Skip to main content

Risk Side Panel: Working Through Risk Activities

A step-by-step admin guide to the Risk Activities tab — the 8 numbered steps that take a Risk from Inherent assessment through to Assurance, including how to edit scores, link mitigations, set the response, and bypass steps.

Written by Harper Tang

Keywords: Risk side panel, Risk Activities, inherent assessment, link mitigations, residual assessment, risk response, actions, target, velocity, assurance, bypass, BoardX, admin


The Risk Activities tab is where you actually work on a Risk through its cycle. It lays out the cycle as eight numbered steps, in order, with each step indicating whether it's complete and its current value. As long as the cycle is open, you can come back and edit completed steps.

Open the Risk Activities tab

In the side panel, click the Risk Activities tab. You'll see the eight steps stacked vertically, with a colored vertical line on the left that progresses through the workflow's colours.

Step 1: Inherent Assessment

The first step records the Risk's score before any mitigations are applied. Set the Impact and Likelihood scores; the system calculates the Score (Impact × Likelihood) and displays the level.

Once the step is complete, the Set Score button changes to Edit Score.

You can come back and change scores at any time during the cycle, but you can't remove the Inherent score entirely.

Step 2: Link Mitigations

This step is where you link the Controls and Documents that mitigate the Risk.

Click Show more to expand the section.

When the section is expanded, you'll see two big buttons at the top — Linked Controls and Linked Documents. Click either to switch between the two lists. Below that sit a search box, a Filter button, and a Link button on the right. The list itself is a table with Name, State, and Classification columns; the rows are the Controls (or Documents) currently linked to the Risk.

Link a Control

With the Linked Controls view selected, click the Link button.

A pop-up window opens showing every Control in your system.

  1. Tick the checkbox on the rows you want to link

  2. Click Link in the bottom-right. The modal closes, the selected Controls appear in the

  3. If the Control you need doesn't exist yet, click + New in the modal's footer to create one on the spot. After you save the new Control, it's automatically available for linking.

Link a Document

Switch to the Linked Documents view and click Link to open the Link Documents modal.

Unlike the Controls picker, this modal gives you three tiles to choose where the document comes from.

  • Upload a file lets you upload a document straight from your computer. Drag the file into the drop area or browse to it, and it's added to the link selection.

  • Select from the Document Centre opens a list of every document in your Document Centre. Pick the ones you want and they'll be added to the selection.

  • Select from the Policy workspace opens a list of published items from your Policies & Contracts workspace.

We strongly recommend choosing the Policy workspace option whenever possible. When you link a Policy workspace document as a mitigation, BoardX keeps the link pointed at the latest published version — so the next time the policy is updated and republished, your mitigation automatically reflects the new version with no extra work. With Upload a file or Select from the Document Centre, you'd need to manually replace the document each time it changes.

Once you've made your picks from any of the three sources, the Link button at the bottom-right of the modal becomes active. Click Link to confirm — the modal closes, your selections appear in the Linked Documents list, and the Documents counter on the step header goes up by the number you added. Cancel closes the modal without linking anything.

Add a rationale or comment

At the bottom of the expanded Link Mitigations section, the Rationale/Comment field gives you a place to explain why you linked these particular Controls and Documents (or why you bypassed the step). Click to expand and add your note.

Unlink something

To remove a Control or Document from the mitigation list, tick the checkbox next to it on the linked list. The Link button switches to Unlink — click it to remove the selected items.

You can also bypass the step.

When you're done linking and unlinking, click X Cancel in the top-right of the expanded section to collapse it back down — the step header will show the updated counters and the Completed state.

Step 3: Residual Assessment

The Residual Assessment captures the score after mitigations are applied.

You set Impact and Likelihood, the Score and level are calculated, and after completion, the button switches to Edit Score.

The Residual step can also be bypassed. While editing, click the Bypass button to skip this step — useful when there aren't enough mitigations in place to meaningfully reduce the score yet.

Step 4: Risk Response

The Risk Response step records what you'll do about the Risk.

Set the Strategy (Accept, Avoid, Reduce, Transfer, etc.).

When a strategy is selected, BoardX shows a description of what that strategy means.

Decide whether to create a Response task

Below the strategy, tick the Create Response task checkbox if you want BoardX to spin up a follow-up task for the Risk Respondent.

When the box is checked, the Risk Respondent and Response Strategy Due Date fields become active.

Choose the Risk Respondent from the dropdown and pick a Response Strategy Due Date for the task. Both are required when Create Response task is on.

If a Risk Response Task has already been created. You can add a document as a risk response plan or directly input text in the text box as the risk response plan

Full size preview

Step 5: Actions

Action tasks are the follow-up work spawned from the Risk Assessment.

Click Show more to expand and manage the tasks.

You can add more tasks or link existing tasks.

Step 6: Target

The Target step is where you record the score you want to reach.

Click Edit Target (or Set Target if no target exists yet) to open the expanded view.

The Target can be edited at any moment in the cycle. You can also remove a target you've set previously and save the update — useful if the target is no longer applicable.

Step 7: Velocity

Velocity captures how quickly the Risk could materialise.

It's set on a 1–5 scale (for example, 5 - Very Fast). Click Edit Velocity to change the value. The info icon next to the heading explains what each level means.

Step 8: Assurance

The final step is Assurance, where assurance notes are recorded.

The step shows a counter for the Assurance notes that have been added; click Show more to expand and view or add notes.

Need help?

If you get stuck, click the chat bubble in the bottom-right corner of any Risk page.

Did this answer your question?