Importing Risks to Your Risk Register
In your KCM GRC Risk Management module, you can assess, manage, and monitor risks by adding them to your Risk Register. You can add risks individually, or if your organization has already identified a list of risks, you can use a CSV file to import multiple risks at once. For general information about using the Risk Register, see our How to Use Your Risk Register article.
See the sections below to learn how to format your CSV file and import risks to your Risk Register.
Jump to:
Formatting the CSV File
Before you import risks into your Risk Register, you'll need to create a CSV file that contains information about each risk. The CSV file can contain up to 500 rows of data.
When you create your CSV file, follow the formatting guidelines below:
- Enter the required headers below:
name,description
- If you would like, enter the optional headers below:
affected_asset,risk_owner,category,subcategory,consequences,likelihood,impact,status,tags
- When you enter information into each row, follow the guidelines in the table below:
Header Instructions Requirements Character Limit name
Enter any descriptive title for the risk. This field is required. 1-255 characters description
Enter any details about the risk, such as the threat that the risk poses for your organization.
This field is required. 1-2,500 characters affected_asset Enter a physical asset in your environment that the risk can affect if it occurs.
This field is optional.
0-255 characters risk_owner Enter the name of the person who is responsible for managing the risk.
This field is optional.
0-255 characters category
Enter a default category from your Risk Register, For a list of default categories, see the Default Risk Categories and Subcategories subsection below.
This field is optional. If you leave this field blank, the category and subcategory will both default to Custom.
This field is not case-sensitive.
0-255 characters subcategory If you entered a default category into the category field, enter a subcategory from that category.
If you left the category field blank, leave the subcategory field blank.
If you entered a default category into the category field, this field is required. If you didn't enter a default category into the category field, leave this field blank and the subcategory will default to Custom.
This field is not case-sensitive.
Note: Default categories must correspond between category and subcategory. For example, if you enter Business & Strategic into the category field, you can't enter Earthquake into the subcategory field.0-255 characters consequences Enter the potential consequences of the risk occurring. This field is optional. 0-2500 characters likelihood Enter one of the Likelihood ratings below:
- Rare
- Unlikely
- Reasonably Possible
- Likely
- Almost Certain
For more information, see the Risk Likelihood and Impact section of our Risk Management Guide.
This field is optional. If you leave this field blank, the Likelihood will default to Rare.
This field is not case-sensitive.
impact Enter one of the Impact ratings below.
- Low
- Minor
- Moderate
- Major
- Catastrophic
For more information, see the Risk Likelihood and Impact section of our Risk Management Guide.
This field is optional. If you leave this field blank, the Impact will default to Low.
This field is not case-sensitive.
status Enter one of the risk statuses below:
- Avoidance
- Mitigation
- Transfer
- Acceptance
- Triggered
- Closed
- Other
For more information, see the Risk Status table in our How to Use Your Risk Register article.
This field is optional and is not case-sensitive.
tags Either enter an existing tag from your Risk Register or enter a new tag.
Note: Entering a new tag will automatically create the tag in your Risk Register.You can add multiple tags for one risk by separating the tags with a comma. For example, you can enter "tag1,tag2,tag3" into this field.
This field is optional. 0-25 characters Note: When you import a CSV file into your platform, KCM GRC automatically removes duplicate entries. For example, if you enter two risks with the same fields, only one of the risks will import.
Default Categories and Subcategories
In your Risk Register, there are default categories and subcategories. In the tabs below, select a category to view a list of subcategories that are in that category:
- Commercial
- Reputation
- Stakeholder
- Technological & Obsolescence
- Lawsuit
- Product Recall
- Negative Publicity
- Hurricanes & Tornadoes
- High Winds
- Plate Tectonics
- Earthquake
- Building Strength
- Asteroids
- Volcanoes
- Radioactive Decay
- Radiation
- Asbestos
- Ground Water
- Sea Level
- Coastal Erosion
- Credit
- Insurance
- Pension
- Market
- People
- Systems & Equipment
- Legal & Compliance
- Security
- Project
- External Events
- Business Processes
- Environmental
- Workplace Health & Safety
- Corrupt Practice
- Social Responsibility
- Quality
- Process
Importing the CSV File
After you save your CSV file, you can import it into your platform. To import your CSV file, follow the steps below:
- Log in to your KCM GRC platform.
- Navigate to Risk Management > Risk Register from the navigation panel.
- At the top-right corner of the page, click the Import Risks button. When you click this button, an Import CSV Risks pop-up window will open.
- Click the Click to Upload button.
- Select the CSV file that contains your risk information. Once you select this file, the risks included in the import will display.
Tip: To remove risks from the import, click the trash can icon.
- Click the Save Imported Risks button.
Comments
0 comments
Article is closed for comments.