How to Populate Controls and Risks Manually

Risks and controls are the foundation of your testing program — every test ultimately ties back to a risk it's designed to address and a control that's meant to mitigate it. While Hadrius can generate risks, controls, and tests automatically when you upload a policy (by selecting "Generate risks, controls and tests from this document" during upload), you can also build out your Risks and Controls registers manually. Use this workflow when you're starting a register from scratch, adding an item that wasn't captured during document generation, or want full control over how a risk or control is worded.

Adding a risk

Risks are tracked in the Risks register, under the Register tab.

1. From the Risks register, click Add risk to open the Create risk dialog.
2. In the Scenario field, describe the risk scenario in plain language — for example, advisors sharing client data with AI tools that haven't been approved.
3. Use the Inherent risk impact slider to rate how severe this risk would be if no controls were in place. This gives your team a baseline severity before any mitigation is applied.
4. Click Create risk to save the entry. It immediately appears in the Risks register, where you can later set its residual risk impact and link it to the controls that address it.

Adding a control

Controls — the compliance procedures your firm uses to manage its risks — are tracked separately, in the Controls register.

1. Open the Controls register and click Add control to open the Create control dialog.
2. Enter a clear Name for the control so anyone reviewing the register immediately knows what it covers.
3. Add a short Description explaining what the control checks.
4. Click Create Control to save it.

The new control now appears in the Controls register. From here, you can open the control and link it to one or more risks and tests, so your testing program reflects which procedures mitigate which risks and which tests verify those procedures are working.