Product Insights

Introducing Set Target – Define Desired Risk Levels Clearly

Jul 25, 2025
2 min read
A new feature in the Risk module enables teams to set target risk levels, providing a clear visual reference in the matrix to compare current risks with desired outcomes after mitigation measures. This supports structured risk management, decision-making, and follow-up processes.
Johnny Vik
Johnny Vik

Introducing Set Target – Define Desired Risk Levels Clearly

A new feature is now available in the Risk module: the ability to set a target risk. This allows teams to define the desired level of risk after planned treatments or mitigation measures have been implemented. The target is shown directly in the matrix, offering a clear visual reference for how far current risks deviate from expected or acceptable levels.

Why Set a Target?

Setting a target risk level is a core part of structured risk management, supported by recognized standards such as:

  • ISO 31000:2018 – Risk Management Guidelines

  • ISO/IEC 27005 – Information Security Risk Management

  • PMI Risk Management Framework

According to ISO 31000, risk treatment should be guided by evaluation criteria, including risk tolerances. By setting a target, organizations make these thresholds explicit—helping stakeholders understand:

  • What level of risk is considered acceptable

  • How much risk remains to be reduced to reach the target

Setting a target supports decision-making by giving context to current assessments and anchoring follow-up discussions.

How It Works

  • Set Target: When no target exists for a risk, a new menu option appears: “Set Target”.

  • Who Can Set It: Users with the Risk Manager role can set the target. (Note: This is the default setup, it can be adjusted locally to comply with other company policy or procedure)

  • Matrix Display: The target is shown in the matrix and marked with a T to distinguish it from current assessments.

  • Editing: You can update or delete the target if needed. (Note: there is currently no change history for targets.)

Practical Use Cases

  • Strategic Risks: Use targets to track intended long-term risk levels and monitor whether treatments are delivering the expected impact.

  • Operational Risks: Help clarify whether additional action is needed by comparing current vs. target risk levels.

  • Project Risks: Align teams on acceptable thresholds during delivery and establish a reference point for follow-up assessments.



Illustration of how the target is marked in risk matrix (with a "T"), and how the risk assessments compares to the target.

Notes and Availability

This first release focuses on the essentials—setting, showing, and managing the target risk. A history log for target changes is not yet included but may be considered in future iterations.

The feature became available for general usage early August. However, access needs to be provided. Contact your support personnel when you want to explore this new feature.