-
Notifications
You must be signed in to change notification settings - Fork 2
Specs M4 Risks Risk Treatment Plan
Claude edited this page Aug 28, 2026
·
1 revision
risks.models.treatment.RiskTreatmentPlan
Treatment plan listing the actions associated with a risk.
Represents the treatment actions associated with a risk.
| Field | Type | Constraints | Description |
|---|---|---|---|
id |
UUID | PK, auto-generated | Unique identifier |
risk_id |
relation | FK → Risk, required | Treated risk |
reference |
string | required, unique | Reference code (e.g. PTR-001) |
name |
string | required, max 255 | Plan title |
description |
text | optional | Detailed description |
treatment_type |
enum | required |
mitigate, transfer, avoid
|
actions |
relation | O2M → TreatmentAction | Treatment actions |
expected_residual_likelihood |
integer | optional | Expected residual likelihood |
expected_residual_impact |
integer | optional | Expected residual impact |
cost_estimate |
decimal | optional | Overall cost estimate |
owner_id |
relation | FK → User, required | Plan owner |
start_date |
date | optional | Start date |
target_date |
date | required | Target completion date |
completion_date |
date | optional | Actual completion date |
progress_percentage |
integer | optional, 0-100 | Overall progress |
status |
enum | required |
planned, in_progress, completed, cancelled, overdue
|
created_by |
relation | FK → User | Creator |
created_at |
datetime | auto | Creation date |
updated_at |
datetime | auto | Last modification date |
risks.models.treatment.TreatmentAction
| Field | Type | Constraints | Description |
|---|---|---|---|
id |
UUID | PK, auto-generated | Unique identifier |
treatment_plan_id |
relation | FK → RiskTreatmentPlan, required | Parent treatment plan |
description |
text | required | Description of the action |
owner_id |
relation | FK → User, required | Action owner |
target_date |
date | required | Target date |
completion_date |
date | optional | Completion date |
linked_measures |
relation | M2M → Measure | Associated measures (Measures module) |
status |
enum | required |
planned, in_progress, completed, cancelled
|
order |
integer | required | Execution order |
created_at |
datetime | auto | Creation date |
updated_at |
datetime | auto | Last modification date |
Built from docs/ at v0.36.0. Edits made here are overwritten by the next release : open a pull request against the source instead.
- Administration
- Ask Cairn
- Assets and suppliers
- Compliance
- The dashboard
- Finding your way
- Getting started
- Incidents
- How records move
- Organisational context
- Reports and management review
- Risks
- Trust Center
- Architecture
- Configuration
- Contributing
- The documentation system
- Installation
- Internationalisation
- Operations
- Release process
- Security
- Testing
- Adding an assistant provider
- Adding a dashboard widget
- Adding a domain entity
- Declaring a lifecycle
- Adding an MCP tool
- Adding a REST endpoint
- Adding a report
- Interface conventions
- Dashboard widgets
- Lifecycles
- MCP tools
- MCP tool parameters : Assets
- MCP tool parameters : Compliance
- MCP tool parameters : Governance and context
- MCP tool parameters : General
- MCP tool parameters : Incidents
- MCP tool parameters : Reports and management review
- MCP tool parameters : Risks
- MCP tool parameters : System and administration
- MCP tool parameters : Trust Center
- Management commands
- Models
- Permissions
- REST endpoints
- Environment variables
- MCP server
- REST API
- Assistant module (Ask Cairn)
- Module 0: User Management and Access Control
- Module 1: Context and Organization
- Module 2: Asset Management
- Module 3: Compliance
- Module 4: Risk Management
- Module 4 bis - EBIOS Risk Manager
- Module 5 : Trust Center
- Module 6 : Security Incident Management
- Management review : ISO 27001:2022 compliance (clause 9.3)