Importing Risks into Your Risk Register

In the KCM GRC Risk Management module, you can assess, manage, and monitor risks by adding them to your risk register. You can add risks individually, or if your organization has already identified a list of risks, you can use a CSV file to import multiple risks at once. For general information about using the risk register, see our How to Use Your Risk Register article.

The sections below contain the requirements and instructions for using a CSV file to import risks into your risk register. 

Jump to:

How to Format a Risk CSV File

How to Import Risks

How to Format a Risk CSV File

Before you import risks into your risk register, you will need to create a CSV file that contains information about each risk. The CSV file can contain up to 500 rows of data. 

Follow the formatting guidelines below when you create your CSV file. 

1. The CSV file must contain the header line below. 

   name,description

2. The CSV file can contain the optional headers below. Include an optional header if you want to import one or more of the related fields into your risk register.

   affected_asset,risk_owner

3. The fields below each header should follow the guidelines below. 

   Header	Instructions	Requirements	Character Limit
   name	Enter any descriptive title for the risk.	The name field is required.	1-255 characters
   description	Enter any details about the risk, such as the threat that the risk poses for your organization.	The description field is required.	1-2,500 characters
   affected_asset	Enter a physical asset in your environment that the risk can affect if it occurs.	The affected_asset field is optional. If you leave this field blank, the risk will add to your risk register without an affected asset.	0-255 characters
   risk_owner	Enter the name of the person who is responsible for managing the risk.	The risk_owner field is optional. If you leave this field blank, the risk will add to your risk register without an owner.	0-255 characters

   Note: When you import a CSV file into your platform, KCM GRC automatically removes duplicate entries. For example, if you enter two risks with the same fields, only one of the risks will import.

Back to top

How to Import Risks

After you save your CSV file, follow the steps below to import the risks into your account.

1. Navigate to Risk Management > Risk Register from the navigation panel. 
2. Click the Import Risks button in the top-right corner. 
3. Click the Click to Upload button in the top-left corner of the Import CSV Risks window. 
4. Select the CSV file that contains your risk information.
   Note: After this step, you can scroll through the list of risks to delete them or to verify that the information is correct.
5. Click the Save Imported Risks button.

Back to top