Dashboard
Read your at-a-glance briefing — the KPI tiles, Risk Pulse and the risk heatmap.
8 min read9 sectionsAll roles
The Dashboard is your briefing: what needs your attention, the headline risk numbers, how your risk profile is trending, and a way into each register. It opens after you sign in and is the first item in the sidebar. Use it to decide what to work on, then open the register for the full detail.
The Dashboard reads top to bottom, from your own actions to the wider picture.
The page is headed Operational Dashboard, with a greeting and your name, role and email underneath. Owners and admins also see Open Executive Overview at the top right on wider screens; it opens the board-level Executive Overview, covered in the Reporting guide.
A short to-do list built for you from the registers.
What can appear
- Risk
An open risk you own, rated in your High band or above.
- Control review
A control you own, or an unassigned one, whose review date has passed.
- Obligation review
An obligation you own, or an unassigned one, whose due date has passed.
- Incident
An Open or Investigating incident in your two highest severity levels (High and Critical by default) that you own or that has no owner.
- Risk review
Someone else's risk, or an unassigned one, whose review date has passed.
- Proposal approval
A proposal routed to you to decide, titled Assigned to you, whatever your role. Owners and admins also see proposals waiting for approval, titled Pending approval.
Proposals routed to you come first, then other items assigned to you, then proposals waiting for your approval, then overdue and unassigned items across your units. The list shows up to six. Open on a proposal goes straight to it; on any other item it opens a register list, where you can find the record.
Four tiles beside My actions give the headline numbers for your risks and treatment work.
Open risks
Risks with status Open, with a count for each severity band in your organisation's labels — residual rating where one exists, otherwise inherent. Opens the Risks register.
High+ severity
Open risks rated in your High band or above. The label uses your organisation's word for High. Opens the Risks register with a severity filter applied.
Control coverage
The percentage of open risks that have at least one linked control. Opens Reports.
Overdue treatment plans
Plans past their due date, or marked Overdue, that are not Completed. Opens Treatment Plans.
A line chart of how many open risks sit in each severity band, month by month.
Time range
- Last 3M
The last three months.
- Last 6M
The last six months. This is the default.
- Last 12M
The last twelve months.
Each line is one severity band in your organisation's labels; on a five-band scale the top line combines your two highest bands and is labelled with a plus. Hover over a month to see its counts and total. The subtitle shows how many months of data the chart actually holds.
Under the title, a trend line compares the first and last month in the range. It reads Increasing, Decreasing or Stable, followed by the current number of risks in the two highest lines and how much that has changed.
A 5 × 5 heatmap of where your risks sit by likelihood and impact.
View toggle
- Residual
Where each risk sits after its controls. A risk with no residual assessment yet is plotted at its inherent position.
- Inherent
Where each risk sits before controls.
Rows are likelihood and columns are impact, labelled in your organisation's own words. Each cell is coloured by your severity matrix and shows how many risks it holds. The heatmap opens on the view your organisation chose under Risk Score Scope in the tenant configuration's Risk Appetite step. Click i for a short explanation.
- 1
Click a cell
A dialog lists the risks in it, with Key, Title, Owner, Category and Score.
- 2
Click a risk
Opens that risk's page.
Two panels beside the charts summarise the approval queue and your highest-rated risks.
- Pending Proposals
Proposals waiting for a decision that you can open, less any you created that are waiting on someone else to decide. A + after the number means there may be more. Review them in Proposals.
- Total Evidence
Evidence records uploaded to your units.
- Top 5 Risks
Your five open risks with the highest score — residual where assessed, otherwise inherent — each with its key, category code, owner, severity and next review date.
A row of tiles gives a count for each register and opens it.
Risks register
Open risks — the same number as the Open risks tile.
Controls library
Controls with status Active.
Obligations
Every obligation in your Obligations register.
Active Incidents
Incidents with status Open or Investigating. Resolved, Pending Closure and Closed incidents are not counted.
Overdue Policies
Policies whose next review date has passed. Opens Policies filtered to overdue.
Shortcuts to common tasks, and an assistant that can see the Dashboard's headline numbers.
Import Risk Register
Opens Uploads to import a spreadsheet as a proposal.
Upload Evidence
Opens the Evidence register.
Review Proposals
Opens the Proposals queue filtered to Pending.
Create Risk
Opens the New form for a risk. Submitting it files a proposal.
The ShelfGRC AI bar at the foot of the page answers questions about your data. It is given the Dashboard's headline numbers and offers starter prompts such as What are the top 5 issues I should tackle now? See the AI Assistant guide.
The Dashboard shows only what your role, org units and sensitivity access allow.
Owners see the whole organisation. Admins and members see the org units they are assigned to. Confidential and Privileged records are included only if you hold that access. Highly sensitive records are left out of the headline tiles, My actions and Top 5 Risks, even if you are listed on them.
On Risk Pulse, months snapshotted before 10 October 2026 are the exception: they were counted across the whole organisation, not just your units, and are labelled Whole organisation. Later months follow your units.