Creating and Assessing Risks

From a technical perspective, a risk is any Jira issue that has risk information (such as probability and impact) embedded in it. Follow these steps to create a risk (note that these assume you are using the new version of the Jira cloud interface):

Creating the Risk

Create a Jira issue of any type and click on the Add risk assessment button to cause the Risk assessment panel to appear.

If this button is not available, you will need to modify the risk configuration for the project. See "Risk register settings" in Creating and Managing Risk Registers.

Assessing the Risk

The Risk assessment panel enables you to define risk information for the issue.

By default, the probability and impact fields are unspecified. In order to modify this information, you must press the Modify button. You can then set the inherent probability and impact fields using the slider controls:

Inherent probability is the initial probability of the risk being realized, before any treatments have been applied.

Inherent impact is the initial impact of the risk if realized, before any treatments have been applied.

Inherent risk is calculated using the risk model defined on the settings screen (see Administering the Application), and is based on the inherent probability and impact.

View risk register opens the risk register and matrix page (see Viewing Risk Registers and Matrices).

Save stores the risk information in the issue and restores the risk assessment panel to read-only mode.

Cancel discards any changes you have made and restores the risk assessment panel to read-only mode.

Specify residual risk makes the residual probability, impact, and level of risk fields appear.

Specifying Residual Risk

The application allows you to specify the residual risk, which is the level of risk after treatments have been applied.

Residual probability is the probability of the risk being realized, after any treatments have been taken.

Residual impact is the impact of the risk if realized, after any treatments have been taken.

Residual level of risk is calculated using the risk model defined on the settings page (see Administering the Application), and is based on the residual probability and impact.

Removing Risk Information

If your issue is of type Risk you cannot remove the risk information. If it is of another issue type, you can remove the risk information by clicking on Hide Risk assessment in the menu above the risk assessment panel.

Recording Treatments

You can record treatment information for the risk and have it appear in the risk register (see Viewing Risk Registers and Matrices). Follow these steps:

  1. Enable risk treatments in the settings page (see Administering the Application). 
  2. Create a Jira issue to represent the treatment. Task is commonly used for this, but any Jira issue type is fine.
  3. On the risk page, click the Link icon .
  4. In the Linked Issues panel, choose the treatment link you specified in step 1, and the issue you created in step 2.