Creating and Assessing Risks

From a technical perspective, a risk is any Jira issue that has risk information (such as probability and impact) embedded in it. You can use any issue type in your projects, though some organizations prefer to create an issue type called "Risk" for this purpose. Follow these steps to create a risk (note that these assume you are using the new version of the Jira cloud interface):

Creating the Risk

Create a Jira issue of any type and open it. Click on the menu extension icon (which appears as three dots) and select Risk Assessment, which causes the Risk assessment panel to appear.

Assessing the Risk

The Risk assessment panel enables you to define risk information for the issue. It has several fields and buttons:

Inherent probability

This is the initial probability of the risk being realized, before any treatments have been applied.

Inherent impact

This is the initial impact of the risk if realized, before any treatments have been applied.

Level of risk

This is calculated using the risk model defined on the settings screen (see Administering the Application), and is based on the inherent probability and impact.

Risk register

Press this button to open the risk register and matrix page (see Viewing Risk Registers and Matrices).

Specifying Residual Risk

The application allows you to specify the residual risk, which is the level of risk after treatments have been applied.

Specify residual risk

This switch enables you to set a residual level of risk. It makes the residual probability, impact, and level of risk fields appear.

Residual probability

This is the probability of the risk being realized, after any treatments have been taken.

Residual impact

This is the impact of the risk if realized, after any treatments have been taken.

Residual level of risk

This is calculated using the risk model defined on the settings page (see Administering the Application), and is based on the residual probability and impact.

Recording Treatments

You can record treatment information for the risk and have it appear in the risk register (see Viewing Risk Registers and Matrices). Follow these steps:

  1. Enable risk treatments in the settings page (see Administering the Application). 
  2. Create a Jira issue to represent the treatment. Task is commonly used for this, but any Jira issue type is fine.
  3. On the risk page, click the Link icon .
  4. In the Linked Issues panel, choose the treatment link you specified in step 1, and the issue you created in step 2.