Residual
Residual adds a Risks page to any Jira Cloud project: a risk register that records inherent and residual risk separately, keeps the reasoning behind every rating, tracks treatments with evidence and writes every change to an audit trail under the name of the person who made it.
The register is set up by the project admin inside the project. Residual creates no work item types, no custom fields and no permission schemes, and it never asks for Jira administrator rights.
What Residual is not
Section titled “What Residual is not”Residual is not an information security management system and not a GRC tool. It does not map controls to frameworks, it does not manage an asset inventory and it does not turn risks into work items on your boards. It is a register for project and programme risks that is ready when the auditor asks for it.
Who can do what
Section titled “Who can do what”Residual has no permission settings of its own. It uses your Jira project permissions, so the project’s permission scheme stays the single source of truth.
| Level | Jira project permission | What it allows |
|---|---|---|
| View | Browse projects | See the register, risk details, treatments and history, and export PDF and CSV |
| Edit | Edit issues | Create and edit risks, assess inherent and residual risk, manage treatments |
| Admin | Administer projects | Configure the register for the project and delete risks |
See Permissions for how the check works.
Start here
Section titled “Start here”- Getting started: install the app, set up the register and record your first risk
- Risk model: the five by five model, the levels and how the model version works
- Treatments and evidence: owner, due date, status and the evidence rule
- Audit trail: what is recorded, and what happens when a risk is deleted
- Export: the PDF report and the CSV export
- Data storage and security: what is stored, where it lives and what happens when the app is uninstalled
- FAQ: the questions we are asked most often
- Changelog: what changed in each release
Support
Section titled “Support”Questions and problem reports go to support@makoa.ch. See Support for what to include in a report. Our privacy policy and our security policy describe how we handle data and vulnerability reports.