The https://au.promapp.com/nelsoncc/Dashboard/MyRisks/Simple link embedded in the default email notifications subject: '[Promapp] Treatment Signoffs escalated or overdue' is terrible and confuses most people (no reference to the underlying risk and/or risk owner)

Changed the link to https://au.promapp.com/nelsoncc/Dashboard/MyRisks
i.e. drop the /Simple

A scoring scheme for the risk register that includes the following five options:

· Inherent likelihood
· Inherent consequence
· Control effectiveness
· Residual likelihood
· Residual consequence

The current manual residual scoring scheme does not have anywhere to record the control effectiveness.

Staff have requested to include climate change risks in the Promapp risk register. The issue is that risk scores for these change over time. It would be great if risk scores could be configured to adjust automatically with time triggers.

Current, Risk Score = Likelihood x max{ Severity(1), Severity(2), Severity(3)..}

This understates the risk quantum where multiple domains of severity are hit. Please add additional scoring methodology as follows:

Score = Likelihood x { Severity(1) + Severity(2) +…}

I would like to see the risk "tag" show up on the printed process.

Also, I would like the risk tag to show the title of the risk, not just the reference, and not the risk portfolio This allows us to highlight a health and safety risk in a process more effectively

1. Extend search functionality to include risk owner field (currently only picks up risk description & treatment description) in /Risk/Register

2. Enable search within /Dashboard/MyRisks (i.e. as is provide in /Risk/Register)

Please add selection boxes to the Risk rating selections to allow us to include the additional custom ratings we add to either to Residual and/or Inherent Risk rating calculations. In our example we added a rating called Velocity which we would like to apply to both the Residual and Inherent risk calculations, whereas something like Control effectiveness would only apply to the residual risk calculation. At the moment, with velocity only calculated as part of the Residual wisk value, our residual risk is showing as higher than the inherent risk.

We use the improvements api and are looking to incorporate the risk register into the reporting but we cant schedule the reports to automate into the model. We will have to run these manually

The risk module lacks compliance and risk management aspects especially for government organisations. As a Local Government we report to the state governments and to manage our risks to be compliant we need additional setting options and features added to the module to comply with relevant standards such as ISO 31000 risk management and ISO 19600 compliance management standards.

When editing a Control, the Signoff box has three radio buttons, one of which is Process Owner /Expert (the others are Activity Role or Nominated) . If you choose Process Owner / Expert it adds both individuals to the Signoff. We want to allocate the Accountability for sigh off ONLY to the Process Expert, so can you please add another radio button for only Process Expert

Occasionally we want to reset risk review dates for some particular risks, this might be to offset the review dates for some risks, or to push an individual risk out if it has been reviewed out of sequence

Please create a customised reporting feature similar to the improvement module to allow us to design our risk reporting and dashboards via Excell or Power BI

Some organisations consider control and treatments as seperate things.

Enable Portfolio Managers to leave comments or provide feedback on a registered risk, so that their feedback remains visible on Promapp. We´ve had cases where the Portfolio Manager, does not agree with a classification or category for a given risk, and there is no option to leave that feedback inside the tool.

When producing a risk register report you should be able to specify how the risks are sorted, other than just database ID, so they can be presented in groups of common risk residual, and then by another sorting key such as date, alphabetic or a tag etc. The current Risk ID is just too limiting when there are sensible reasons to have the arranged othwerwise.

When a user is creating a new risk and when they are reassessing a risk, please add “Inherent” before the words “Likelihood” and “Severity” so it keeps in line with the further below 'Residual Likelihood' and 'Residual Severity'. Hopefully this will help users to rate initially and reassess the risk. Simple but effective.

The main complaint I receive from the organisation is the lack of information included in the risk mitigation sign off notifications. When clicking on the notification link, the user only sees the mitigation text - without any context.

In the notification link I suggest to include:
- risk title and description
- mitigation
- involvement

Maybe just point to the relevant dashboard row.

In trying to point people to a specific risk or improvement it would be beneficial to have a 'minimode' type option. Currently I use screen dumps to point people to the risk in question which is not optimal.

Risks yet not assessed are not included in any of the available risk reports, which means these risks remain under the radar, and could potentially not be escalated and brought the attention of appropriate decision makers.
I would like to be able to:
- create a report on these 'hidden' risks as part of our risk governance
- send out reminders to risk owners to assess risks

Thanks for considering this suggestion.