Action register

Every corrective action under every risk. Each action has its own owner, department, due date, priority, evidence and outcome. Overdue and escalation are computed on the reporting date, .

ActionRiskDepartmentOwnerDueStatusEscalationSource recordEvidence and outcome
An action is not the risk. Marking an action complete needs evidence and updates the counts here. It never resolves the risk by itself: the risk owner confirms a measured effect and the configured authority verifies closure on the risk page.