¶ What is the treatment plan?
Risk treatment means modifying risks to bring them to an acceptable level. Step 4, Treatments & cost-benefit, is not just a list of treatments — it is a cost-benefit assessment. Every treatment costs something and removes some risk. As you tick treatments in or out of the plan, you see straight away what the plan costs and how far the risk drops in the matrix. The result is a prioritised plan that the decision-maker signs in step 5.
¶ How to build the plan
- Open step 4 on the risk assessment dashboard.
- In Select treatments for execution and conclude the treatment plan, tick the treatments you want to include. Use Add all or Clear all to change many at once. Click a treatment to edit it.
- Follow how the summary and the risk matrix change as you select treatments.
- Make sure every selected treatment has a Responsible and a Due date, so it can be followed up.
- Click Finish treatment plan, and continue to Step 5 - Complete & sign.
Ticking a treatment includes it in the plan for this assessment. Treatments that are already ongoing or implemented stay in the plan; to take one out, change its status on the treatment itself.
¶ Recommended treatments
The Recommended treatments list shows the most effective treatments first. Treatments are ranked by how much risk they remove in this assessment. A treatment that touches many risks gives more effect than one that touches few, even when its effect per risk is lower. Each treatment is placed in a band:
| Band | Reached when the treatment |
|---|---|
| Highly effective | brings 3 or more risks below the acceptance line, or removes 15% of the assessment's total risk |
| Effective | brings at least 1 risk below the acceptance line, or removes 12% |
| Moderate | removes 4% of total risk |
| Limited | removes less than 4% |
For each treatment you see the number of Risks it applies to, its Effect, its Cost /yr and when it is Due. You can open the effect per cause and consequence. Use All treatments to search every treatment in the assessment.
¶ The summary
- Plan cost: The yearly cost of the selected treatments, plus one-time costs.
- Risk reduced: How much less risk is left with the plan than with the treatments already implemented. Effects multiply rather than add, so two treatments that each remove 50% of the same risk leave 25%, not 0%.
- Risks covered and Risks addressed: How many risks are touched by a treatment in the plan, and how many are left untreated.
- Unacceptable risks: How many risks are above the acceptance line, before and after the plan (shown when your organisation uses an acceptance threshold, see Risk acceptance).
¶ The risk picture
The risk matrix in step 4 compares the risk before and after the plan. Choose between:
- Inherent: before any treatment.
- Current → planned: from the risk with treatments already implemented to the risk with every treatment in the plan. Tick a treatment to see the points move.
- All: every treatment counted.
If an acceptance threshold is set, the Acceptance line is drawn in the matrix. Click a position in the matrix to see the risks there.
Time spent building a good risk model and good cost estimates pays off here: a comprehensive model lets you find large risk reductions at low cost.
¶ Ensuring implementation and follow-up
Diri is both a risk management and a quality assurance system. Assign a responsible and a due date to the chosen treatments, so their progress can be tracked. The responsible user receives notifications about the assignment and approaching deadlines, and treatment deadlines appear in the Annual Wheel.
To see all treatments visible to you across assessments, open Treatments in the left menu. See Treatments.
¶ Risk treatment principles
A general goal is that risk should be as low as reasonably practicable. For risks with very low probability but potentially devastating consequences, consider treatments even if they cannot be justified on a purely financial basis.
Also remember that frequent events with low impact can add up to significant consequences.