What Is a Risk Assessment?
A Risk Assessment in Essential ERM is a structured workflow where a single assigned user reviews and updates the details of specific risks. It differs from Risk Voting, where multiple contributors give input without changing the actual risk data.
You can include:
A single risk
A selected group of risks
All risks in the system
Only one active assessment can contain a given risk at a time, but multiple assessments can run concurrently.
Part A: Administrator View — Creating and Managing Assessments
Only Admins and Power Users can create assessments.
Step 1: Activate the Feature (Admins Only)
Go to Admin → General Settings
Enable the “Risk Assessment” feature
If you don’t see this option, your subscription may not include it. Contact Tracker Support.
Step 2: Create a New Assessment
Navigate to Enterprise Risk Console
Click the green “Create Risk Assessment” button (top right)
Step 3: Configure the Assessment
Optionally name the assessment (e.g., “Q2 Assessment”)
Use filters if needed, then select one or more risks to assess
Click “Create Assessment”
Step 4: Assign Assessors
On the Assessment Details screen:
View selected risks
See who assessed each risk last time (pre-filled)
Change the assessor using the dropdown
Only Standard and Admin users can be assigned
You can still add/remove risks or change assessors while the assessment is active.
Step 5: Set Instructions and Deadline
Add custom instructions if needed
Set an end date, or leave blank (default: 2 weeks)
Step 6: Launch the Assessment
Click “Start and Send”
Each assigned user will receive one email with a link to their assessment
Step 7: Monitor and Remind
Return to the Assessment Console via Risks → Assessments
View completion status per user
Use the “Remind” column to send reminders
You can still edit risks or assessors while the assessment is open
Once an assessment ends, changes cannot be made—except renaming the assessment.
Part B: User View — Responding to an Assessment
Step 1: Access the Assessment
The assigned user receives an email with a direct link
They will be taken straight to the My Risk Assessments screen upon login
Otherwise, users can navigate to the My Risk Assessments and the Assessments page under the Risks bar.
Step 2: Review Assigned Risks
The screen shows all risks assigned to the user
Click the orange “Incomplete” button or the risk name to begin
Step 3: Complete the Assessment
Review and update the Risk Details screen as needed
Click “Mark Assessed” (only visible to assigned assessor during active window)
Confirm attestation and select “Complete Assessment”
Repeat this for all assigned risks until the worklist shows 100% complete
Step 4: Revisit or Reassess (Optional)
As long as the assessment is open, users can return and make further updates
Once closed, the “Mark Assessed” button disappears
Notes:
Only the assigned user can assess a given risk
Once assessed, the name, date, and time of assessment appear in the top-right of the risk detail screen