Risk & Strategy / Risk Heatmap & Treatment Plan
§6.5What this is for: Visualise residual risk and draft treatment strategies per risk category.
What a good answer looks like: Each high risk maps to a treatment someone has actually agreed to fund. Accepting a risk is a valid answer — leaving it blank is not.
Worked example: Place a risk at Likelihood 4 / Impact 5 on the heatmap, choose Mitigate and write the rationale: it appears in the Treatment Summary and in the Migration Priority Order, where you can move it up or down and say why.
Runtime and privacy: This planning tool runs in your browser. Use synthetic or approved organizational data and review the site privacy terms before entering sensitive material.
For your role
- Executive / Business Leader
- Load sample entries or build the register first, then read the Migration Priority Order: it is the sequence of what gets fixed first and why, and each move up or down has to carry a stated reason.
- GRC / Risk & Compliance
- Place each risk on the heatmap, choose Mitigate, Accept, Transfer or Avoid with a rationale: the Treatment Summary is the treatment plan a risk framework expects, one decision per entry.
No risk entries yet
The heatmap visualises entries from your Risk Register. Build your register first, or load sample entries to explore the treatment workflow.
Try it
Place a risk at Likelihood 4 / Impact 5 and choose Mitigate. Where does it appear?
Next step
Next in Risk & Strategy: Initial Scoping AssessmentInitial Scoping Assessment is the next Risk & Strategy tool in the Command Center.