Jira JQL Risk Search

The solution supports Jira JQL search to find Issues with risk. One common use case is to create risk reports with external visualization add-ons.

1. Risk issue property

All issues with a risk assessment has an issue property which is a data structure attached to the issue. See below the format on this data structure and how it is searchable with Jira JQL expressions.

{
  "created": "2023-01-01"
  "createdby": "Tom Smith",
  "updated": "2023-03-04",
  "updatedby": "Linda Davis",
  "risk_severity": "HIGHEST",                   //inherent risk
  "risk_severity_value": 4,
  "risk_impact": "Severe",
  "risk_impact_value": 5,
  "risk_probability": "Almost certain",
  "risk_probability_value": 5,
  "risk_residual_severity": "LOW"               //residual risk
  "risk_residual_severity_value": 1
  "risk_residual_impact": "Minor",
  "risk_residual_impact_value": 2,
  "risk_residual_probability": "Rare"
  "risk_residual_probability_value": 1,
}

Risk Property	Type	Value

Risk Property	Type	Value
`created`	date	Risk created date. If a risk is assigned to an existing Jira issue the created date is the assign date and not the issue created date
`createdby`	string	The name of the person creating a risk or assigning a risk to an existing Jira issue
`updated`	date	Risk update date
`updatedby`	string	The name of the person last updating the risk
`risk_severity`	string	Unspecified, LOW, MEDIUM, HIGH, HIGHEST (default risk matrix)
`risk_severity_value`	number	0-4 (low to high)
`risk_impact`	string	Unspecified, Negligible, Minor, Medium, High, Severe (default risk matrix)
`risk_impact_value`	number	0-5 (low to high)
`risk_probability`	string	Unspecified, Rare, Unlikely, Possible, Likely, Almost certain (default risk matrix)
`risk_probability_value`	number	0-5 (low to high)
`risk_residual_severity`	string	Unspecified, LOW, MEDIUM, HIGH, HIGHEST (default risk matrix)
`risk_residual_severity_value`	number	0-4 (low to high)
`risk_residual_impact`	string	Unspecified, Negligible, Minor, Medium, High, Severe (default risk matrix)
`risk_residual_impact_value`	number	0-5 (low to high)
`risk_residual_probability`	string	Unspecified, Rare, Unlikely, Possible, Likely, Almost certain (default risk matrix)
`risk_residual_probability_value`	number	0-5 (low to high)

Important: Please note that that the impact, probability and severity text is fully configurable in each risk register risk matrix.

Examples

JQL	Comments

JQL	Comments
issue.property[boja_prop_issue].created >= -30d	All risks created last 30 days
issue.property[boja_prop_issue].created >= "2023-01-01" AND issue.property[boja_prop_issue].created < "2024-01-01"	All risks created in 2023
issue.property[boja_prop_issue].createdby = "Tom Smith"	All risks created by Tom Smith
issue.property[boja_prop_issue].updated >= -30d	All risks updated last 30 days
issue.property[boja_prop_issue].updatedby = "Linda Davis"	All risks updated by Linda Davis
issue.property[boja_prop_issue].risk_severity is not EMPTY	All Issues with a risk including Unspecified Severity
issue.property[boja_prop_issue].risk_severity = "HIGHEST"	All Issues with HIGHEST Severity
issue.property[boja_prop_issue].risk_severity_value = 4	All Issues with HIGEST Severity using value
issue.property[boja_prop_issue].risk_severity is EMPTY	All Issues not having a risk
issue.property[boja_prop_issue].risk_probability = "Rare"	All Issues with probability Rare
issue.property[boja_prop_issue].risk_probability = "Possible" AND issue.property[boja_prop_issue].risk_impact = "Medium"	All Issues with probability Possible and impact Medium

2. Risk custom fields

The solution also supports risk custom fields as described here. If those fields are assigned to a risk issue screen they are searchable according to below

JQL	Comments

JQL	Comments
"Inherent risk[Short text]" is not Empty AND "Inherent risk[Short text]" !~ None	All issues with residual risk. For issues without severity this field is either missing or is having value ““ or “None“
"Residual risk[Short text]" is not Empty AND "Residual risk[Short text]" !~ None	All issues with residual risk. For issues without severity this field is either missing or is having value ““ or “None“
"Inherent impact[Dropdown]" = Major	Issues with Inherent impact Major
"Residual probability[Dropdown]" = Frequent	Issues with Residual probability Frequent