Define an Owner and Plan for Registered Threats

Define an Owner and Plan for Registered Threats

You can assign an Owner to manage each registered Threat and the Plan of action. 



Assign an Owner to a Registered Threat

To assign an Owner, select a Registered Threat.



Select from the dropdown beside the icon of a person. Only users assigned the Risk Register function appear.


When you assign an Owner, they do not receive a notification.

Choose a Plan for a Registered Threat

Next, choose the Plan for the Threat. ComplyAssistant comes with 4 options: 

  • Avoid - take no action

  • Control - mitigate the Threat

  • Transfer - transfer responsibility to a third party

  • Accept - take action on the Threat


To choose a Plan, select one of the options from the dropdown beside the document icon at the top of a Registered Threat page.



If you assign “Control,” the Owner is responsible for assigning one or more Controls to the Threat. If you assign “Transfer,” the Owner is responsible for assigning a Third Party vendor to manage the Threat.

Next, you can assign tasks to users in order to implement your Plan. You can also assign who should own each Control.