Importing Risks to Your Risk Register

In your KCM GRC Risk Management module, you can assess, manage, and monitor risks by adding them to your Risk Register. You can add risks individually, or if your organization has already identified a list of risks, you can use a CSV file to import multiple risks at once. For general information about using the Risk Register, see our How to Use Your Risk Register article.

See the sections below to learn how to format your CSV file and import risks to your Risk Register. 

Jump to:

Formatting the CSV File

• Default Risk Categories and Subcategories

Importing the CSV File

Formatting the CSV File

Before you import risks into your Risk Register, you'll need to create a CSV file that contains information about each risk. The CSV file can contain up to 500 rows of data. 

When you create your CSV file, follow the formatting guidelines below: 

1. Enter the required headers below: 

   name,description

2. If you would like, enter the optional headers below:

   affected_asset,risk_owner,category,subcategory,consequences,likelihood,impact,status,tags 

3. When you enter information into each row, follow the guidelines in the table below: 
   

   Header	Instructions	Requirements	Character Limit
   name	Enter any descriptive title for the risk.	This field is required.	1-255 characters
   description	Enter any details about the risk, such as the threat that the risk poses for your organization.	This field is required.	1-2,500 characters
   affected_asset	Enter a physical asset in your environment that the risk can affect if it occurs.	This field is optional.	0-255 characters
   risk_owner	Enter the name of the person who is responsible for managing the risk.	This field is optional.	0-255 characters
   category	Enter a default category from your Risk Register, For a list of default categories, see the Default Risk Categories and Subcategories subsection below.	This field is optional. If you leave this field blank, the category and subcategory will both default to Custom. This field is not case-sensitive.	0-255 characters
   subcategory	If you entered a default category into the category field, enter a subcategory from that category. If you left the category field blank, leave the subcategory field blank.	If you entered a default category into the category field, this field is required. If you didn't enter a default category into the category field, leave this field blank and the subcategory will default to Custom.  This field is not case-sensitive.  Note: Default categories must correspond between category and subcategory. For example, if you enter Business & Strategic into the category field, you can't enter Earthquake into the subcategory field.	0-255 characters
   consequences	Enter the potential consequences of the risk occurring.	This field is optional.	0-2500 characters
   likelihood	Enter one of the Likelihood ratings below: Rare Unlikely Reasonably Possible Likely Almost Certain  For more information, see the Risk Likelihood and Impact section of our Risk Management Guide.	This field is optional. If you leave this field blank, the Likelihood will default to Rare. This field is not case-sensitive.
   impact	Enter one of the Impact ratings below. Low Minor Moderate Major Catastrophic  For more information, see the Risk Likelihood and Impact section of our Risk Management Guide.	This field is optional. If you leave this field blank, the Impact will default to Low.  This field is not case-sensitive.
   status	Enter one of the risk statuses below: Avoidance Mitigation Transfer Acceptance Triggered Closed Other For more information, see the Risk Status table in our How to Use Your Risk Register article.	This field is optional and is not case-sensitive.
   tags	Either enter an existing tag from your Risk Register or enter a new tag. Note: Entering a new tag will automatically create the tag in your Risk Register. You can add multiple tags for one risk by separating the tags with a comma. For example, you can enter "tag1,tag2,tag3" into this field.	This field is optional.	0-25 characters

   Note: When you import a CSV file into your platform, KCM GRC automatically removes duplicate entries. For example, if you enter two risks with the same fields, only one of the risks will import.

Back to top

Default Categories and Subcategories

In your Risk Register, there are default categories and subcategories. In the tabs below, select a category to view a list of subcategories that are in that category:

Back to top

Importing the CSV File

After you save your CSV file, you can import it into your platform. To import your CSV file, follow the steps below: 

1. Log in to your KCM GRC platform.
2. Navigate to Risk Management > Risk Register from the navigation panel. 
3. At the top-right corner of the page, click the Import Risks button. When you click this button, an Import CSV Risks pop-up window will open.
4. Click the Click to Upload button. 
5. Select the CSV file that contains your risk information. Once you select this file, the risks included in the import will display.
   Tip: To remove risks from the import, click the trash can icon.
6. Click the Save Imported Risks button.

Back to top