---
title: "Candidate risks (original)"
canonical: "https://support.appfire.com/space/RM/3500441650/Candidate%20risks%20(original)"
format: markdown
---
> ✅ This is the same as the internal documentation. Once the feature is on [danappfire.atlassian.net](http://danappfire.atlassian.net), we’ll document it properly.

The **Candidate Risks** tab holds a queue of proposed risks waiting for a decision. You review each one and either accept it, which creates a Risk issue, or dismiss it with a reason. Open it from the project page → **Candidate Risks**.

> ℹ️ **[Screenshot]** `irm-28-candidate-risks.png` — The Candidate Risks queue, with AI-surfaced risks to accept or dismiss.

> 📝 The tab is visible to **GRC Managers** only. Other roles do not see it.

### Read the queue

Each row shows **Name**, **Priority**, **Status**, **Assets**, and a **Critical/High** signal count.

- **Priority** is a lozenge — **Critical**, **High**, or **Medium** — derived from the highest impact among the candidate's assets.
- **Status** is **New**, **Active**, or **Dismissed**. Once you accept a candidate, the row reads **Risk issue created** and offers **Open issue**.
- Filter the queue by asset. With no matches the panel reads *No candidate risks in the queue.* or *No candidate risks linked to this asset.*
- Dismissed candidates are hidden until you turn on **Show dismissed candidate risks**.

### Suggest risks with Rovo

Candidates can be generated from the **Signals** tab.

1. Narrow the signals: enter search text, select Asset anchors, or select at least one Signal Group row.
2. Click **Suggest risks**. Rovo reviews the selected signals and proposes candidate risks.
3. When Rovo finishes, the project page opens the **Candidate Risks** tab and highlights the new candidates.

> ⚠️ **Suggest risks** is disabled when the prerequisites are not met. The button explains why: *Only GRC Managers can suggest Candidate Risks.*, *Rovo is not enabled on this site.*, or *Add search text, select Asset anchors, or select at least one Signal Group row to suggest risks.*

### Review a candidate

Click a row to open the candidate detail modal. It has three sections:

- **Overview** — **Priority (max asset impact)**, **Assets**, **Owner**, **Severities**, **Critical / High signals**, **Related to**, and the **Created**, **Updated**, and **Last signal change** timestamps.
- **Proposed Risk Fields** — a **Field** and **Value** table of what the Risk issue will be created with, including **Title**, **Severity**, **Source**, **Status**, and the proposed risk response (**Avoid**, **Reduce (Mitigate)**, **Retain (Accept)**, or **Transfer**).
- **Funnel Query** — the signal funnel the candidate was built from.

A dismissed candidate also shows its **Dismissal reason** and **Dismissed at** time.

### Accept or dismiss

1. Click **Accept** to open **Accept candidate risk**, then **Create Risk**. The Risk issue is created with the proposed fields and the candidate is marked as having a risk issue.
2. Click **Dismiss** to open **Dismiss candidate risk**, enter a **Dismissal reason**, and confirm with **Dismiss**.

> 📝 A site administrator can clear this queue from the admin panel with **Purge candidate risks** (one project) or **Purge all candidate risks** (every Risk Register project on the site). See <u>[Site administration](https://appfire.atlassian.net/wiki/spaces/Innovation/pages/3406332066)</u>.