Risk Assessment

Where: Risks and Compliance › Risk Assessment

Risk Assessment is your organization's risk register. For each risk you record what could go wrong, how likely and how severe it is before and after the controls already in place, and what will be done about it — then review it on a schedule until it is closed. It works for HIRA, JSA-style assessments and any other risk you want to track.

Key ideas

Term	Meaning
Likelihood	How often the event could happen (e.g. Rare … Almost Certain).
Severity	How bad the outcome would be (e.g. Insignificant … Catastrophic).
Risk score	Likelihood position × Severity position on the risk matrix.
Risk level	Low, Medium, High or Critical — the band the score falls in.
Inherent risk	The risk before any existing controls.
Existing controls	What is already in place to reduce the risk, and how effective each is.
Residual risk	The risk after the existing controls. If it is no lower than the inherent risk, the controls aren't working.
Treatment	Avoid, Reduce, Transfer or Accept — what you'll do about the residual risk.

The matrix size (3×3, 4×4 or 5×5) and the score bands for each level are set by your Org Admin under Settings › Risk Matrix. On the default 5×5 matrix: Low 1–4, Medium 5–9, High 10–16, Critical 17–25.

Who uses it

Role	Typically
Safety officers, supervisors	Identify and assess risks, record controls.
Risk owners	Own the treatment plan and review the risk on schedule.
Site and Org Admins	Review the register, set up the risk matrix, workflow and review reminders.

How a risk moves

Open  →  In Progress  →  Under Review  →  Closed

A new risk starts as Open. Your organization may use its own risk workflow with different stage names and approvals. Risks are reviewed on their Review Frequency; reminder emails go to the risk owner before the Next Review Date, and the risk shows as overdue on the dashboard once it passes.

How-to guides

Add a risk with AI

1. Open Risks and Compliance › Risk Assessment and click Add Risk Assessment.
2. Attach a site photo or a document (PDF — e.g. a method statement), and/or describe the risk.
3. AI drafts the assessment. Review each step — risk details, likelihood and severity, controls, treatment — correct anything that is wrong, and save.

Fill in or edit a risk assessment

1. Click the risk in the table (or ⋮ › Edit) to open the full form.
2. 1. Risk Details — title, category, location and description.
3. 2. Risk Assessment (Inherent) — Likelihood and Severity before controls. The score and the matrix update as you choose.
4. 3. Existing Controls — one row per control in place, with how effective it is.
5. 4. Risk Evaluation (Residual) — Likelihood and Severity with those controls, and whether the residual risk is acceptable.
6. 5. Risk Treatment Plan — owner, treatment option, target level and date.
7. 6. Attachments and 7. Additional Information — who identified it and when, review frequency, next review date, tags.
8. Save Draft to finish later, or Save & Assess Risk / Save Changes to save it properly.

Field-by-field details: Risk assessment form.

Review a risk

1. Open the risk from the table (sort or filter by Review Date, or use Overdue Actions on the dashboard).
2. Re-check the residual likelihood and severity and the controls.
3. Set the next Next Review Date (and Status if it changes) and Save Changes.

See where your high risks are

On the dashboard, look at the Risk Matrix — switch between Inherent and Residual — and click any cell to list just those risks in the table. Insights names the location with the most high risks.

Add many risks at once

Use Import in the top bar: download the template, fill in one row per risk, and upload it. The template lists every column, which are required and the allowed values.

Common questions

Why are my Likelihood/Severity options different from this guide? Your organization uses a 3×3 or 4×4 matrix. The options follow your Risk Matrix setting.

The level changed although I didn't edit the risk. Your Org Admin changed the risk matrix; every risk is re-scored on the new bands automatically. Your Likelihood and Severity choices stay as entered.

What is the difference between Risk ID and Risk ID (optional)? Risk ID in the table (RISK-xxxx) is Premise360's own number. Risk ID (optional) on the form is your own reference, if you use one.

Why can't I delete a risk? Deleting needs delete rights for the module. Ask your administrator.