Conduct a Risk Assessment

Risk assessment is a periodic activity that ensures your organisation's risk profile remains up to date with changes in operations, regulatory obligations, or technology. In Sprinto, you can perform assessments in-app or upload externally completed reports.

Here's a short walkthrough video on periodic risk assessment.

Access the Risk Assessment Tab

1. Log in to the Sprinto dashboard and navigate to Risks.
2. Select the Periodic Risk Assessment tab at the top.

3. Click + Start Risk Assessment.

You can choose to:

• Start an assessment for all completed risks in the organisation.
• Limit the scope to risks from a specific zone by selecting it from the dropdown.

Option 1: Perform In-App Assessment

This option allows you to review, update, and evaluate risks using your existing register.

Steps:

1. Select Finish assessment using risks added to the Risk register.
2. Review each risk for:
   • Accuracy of parameters (likelihood, impact, residuals)
   • Validity of mitigation plans
   • Treatment status
3. Register any new risks that have emerged.
4. Tick the checkbox I have reviewed the risks above to enable final submission.
5. Click Finish assessment to complete the cycle.

Option 2: Upload an External Risk Assessment

If you maintain your risk register externally (e.g. in Excel or a GRC tool), you can upload the risk document to complete the assessment in Sprinto.

Steps:

1. Click Finish assessment and then select Upload to start assessment.

2. Enter an assessment name (e.g. "February 2025 assessment").
3. Upload the file in supported formats (.xls, .xlsx, .doc, .docx, .dotx, .pdf).
4. Tick the checkbox I have reviewed the uploaded document.
5. Click Finish assessment to submit.