To convert a risk to an issue or vice versa, you can either click the three dots in the risk and issue log and select the Convert option, or change the Type in the top right corner of the risk or issue popup. Additionally, conversions can be made via the Summary of Activities table in any of the forms available on the 9ine Platform, including incident management, records of processing activity, processing operation assessment, or DPIA. Once a risk or issue is converted, all references to it will automatically be updated across the platform, such as in logs and association fields.

The prefix for a risk (RIS) is changed to the format used for issues (ISS), while the numerical part of the reference number remains unchanged.

When a risk (or issue) is associated with a form such as incident management, records of processing activity, processing operation assessment, or DPIA, it becomes a linked or child item. Consequently, anyone with permissions to access the form also gains permissions to view the details of the associated risk (or issue) and any linked tasks. This integration ensures that all relevant information is accessible to users managing related forms.

To upload your existing risk register, please email a copy to [email protected]. A member of our team will handle the data upload for you.

Risks and issues are scored by multiplying the impact and likelihood values. This score is displayed on the log, and the overall rating is used to determine the level of risk or issue.

Only people assigned to a risk or issue can see it: its Owner, Members, Notified Users and Attachment Reviewers, along with anyone who has access to a project or project group it belongs to. Members and Notified Users can edit the record, but only the owner can delete it. If you cannot see a record you expect to, ask your organisation's 9ine Platform administrator to check your access.

Closing a risk or issue removes it from the default log and closes any tasks linked to it at the same time. It is not deleted: you can Reopen it whenever you need to, which restores the record and returns its associated tasks to Not Started. Use Close when something is resolved, and Delete only when you want to remove the record and its tasks from the Platform entirely.

Yes. Choosing a project group and project is optional, so a risk or issue can stand on its own. When it does, the log simply shows a dash in the project and project group columns. You can link it to a project later by editing the record.