SDCA routine

It maps risks by probability and impact to prioritize treatment. What matters is the TREATED risk, not the listed one: a risk in the red with no action plan is the record that you knew and didn't act.

The company's corporate risk matrix: each risk positioned on the 5x5 map (probability × impact), with the category, the chosen treatment (mitigate, accept, transfer or avoid), the tolerated appetite, the action plan and the key risk indicators (KRI). When a KRI goes over the limit, the platform warns. It complements the risks per project and per initiative.

The company's corporate risk matrix: each risk positioned on the 5x5 map (probability × impact), with the category, the chosen treatment (mitigate, accept, transfer or avoid), the tolerated appetite, the action plan and the key risk indicators (KRI). When a KRI goes over the limit, the platform warns. It complements the risks per project and per initiative. — this is the role of the "Risk matrix" screen within the platform.

Title, category, likelihood and impact (1 to 4) — the level is their product and the band comes from it —, appetite, treatment, status and owner. Once the risk is saved, the Actions and KRIs tabs appear: each action and each indicator is edited in a dialog, and a KRI that crosses its limit notifies the owner.

The appetite is the level of risk the company tolerates, from 1 to 25 on the same scale as the calculated level (probability × impact). When a risk's level goes above the defined appetite, the row gets the "Above appetite" warning triangle — the sign that the current treatment isn't enough. A risk with no appetite defined shows a dash and doesn't trigger an alert; define it so the matrix really tracks exposure.

In the risk dialog, the Action plan and KRIs tabs only appear after the risk has been saved for the first time — they need the existing record to hang actions and indicators on. Save the essentials (title, probability, impact) and complete it afterwards. The screen's "Reassess KRIs" button recalculates the risks' indicators and updates those that went over the limit.

The likelihood × impact heat map stays on top and counts the risks in each cell. Below, the risks sit in a list with search, filters by category, level, treatment and status, saved views and export; the Above appetite column shows what went past the accepted limit. The pencil opens the record with the plan’s actions and the indicators (KRIs). The top search looks in the text fields; the Filters button opens the side panel with the cuts; the combination can be saved as a view and reopened with one click, and the gear picks the columns. In the ⋮ menu, Excel and PDF take the whole filtered set — not just the page on screen — and "export everything" asks for your password. What you do with each record is on the row buttons; the eye opens the detail on the side.

"What are the company's risks, how serious are they and what are we doing about each one?" — when that question comes up, this is the screen that answers it.