Risiko365 User Guide and FAQ

Features
Options to make localisations to your instance of the solution such as:
– Alerts
– Adding custom fields to the database
Easy way of communicating with your team on risks, incidents and actions through the built in context conversation
Adding attachments to tickets
Adding proof and asking for team members to review proof
Many views:
- Grid
- Card
- Board
- Timeline
- Calendar
- Gannt
Branding using your own branding
Supports many ISO standards
Very detailed and customised filters
Android or iOS app support
Microsoft Teams integration
Slack integration
Google Workspace integration
Please note: This solution will be hosted on the JSC Consultant Solutions Ltd. SmartSheet platform
Trust Center | Smartsheet
Smartsheet Security Capabilities, Practices, and Safeguards
Risk Module
The risk management module is based on an asset risk assessment process where you select assets, determine the risk, likelihood, impact, mitigation, treatment plan and residual risk. You would score the risks based on likelihood and impact and then select controls to mitigate any risks that are not accepted. The module will then help you manage the risk treatment plan as well.
Incident & Action Module
The action module is where you log a nonconformity, an incident, an event, an opportunity for improvement or an action from your management review. You determine root cause, corrective action, owners, plans and deadlines.
Recurring Action Module
The recurring action module is the module that will help you with all those recurring tasks that are built into your ISMS. These could for example be to run an annual management review or a quarterly business continuity test exercise. In this module you set the action once and the module will help remind you, it will enable you to record the outcome of the action (so you have evidence to show the auditor) and once an action has been done a new action will be set according to the chosen frequency.
Recurrence Catalog
Contains a list of typical recurring actions which can be configured to the specific ISMS actions required by adding or removing actions.
Root Cause Analysis
https://jscconsultant.co.uk/wp-content/uploads/2022/01/DOC0.7-Five-why-root-cause-analysis.pdf
There is support for the 5 why root cause analysis methodology.
Dashboard
The dashboard is reporting real time on your ISMS. It will for example report on
- Risk Heat Map
- Trends
- Overdue risks
- Root cause analysis
- Age of actions
- Overdue risk/actions by owner
- Etc.
Due Date
The due date will send you a reminder email when an item (risk, action or incident) is due. This can for example be when you expect a risk mitigation to have been implemented or a corrective action to be implemented and closed.
Review Date
The review date will send you a reminder email when an item (risk, action or incident) is due a review. This is for example used when a risk has been closed and you want to review the risk at a later stage, or when you have implemented and closed a corrective action and you want to review the effectiveness of the corrective action at a later stage.
Conversations
Within each ticket item (risk, action, recurring action) you can create conversations, either just as comments or using @someone to include team members in the conversation
Attachments
Within each ticket item (risk, action, recurring action) you can create attachments.
Update requests
Within each ticket item (risk, action, recurring action) you can create update requests
Views
The system offers may different views:
- Grid
- Card
- Board
- Timeline
- Calendar
- Gannt
Data entry / Forms
Data can either be entered directly into the database using one of the views or for a more guided process the system has a number of data entry forms. These forms can easily be shared with all staff without giving them access to the system.
Activity log
All activity is logged
EULA
https://jscconsultant.co.uk/eula/