> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cleverschool.systems/llms.txt
> Use this file to discover all available pages before exploring further.

# Risk Register

> Risk Assessment, 4Ts Treatment & Register Workflows

## End-to-End Risk Register Lifecycle

The Risk Register module coordinates strategic and operational risk management through systematic hazard identification, dual-matrix scoring (inherent vs. residual risk), the 4Ts treatment framework, and Multi-Academy Trust (MAT) template synchronisation.

```mermaid theme={null}
flowchart TD
    subgraph IdentificationPhase["Phase 1: Identification & Categorisation"]
        I1["1. Identify threat or vulnerability in Risk Area (e.g. Finance, Premises, Cyber)"]
        I2["2. System assigns unique permanent key code (e.g. SCH001)"]
        I3["3. Assign Item Owner & Management Scope (School / Central / Both)"]
        I1 --> I2 --> I3
    end

    subgraph InherentPhase["Phase 2: Inherent Risk Scoring (Pre-Treatment)"]
        S1["Rate Likelihood Before (1-5: Rare to Extremely likely)"]
        S2["Rate Impact Before (1-5: Slight to Extreme impact)"]
        S3["Compute Inherent Risk Level (Composite Score 2 to 10)"]
        S1 & S2 --> S3
    end

    subgraph TreatmentPhase["Phase 3: 4Ts Strategic Treatment & Controls"]
        T1{"Select 4Ts Strategy"}
        T1 -->|Reduce Risk| T2["<b>Treat</b>: Deploy preventative control measures"]
        T1 -->|Accept Risk| T3["<b>Tolerate</b>: Accept residual level with monitoring"]
        T1 -->|Share Risk| T4["<b>Transfer</b>: Engage insurance or specialist partner"]
        T1 -->|Cease Threat| T5["<b>Terminate</b>: Discontinue hazardous activity"]
        T2 & T3 & T4 & T5 --> C1["Document operational control measures & governor notes"]
    end

    subgraph ResidualPhase["Phase 4: Residual Scoring & Monitoring"]
        R1["Re-evaluate Likelihood After (1-5) & Impact After (1-5)"]
        R2["Compute Residual Risk Level (Green / Yellow / Orange / Red)"]
        R3["Generate A3 Landscape Board Pack PDF for Audit Committee"]
        R1 & R2 --> R3
    end

    IdentificationPhase --> InherentPhase
    InherentPhase --> TreatmentPhase
    TreatmentPhase --> ResidualPhase
```

***

## 1. Risk Formulation & Dual-Matrix Scoring

Risk Owners document risks using an objective dual-assessment scoring model:

**1. Record Inherent Risk (Pre-Treatment)**

Evaluate the risk in its unmitigated state:

* **Likelihood Before**: Probability of occurrence on a 1–5 scale (*Rare* to *Extremely likely*).
* **Impact Before**: Severity of consequence across finance, operations, or reputation (*Slight* to *Extreme*).
* The system sums the two ratings to calculate the **Inherent Risk Level** (2 to 10).

**2. Select Strategic Response (4Ts)**

Determine the appropriate governance strategy:

* **Treat**: Introduce operational procedures, physical controls, or training to reduce probability/impact.
* **Tolerate**: Retain risk when controls are optimal or cost of further intervention is disproportionate.
* **Transfer**: Mitigate exposure through commercial insurance policies or specialist contractors.
* **Terminate**: Cease the operational activity or system creating the vulnerability.

**3. Record Control Measures & Residual Score**

Document detailed mitigation measures in the controls commentary. Re-evaluate **Likelihood After** and **Impact After** to record the calibrated **Residual Risk Level**.

***

## 2. Risk Level Thresholds & Bandings

```mermaid theme={null}
flowchart LR
    Low["<b>Minimal & Low (2–5)</b><br/>• Blue / Green status<br/>• Routine departmental monitoring"] --> Mod["<b>Moderate (6)</b><br/>• Yellow status<br/>• Active review by Area Lead"]
    Mod --> High["<b>Significant & High (7–10)</b><br/>• Orange / Red status<br/>• Board Audit Committee Scrutiny"]
```

* **High Risk (9–10, Red)**: Demands immediate executive intervention, priority resource allocation, and formal reporting to governors.
* **Significant Risk (7–8, Orange)**: Requires structured preventative controls and termly monitoring by senior leadership.
* **Moderate Risk (6, Yellow)**: Routine monitoring by area owners.
* **Low / Minimal Risk (2–5, Green/Blue)**: Managed through standard operational procedures.

***

## 3. Governance Reporting & MAT Synchronisation

School leadership and audit committees maintain oversight through reporting facilities:

> [accordion] A3 Landscape Risk Register Dossier
>
> Click **Export PDF** from the master register to generate a clean, board-formatted A3 PDF report displaying risk key codes, pre/post scores, 4Ts classifications, and control commentary.

> [accordion] Multi-Academy Trust (MAT) Central Synchronisation
>
> In academy trusts, central teams author baseline trust risk templates. Centrally synced risks feature a lock badge and update automatically across all academies.

> [accordion] Management Scope Flagging
>
> Risks can be classified as **School Managed**, **Centrally Managed**, or **Both**, clarifying jurisdictional accountability across multi-academy trusts.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.