Risk Management Module

How to Import Risks to Your Risk Register

In your KCM GRC Risk Management module, you can assess, manage, and monitor risks by adding them to your Risk Register. You can add risks individually, or if your organization has already identified a list of risks, you can use a CSV file to import multiple risks at once. For general information about using the Risk Register, see our How to Use Your Risk Register article.

See the sections below to learn how to format your CSV file and import risks to your Risk Register

Tip:If you're just getting started with your risk management program, we recommend using the Risk Wizard instead of manually adding risks. For more information, see our How to Use the Risk Wizard article.

Formatting the CSV File

Before you import risks into your Risk Register, you'll need to create a CSV file that contains information about each risk. The CSV file can contain up to 500 rows of data. 

Important:If you're using Microsoft Excel, you must save the file in the "CSV UTF-8 (Comma delimited)" format.

When you create your CSV file, follow the formatting guidelines below: 

  1. Enter the required headers below: 
    name,description
  2. If you would like, enter the optional headers below:
    affected_asset,risk_owner,category,subcategory,consequences,likelihood,impact,status,tags 
  3. When you enter information into each row, follow the guidelines in the table below: 
    Header Instructions Requirements Character Limit

    name

    Enter any descriptive title for the risk.  This field is required. 1-255 characters

    description

    Enter any details about the risk, such as the threat that the risk poses for your organization.

    This field is required. 1-2,500 characters
    affected_asset

    Enter a physical asset in your environment that the risk can affect if it occurs. 

    This field is optional.

    0-255 characters
    risk_owner

    Enter the name of the person who is responsible for managing the risk.

    This field is optional.

    0-255 characters

    category

    Enter a default category from your Risk Register, For a list of default categories, see the Default Risk Categories and Subcategories subsection below.

    This field is optional. If you leave this field blank, the category and subcategory will both default to Custom.

    This field is not case-sensitive. 

    0-255 characters
    subcategory

    If you entered a default category into the category field, enter a subcategory from that category.

    If you left the category field blank, leave the subcategory field blank. 

    If you entered a default category into the category field, this field is required. If you didn't enter a default category into the category field, leave this field blank and the subcategory will default to Custom

    This field is not case-sensitive. 

    Important:Default categories must correspond between category and subcategory. For example, if you enter Business & Strategic into the category field, you can't enter Earthquake into the subcategory field. 
    0-255 characters
    consequences Enter the potential consequences of the risk occurring.  This field is optional. 0-2500 characters
    likelihood

    Enter one of the Likelihood ratings below:

    • Rare
    • Unlikely
    • Reasonably Possible
    • Likely
    • Almost Certain 

    For more information, see the Risk Likelihood and Impact section of our Risk Management Guide

    This field is optional. If you leave this field blank, the Likelihood will default to Rare.

    This field is not case-sensitive. 

     
    impact

    Enter one of the Impact ratings below.

    • Low
    • Minor
    • Moderate
    • Major
    • Catastrophic 

    For more information, see the Risk Likelihood and Impact section of our Risk Management Guide

    This field is optional. If you leave this field blank, the Impact will default to Low

    This field is not case-sensitive. 

     
    status

    Enter one of the risk statuses below:

    • Avoidance
    • Mitigation
    • Transfer
    • Acceptance
    • Triggered
    • Closed
    • Other

    For more information, see the Risk Status table in our How to Use Your Risk Register article.

    This field is optional and is not case-sensitive.

     
    tags

    Either enter an existing tag from your Risk Register or enter a new tag.

    Note:Entering a new tag will automatically create the tag in your Risk Register.

    You can add multiple tags for one risk by separating the tags with a comma. For example, you can enter "tag1,tag2,tag3" into this field.

    This field is optional. 0-25 characters
    Note:When you import a CSV file into your platform, KCM GRC automatically removes duplicate entries. For example, if you enter two risks with the same fields, only one of the risks will import.

Default Categories and Subcategories

In your Risk Register, there are default categories and subcategories. In the tabs below, select a category to view a list of subcategories that are in that category:

  • Commercial
  • Reputation
  • Stakeholder
  • Technological & Obsolescence
  • Lawsuit
  • Product Recall
  • Negative Publicity
  • Hurricanes & Tornadoes
  • High Winds
  • Plate Tectonics
  • Earthquake
  • Building Strength
  • Asteroids
  • Volcanoes
  • Radioactive Decay
  • Radiation
  • Asbestos
  • Ground Water
  • Sea Level
  • Coastal Erosion
  • Credit
  • Insurance
  • Pension
  • Market
  • People
  • Systems & Equipment
  • Legal & Compliance
  • Security
  • Project
  • External Events
  • Business Processes
  • Environmental
  • Workplace Health & Safety
  • Corrupt Practice
  • Social Responsibility
  • Quality
  • Process

Importing the CSV File

After you save your CSV file, you can import it into your platform. To import your CSV file, follow the steps below: 

  1. Log in to your KCM GRC platform.
  2. Navigate to Risk Management > Risk Register from the navigation panel. 
  3. At the top-right corner of the page, click the Import Risks button. When you click this button, an Import CSV Risks pop-up window will open.
  4. Click the Click to Upload button. 
  5. Select the CSV file that contains your risk information. Once you select this file, the risks included in the import will display.
    Tip:To remove risks from the import, click the trash can icon.
  6. Click the Save Imported Risks button.

Can't find what you're looking for?

Contact Support