Policies and risk reports

What it is for. It is the dialog for risk and policy management on the employee side: you can read and acknowledge the policies assigned to you and send risk reports (with a likelihood/impact assessment).

When to use it. When you must read and sign a company policy; when you want to report a risk or a non-compliance you have observed.

How to open it. It opens from the Governance/Compliance sections of the portal (or from the related items in the Inbox).

What it shows.

• Attestations / Policies: list of policies to read and acknowledge, with a Read and sign action (which opens the text with Sign and Complete).
• New report: form with Title (required), Category, Description, Likelihood (1–5) and Impact (1–5).

How to use it.

• For a policy: Read and sign → read the text → Sign → Complete (attestation recorded).
• For a report: fill in the fields, set Likelihood and Impact, then Send report (or Cancel).

What happens next. The attestation is recorded in your name with date/time; the report enters the risk management flow (Risk/Compliance) with a score derived from likelihood × impact.

Notes. Policies that must be signed stay in the list until you acknowledge them; reports can be handled by the GRC teams.