Overview
Risk categories allow you to classify risks by type — such as Operational, Financial, Compliance, Strategic, or Reputational. Categories help you filter, group, and report on risks across your organisation.
Default Categories
When Risk Manager is enabled for your company, the following categories are automatically seeded:
Operational
Financial
Compliance
Strategic
Reputational
These are scoped to your company — each company has its own set of categories.
Adding a New Risk Category
Quick Steps
Navigate to Settings > Risk Categories
The Risk Categories settings page loads with a data table
Click Add
Enter a title, description, colour (e.g. #FF0000), and order
Select Save
The new category appears in the data table with the correct details.
Editing a Risk Category
Navigate to Settings > Risk Categories
Click Edit on the category you want to change
The edit modal opens with pre-filled values
Update the title, description, colour, or order
Select Save
Deleting a Risk Category
Navigate to Settings > Risk Categories
Click Delete on the category
A confirmation prompt appears
Confirm deletion
Categories are soft-deleted — they are removed from the active list but remain in the database with an Inactive status. Risks that were assigned a deleted category still display it (greyed out or with an indicator).
Category Uniqueness
Category titles must be unique within a company. Attempting to create a category with a duplicate title will return an error. The same title can be used in different companies.
Assigning Categories to a Risk
Open a risk detail page
Locate the Categories field card (shows "No categories assigned" if empty)
Click the Categories card to open the selection modal
The modal shows all active categories with checkboxes
Select one or more categories and save
Category chips are displayed on the risk
Removing Categories from a Risk
Open the risk detail page
Click the Categories card to open the modal
Uncheck the categories you want to remove
Save — only the remaining categories are displayed as chips
Important: Deactivating a category does not remove it from risks that already have it assigned. The category chip will still appear on those risks.
Further Information
For creating and managing risks, see Managing Risks. For risk details and fields, see Risk Details.