Risks are created or promoted from a finding as identified risks to the business. They include risks to persons, environment, reputation, financial etc. Unlike Findings, Risks are ranked based on their potential severity and likelihood as well as having controls recorded against them. Both Risks and Findings can have actions created and associated against them.
This guide contains recommendations on best practices, tutorials for getting started, and troubleshooting information for common situations.