Risk states

As part of the risk management plan, a risk or issue may be in one of four states. These are:

Raised

The risk or issue has been created but does not yet have any actions or controls. In other words, there is no plan to mitigate it.

In Progress

The risk or issue has been created and has a mitigation plan in place but there are outstanding actions or controls which are not yet established.

Controlled

The mitigation plan has been completed and the current risk score is equal to or lower than the target score, but the risk or issue still remains a threat and requires routine monitoring.

Closed

The risk or issue is no longer a threat.

Generally speaking, a risk or issue will progress through the states in the order shown above. However it is quite common for a risk/issue to move backwards and forwards between being In Progress and Controlled as it is reviewed and new mitigation steps are identified. It is also likely that a risk or issue will remain in the Controlled state for a significant amount of time and may never move to being Closed.