Define and Track Risk Treatments

Once controls are mapped to a risk, the next step is to define how you plan to treat that risk. Sprinto supports multiple treatment strategies, with optional task creation to ensure follow-through.

Access the Treatment Section

1. Log in to the Sprinto dashboard and navigate to Risks.

2. Click on the Risk Register tab.

3. Open the relevant risk.

4. In the left-side navigation panel, click Treatment.

Choose a Treatment Strategy

You can choose one of the following approaches for each risk:

• Accept: Acknowledge the residual risk and take no further action.

• Transfer: Shift responsibility (e.g. outsource or insure the risk).

• Further Mitigate: Apply additional actions to reduce risk further.

• Avoid: Discontinue the process or activity causing the risk.

For each strategy, you can:

• Select a treatment reason (e.g. “Risk is insured”, “Work is outsourced”).

• Add optional treatment notes to document your decision.

Click Save and close once you have selected the appropriate treatment strategy.

Create a Risk Treatment Task (Optional)

You can assign mitigation tasks to ensure that treatment actions are implemented.

To create a treatment task:

1. In the Treatment section, click + Add Task.

1. Enter the following details:

   • Task name

   • Assignee (Security Hub admin)

   • Due date

   • Optional notes or attachments

2. Click Add Task to save.