Streamlining Risk Observations in .legal 🛡️

Risk rarely turns up in the hour you set aside to work with risks.

It turns up a quarter past two in a meeting when somebody mentions something in passing.

It turns up in an advisory that lands in someone's inbox.

And it turns up when a colleague walked past a room that shouldn't have been left unlocked.

And what normally happens?

Nothing.

Because registering the risk will mean a login, and a lot of clicks and explanation.

Risk observations in .legal solves this issue and this is how it works.

So here I am in the platform, I have my observation list and right now my observation list is blank.

I can start an observation within the platform and follow this dialogue but I can also make a public link that colleagues can use maybe they would often use it on their phone.

So I've just tried to simulate a phone here in another browser window.

This is a URL that can be accessed without a user in the platform.

So it's very easy to use it.

User click start observation, say what you have seen.

I click the phishing link.

What to do?

Continue.

You can select the category.

This was a direct observation from myself or an incident.

And then I can continue.

I'll say what my name is, I can set my email and then I can send my observation.

That's simply it.

I have now added my observation to a list I can select done in the platform.

Now we just update.

I can find one new observation.

and let's say I'm the one who are looking into this inbox.

Now I can say this was a serious issue.

We need to look at it in a risk, in a risk area.

So I will convert it to a risk scenario.

I will maybe update it with a better description.

I will maybe select the category.

I will say which risk areas are relevant, want to make it AI act and for which entities could only be assets.

and then I can convert it to a risk scenario.

I can also notify the responsible for the area.

So right now the responsible for AI act will be notified that a new scenario have been added.

Then I can And they can now select a risk scenario based on the observation.

They can add it, they can assess it just like web risk in other cases.

And then that means that the one who observates the issue not necessarily needs to make the risk assessment itself.