Audit trail
Residual records every change to a risk, an assessment or a treatment. The audit trail is shown in the History tab of each risk and is part of the PDF report.
What is recorded
Section titled “What is recorded”Each event holds:
- the person who made the change
- the time
- the field that changed
- the old value and the new value
Changes that do not change anything, for example saving High over High, are not recorded.
Recorded as the person, not as the app
Section titled “Recorded as the person, not as the app”Every event is written under the account of the person who made the change. Nothing is written in the name of the app. The History tab shows the display name of the person; the account ID is available as a tooltip.
Register events
Section titled “Register events”Changes to the register configuration and every export are recorded as well, as register events. The PDF report lists them in its own section.
Deleted risks
Section titled “Deleted risks”When a project admin deletes a risk, the deletion is recorded with the title of the deleted risk. The audit events of the deleted risk are kept. The app never deletes audit events.