Skip to main content
Question

Risk Register


joshuaolds
Community Debut

Hi all,

I was curious to see how everyone was hand,ling their risk register and keeping a log of all risks and associated tickets related to a risk.

For example, a risk is known and you want to get this signed off by the risk team or associated team and keep a register of all IT risks.

ie Risk: MFA not enabled for a user group. 

Description: blah blah MFA is used as a security measure. Request has been submitted to revoke this.

Approval: Accept Risk, Decline risk and enforce best practice.

Did this topic help you find an answer to your question?

3 replies

Forum|alt.badge.img+4
  • Contributor
  • 13 replies
  • December 14, 2024

@joshuaolds where did you get to with this?

We’re tracking security incidents in Freshservice, so it’d be natural to track risks in the same place too. However, the lack of flexibility with the dashboard, widget limits, positioning, colouring, labelling, ability to control columns per list view, etc, has made me consider looking at open source solutions.


gunnak
Apprentice
Forum|alt.badge.img
  • Apprentice
  • 1 reply
  • March 5, 2025

Can I ask how\where you're using FreshService as a risk register? 

Is there a module?

A third-party plugin?

Did you do it yourself?

I want to track mine separate to incidents with their own ref numbers e.g. RSK-001, RSK-002 etc


Forum|alt.badge.img+4
  • Contributor
  • 13 replies
  • March 5, 2025

@gunnak we’re just using incidents at the moment, they all end up with INC, and then have a different field set applied to them through business rules which are then accessed through dashboard views. Views aren’t great though as they carry user preferences for columns and (as of yet) can’t be predefined.

I have looked at some other solutions but concluded it’d be easier to keep them in the service desk (we will be reviewing Freshservice vs alternatives this year due to some account management issues).


Reply