# Frequently Asked Questions (FAQs)

This section answers common questions related to the Risk Management module in Sprinto. Whether you're just getting started or need clarification on specific workflows, you'll find quick answers and guidance here.

#### 1. **What are the different ways to add risks in Sprinto?**

You can add risks using Sprinto's predefined risk library, by manually creating custom risks, or by uploading a list using the bulk CSV upload feature.

***

#### 2. **Can I edit a risk after creating it?**

Yes, you can edit most risk fields—including name, owner, parameters, treatment, and mapped controls—until it has been reviewed by senior management. After review, the risk becomes read-only.

***

#### 3. **Why is my risk marked as ‘Incomplete’?**

A risk is marked as Incomplete if scoring (likelihood and impact) or treatment details have not been added. You need to complete these steps to finalise the risk.

***

#### 4. **Can I delete a risk that has already been reviewed?**

No. Risks that are part of a completed assessment or have been reviewed cannot be deleted. You must remove any treatment tasks or controls first before deleting editable risks.

***

#### 5. **How often should I perform a risk assessment?**

Sprinto recommends performing a risk assessment at least once a year. However, you can initiate one any time there are significant changes in your organisational structure, operations, or environment.

***

#### 6. **What happens after I upload a risk assessment document?**

The uploaded document is stored securely in Sprinto and can be reviewed by senior management. The system check for risk assessment is marked as Passing after review.

***

#### 7. **Who is responsible for reviewing the assessment?**

Senior management (users with the appropriate role) must formally review and acknowledge completed assessments for compliance to be marked complete.

***

#### 8. **Will I receive notifications for pending actions?**

Yes. Sprinto sends email and in-app notifications for pending risk assessments, unscored risks, overdue treatment tasks, and pending reviews.

***

#### 9. **Can I use AI to help map controls?**

Yes. Sprinto provides AI-assisted suggestions to help you automatically map relevant controls to each risk based on its category and score.

***

#### 10. **Where can I view system checks related to risks?**

System checks are visible in the **Dashboard** and under the **Risks** section. They help you track incomplete assessments, missing scoring, open tasks, and overdue reviews.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sprinto.com/risks/frequently-asked-questions-faqs.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
