Notifications

Overview

When users take actions in the platform — creating risks or incidents, updating fields, leaving comments — the system records events behind the scenes. A background process runs on a regular interval, collects pending events, and converts them into notifications for the relevant subscribers.

Tip

You will never receive a notification for your own actions.

Notification Consolidation

Rapid edits to the same item by the same person are consolidated into a single notification. For example, if you use the inline table editor to update the title, urgency, and assignee of a risk in quick succession, subscribers receive one “Risk Changed” notification — not three.

Notification Types

New items

Subscribers are notified when new items are created that match a severity, urgency, or threat objective they follow.

Category	Notification Types
Risk by urgency	New Low Risk, New Medium Risk, New High Risk, New Critical Risk
Incident by severity	New Sev1 Incident, New Sev2 Incident, New Sev3 Incident
Incident by threat objective	New Fraud, New Extortion, New Sabotage, New Data Disclosure, New Customer Targeting, New Resource Hijacking
Batch creation	Risks Created, Incidents Created

Note

When an incident is downgraded from a scored severity (Sev1, Sev2, or Sev3) to a lower level or to unscored, subscribers of the original severity level are automatically notified. This ensures that if you are watching all Sev1 incidents, you know when one gets reclassified.

Assignments

Notification Type	Trigger
Assigned Risk	You are assigned to a risk
Assigned Incident	You are assigned to an incident

Changes and comments

Notification Type	Trigger
Risk Changed	A risk you follow is updated, including new comments
Incident Changed	An incident you follow is updated, including new comments

User-Level Notifications

User-level notification preferences are configured per user in Settings > Notifications.

• For each notification type, choose whether to receive it via Platform (in-app notification center), Email, or both.

Note

The checkboxes on this page are your personal delivery preferences and apply across all of your organizations.

• Org-wide types — subscribe once and get notified about all matching items. For example, subscribing to “New Sev1 Incident” delivers a notification every time a Sev1 incident is created in your organization.
• Item-specific types — you must be following a specific risk or incident to receive change and comment notifications for it.
• Being assigned to an item automatically subscribes you to future updates on that item.
• If no preferences are set, notifications default to in-platform delivery.

Org-level notifications deliver to shared Slack or Teams channels and are configured by admins. See Org-Level Notifications for setup instructions.