ZEBSOFT VIDEO TRAINING
Risk management escalation
02:49 · English · Anonymised demonstration · Transcript below
What this training covers
Follow Actions → Highlight a risk into the risk register. Learn how to assess inherent and residual risk, link controls and supporting records, assign investigation and treatment tasks, and keep reviews current.
- Assess risk before and after controls
- Connect supporting information
- Assign work and review effectiveness
The examples show a training environment. Available options depend on your configuration and access.
Video chapter guide
- 00:00 — Start with Actions: Actions → Highlight a risk
- 00:13 — Describe the risk: Type, owner, title, sensitivity, affected parties and dates
- 00:29 — Evaluate the inherent risk: Assess likelihood and severity before controls
- 00:48 — Reassess after controls: Residual risk reflects the controls in place
- 01:05 — Link supporting controls: Documents, contingency plans, sites and related risks
- 01:21 — Connect the relevant records: Choose the association type, select the record, then Add
- 01:39 — Manage the risk register: Risk → Risk management
- 01:58 — Plan and assign investigation work: Edit → Evaluation → Investigation
- 02:15 — Assign treatment tasks: Raise a task → assignee, dates, priority and instructions
- 02:32 — Review the outcome: Check controls, scores, actions and the next review date
Video transcript
The Actions menu is where users raise feedback, highlight a risk or suggest a change. These entries feed the corresponding management sections. Choose Highlight a risk to report a concern for evaluation.
In Details, select the risk type and owner, add a clear title and choose the sensitivity level. Identify the affected parties and describe what could happen. Enter the date and review date. Capture the facts you know so the risk can be evaluated.
Evaluation starts with inherent risk: the likelihood and severity before controls. Select the appropriate cell in the matrix. Describe the planned control measures, choose Transfer, Avoid, Reduce or Accept, and explain the action taken. Assess whether the controls are effective.
Residual risk is the assessment after controls are in place. Review likelihood and severity again, using evidence of how the controls perform. Leave Not yet re-assessed selected until that review has happened. A lower score should reflect a justified assessment.
Treatment and links connects internal and external documents, contingency plans and applicable sites. Leaving sites empty applies the risk to all sites. Link associated risks, and separately identify new risks introduced by the treatment.
Under Associated records, choose the type, select the record and press Add. You can connect customers, suppliers, equipment, people, processes, objectives and interested parties. Attach supporting files, check the details and save the risk.
Managers open Risk management from the Risk menu. Use the matrix, chart, search and filters to find relevant risks. Switch between inherent and residual views, and filter by risk type, action, effective control, level or appetite. Open a risk to review its details.
For investigation, edit the saved risk and open Evaluation. Choose the investigation workflow and save before starting it. Use Add task or action to assign investigation work. The assigned person is notified and the work appears in their task list.
The risk page also provides Raise a task under Treatment actions. Give the task a clear title, choose the assignee, set dates, a reminder and priority, and describe the work required. Create the task to assign responsibility for the treatment.
Review the completed work and update the risk assessment when circumstances or controls change. Keep the action taken, effectiveness, residual score and next review date current. The risk page brings the assessment and its supporting context together.