Self-Assessment Risk Profile and Approval Workflow

Note: This article shows the self-assessment risk workflow for a grant. The workflow is identical for other SurePact records. 

This is the risk workflow that applies if Self-Assessed Risk Rating was ticked in Step 1 of creating the record.

Note: If this box was left blank, the process defaults to the SurePact risk profiling tool.

Only the record Manager (Grant Manager, Project Manager, etc.) can complete the Risk Profile step, then request approval.

In the Risk Profile step, the Approval Required box should remain ticked if approval is required. The record Manager can un-tick the box to remove the approval requirement. This means the next step of Risk Review will be skipped, and all risk assessments throughout the remaining grant lifecycle will also be skipped.

You now need to enter the risk rating for the record – in this example, an estimate of how likely you think the chances of winning the grant. Choose a rating of Low, Medium, High, or Very High, in alignment with your organisation’s process for assessing risk and determining its overall rating. Enter a comment explaining your choice, then click Save Risk Rating.

If Approval Required is unticked, you will skip right over Risk Review, and move to the next step or stage in the workflow.

If Approval Required is ticked, competing the Risk Profile moves you to Risk Review. The assigned risk rating is listed at the top of the page. 

To start the approval process, which also requires record Manager permission, enter a note about the risk profile and click Request Approval. 

The approval task will then be assigned to all users assigned record Risk Approver permission. All users with this role must tick either the Approve or Reject box, then click Submit Approval / Rejection. 

If the risk profile is rejected, a task will be assigned to the record Manager to redo the Risk Profile step, then return to Risk Review and re-submit for approval.

Note: It is not uncommon to assign multiple Risk Approvers. Before the Risk Review step can be considered complete, each approver must weigh in. And if any approver rejects the risk profile, the entire Risk review step starts anew.

Completing the risk review moves the record forward in the lifecycle. But you can go back to Risk Review and open the Approval Status List. This displays a history of approvals, rejections, and responses. All record Risk Approvers will appear on this list.

The entire risk review / approval process, including dates and notes, can also be found in the Governance Log.