further details are covered in the Remediation Plan Module section.