Mark a risk as mitigated or archive it

When the work on a risk is done, mark it as mitigated. If you no longer need to manage a risk at all, archive it instead. Both take the risk out of the Active list.

Question	Mark as mitigated	Archive
Use it when	Every control is in place and the risk is under control.	The risk no longer applies, or was recorded by mistake.
Needs all controls done	Yes	No
The risk moves to	The Mitigated group	The Archived group
Is anything deleted?	No	No

Before you start

• You can mark a risk as mitigated only when all its controls are done. Controls that VirgilTrack’s AI suggested and nobody accepted don’t count. See Risk controls.
• In the register, the buttons are shown for risks that are New or In Progress.

Versigtig

There’s no button to reopen a mitigated or archived risk, and neither can be edited. Check before you confirm.

Mark a risk as mitigated from its page

1. Open the risk’s page. For example, select the risk in Risk Register.

2. Select Mark as mitigated.

   If it is greyed out, some controls aren’t done yet. The line under the button says how many are left.

3. In Mark as mitigated?, select Yes, it’s mitigated.

A Risk mitigated message says “Nicely done. The risk is now marked as mitigated.” Then the risk register opens.

Mark risks as mitigated from the register

1. Open Risk Register.
2. Do one of these:
   • For one risk, select the Mark as mitigated button (a tick) in its Actions column.
   • For several, tick the box at the start of each row, then select Mark as mitigated in the bar above the table.
3. In Mark as mitigated? (or Mark 3 risks as mitigated? for several), select Yes, mitigated.

A message says “Risk marked as mitigated.” or, for several, “3 risks marked as mitigated.”

If any of the risks still have controls to do, a Not yet message names them, for example “These risks still have controls to implement: FIN0012C”. Nothing is changed, not even the risks that were ready. Unselect the risks it names, or finish their controls, and try again.

Acting on several risks at once

Archive risks

1. Open Risk Register.
2. Do one of these:
   • For one risk, select the Archive button (a box) in its Actions column.
   • For several, tick the box at the start of each row, then select Archive in the bar above the table.
3. In Archive this risk? (or Archive 3 risks?), read “Archived risks move to the Archived group. Nothing is deleted.”, then select Archive.

A message says “Risk archived.” or, for several, “3 risks archived.”

What happens next

A mitigated risk:

• has the status Mitigated and appears in the register’s Mitigated group and in the Mitigated column of the Kanban board;
• stops getting review reminders;
• counts as mitigated on the dashboards. See Dashboards.

VirgilTrack’s AI may also suggest a line about it for your weekly work report.

An archived risk has the status Archived and appears in the register’s Archived group. It isn’t shown on the Kanban board.

Archiving doesn’t stop review reminders. The risk’s responsible people may still be reminded of its next review.

Tips

• On the Kanban board you can also drag a card to Mitigated, but the board doesn’t check that the controls are done. Use Mark as mitigated instead, so nothing is closed too early. See The Kanban board.
• To find risks that may be ready to close, filter the register’s Controls column by All done. See The risk register.

If something goes wrong

What you see	Why	What to do
Not yet: “This risk still has controls to implement.” (on a risk’s page, with the number of controls)	At least one of its controls isn’t done.	Finish the controls, then try again. See Mark a control as implemented.
Mark as mitigated is greyed out on the risk’s page	Some controls aren’t done.	The line under the button says how many are left.
There’s no Mark as mitigated or Archive button in a row	The risk is Not assessed, or already mitigated or archived.	Assess the risk first if it is Not assessed. See Assess a risk.
Couldn’t save and “Something went wrong.”	Saving failed. Nothing was changed.	Try again.

Related

• A risk’s page
• Risk controls
• The risk register