Export

Use Export on the Risks page to download the register as a PDF report or as a CSV file. Everyone who can view the register can export it.

Both files are generated in your browser and saved on your device. No data is sent outside your Atlassian cloud. Every export is recorded in the audit trail.

PDF report

The PDF report is meant to be handed to an auditor as it is. It contains:

1. Cover with project, number of risks, model version, time of generation in UTC, the person who generated it and the app version, plus a summary of risks by level, inherent and residual.
2. Heatmaps for inherent and residual risk.
3. Risk register: the risk table, sorted by residual score, highest first.
4. One section per risk with its description, its assessments with rationale, its treatments with evidence and its full history, newest first.
5. Register events: configuration changes and every export of the register, including the current one.

CSV

The CSV file has one row per risk, in the same order as the register table in the PDF. Columns:

Title, Category, Status, Owner, Review date, Inherent level, Inherent score, Residual level, Residual score, Inherent rationale, Residual rationale, Risk ID.

The file is UTF-8 encoded and uses commas as separators. Cell values that a spreadsheet program would run as a formula are neutralized.

Large registers

The export covers up to 2000 risks per register. If a register is larger, the cover of the PDF says that the list may be incomplete.