| Operational and enterprise risk governance | Documented by vendor | Riskonnect documents configurable registers, impact and likelihood assessments, risk appetite and tolerance alerts, owners, approval and escalation paths, mapped controls, control checks and testing, remediation evidence and audit trails. Keep this ERM and operational-risk scope separate from Health & Safety and claims subscriptions. Operational risk registers, approvals and control testing |
|---|
| Safety incident lifecycle | Documented by vendor | Intake, investigation and corrective follow-up are listed. Demonstrate ownership and closure evidence with your event categories. Health and Safety product scope and commercial FAQ |
|---|
| High-hazard workflow scope | Depends on scope | Permit-to-work, contractor and chemical inventory features are listed. Confirm the purchased modules and required approval controls. The Health & Safety page also lists self-service registration and automated document checks, alongside simplified onboarding, for contractor validation; ask for a demonstration of each in the purchased modules. Health and Safety product scope and commercial FAQ |
|---|
| Claims processing | Depends on scope | Claims Management covers assignment, reserves, settlement and closure. These capabilities require the appropriate claims scope, not just incident reporting. Claims Management scope |
|---|
| External system interfaces | Depends on scope | API guidance separates Riskonnect, ClearSight, Active Risk, ESG and resilience interfaces. Confirm the API for the actual product and price delivery and maintenance. API and integration options |
|---|
| Implementation configuration | Documented by vendor | GoLive documents Essentials, Pro Configuration and Tailored Configuration approaches. Agree deliverables and acceptance criteria before selecting one. The GoLive page gives under 2 months and a fixed fee for Essentials, 2 to 6 months and a fixed fee for Pro Configuration, and 4 to 10 or more months on time and materials for Tailored Configuration. GoLive implementation approaches |
|---|
| Portfolio expansion | Depends on scope | Riskonnect markets multiple solution families. Confirm data ownership and access across purchased products rather than assuming every module shares an entitlement. Portfolio boundaries |
|---|
| Safety analytics and regulatory reporting | Documented by vendor | The current Health & Safety page describes incident KPIs, trends, injury metrics, workplace-demographic analysis, due-date notifications, OSHA recordability and submission, and scheduled stakeholder or regulator reporting. Validate calculations, jurisdictions, permissions and submission responsibility in the proposed deployment. Current Health & Safety intake, CAPA, audit, KPI and regulatory-reporting scope : checked 28 September 2026 |
|---|
| Safety risk assessment and treatment planning | Depends on scope | Riskonnect describes structured hazard identification, likelihood and severity evaluation, accountable mitigation plans, controls, training needs and reassessment after operational or regulatory change. Confirm whether the required safety assessment sits in Health & Safety or a separately licensed risk module. Current Health & Safety intake, CAPA, audit, KPI and regulatory-reporting scope : checked 28 September 2026Health and safety risk-assessment method and evidence expectationsRisk registers, treatment plans, controls, incidents and audit effectiveness |
|---|
| Compliance obligations and regulatory-change workflow | Depends on scope | The compliance solution describes centralized obligations, versioned policies, provider-fed regulatory updates, mapped controls, assessments, remediation and audit trails. This is broader GRC scope and must not be assumed from a Health & Safety licence; specify content providers, languages, modules and update responsibility. Compliance obligations, regulatory change and audit-ready workflows |
|---|