Jira JQL Risk Search
Risk assessment are attached to Jira issues as meta data in something called Jira entity property. This enables all risk issues to be JQL searchable either through risk custom fields or via the entity property.
1. JQL risk issue custom fields
The solution creates Jira issue risk custom fields at installation. Risk assessment are then written to those custom fields and are JQL searchable. Please see below some examples and find more information on the risk custom fields (here)
JQL | Comments |
|---|---|
"Inherent risk" is not Empty | All issues with risk assessment including Unspecified |
"Inherent risk" = HIGHEST | All issues with inherent severity HIGHEST |
"Inherent impact" = MEDIUM | All issues with inherent impact MEDIUM |
"Inherent probability" = Unspecified | All issues with inherent probability Unspecified |
"Residual risk" = highest and "Residual probability" = probable | Residual risk severity highest with probability probable |
2. JQL risk issue entity property
Risk assessment are saved in the Jira issue in something called Jira entity property. Entity property is issue meta data and see below an example JQL picture, entity property data structure and how it is searchable with Jira JQL expressions.
{
"created": "2023-01-01"
"createdby": "Tom Smith",
"updated": "2023-03-04",
"updatedby": "Linda Davis",
"risk_severity": "HIGHEST", //inherent risk
"risk_severity_value": 4,
"risk_impact": "Severe",
"risk_impact_value": 5,
"risk_probability": "Almost certain",
"risk_probability_value": 5,
"risk_residual_severity": "LOW" //residual risk
"risk_residual_severity_value": 1
"risk_residual_impact": "Minor",
"risk_residual_impact_value": 2,
"risk_residual_probability": "Rare"
"risk_residual_probability_value": 1,
}Risk Property | Type | Value |
|---|---|---|
| date | Risk created date. If a risk is assigned to an existing Jira issue the created date is the assign date and not the issue created date |
| string | The name of the person creating a risk or assigning a risk to an existing Jira issue |
| date | Risk update date |
| string | The name of the person last updating the risk |
| string | Unspecified, LOW, MEDIUM, HIGH, HIGHEST (default risk matrix) |
| number | 0-4 (low to high) |
| string | Unspecified, Negligible, Minor, Medium, High, Severe (default risk matrix) |
| number | 0-5 (low to high) |
| string | Unspecified, Rare, Unlikely, Possible, Likely, Almost certain (default risk matrix) |
| number | 0-5 (low to high) |
| string | Unspecified, LOW, MEDIUM, HIGH, HIGHEST (default risk matrix) |
| number | 0-4 (low to high) |
| string | Unspecified, Negligible, Minor, Medium, High, Severe (default risk matrix) |
| number | 0-5 (low to high) |
| string | Unspecified, Rare, Unlikely, Possible, Likely, Almost certain (default risk matrix) |
| number | 0-5 (low to high) |
Important: Please note that that the impact, probability and severity text is fully configurable in each risk register risk matrix.
Examples
JQL | Comments |
|---|---|
issue.property[boja_prop_issue].created >= -30d | All risks created last 30 days |
issue.property[boja_prop_issue].created >= "2023-01-01" AND issue.property[boja_prop_issue].created < "2024-01-01" | All risks created in 2023 |
issue.property[boja_prop_issue].createdby = "Tom Smith" | All risks created by Tom Smith |
issue.property[boja_prop_issue].updated >= -30d | All risks updated last 30 days |
issue.property[boja_prop_issue].updatedby = "Linda Davis" | All risks updated by Linda Davis |
risk_severity is not EMPTY | All Issues with a risk including Unspecified Severity |
risk_severity = "HIGHEST" | All Issues with HIGHEST Severity |
risk_severity_value = 4 | All Issues with HIGEST Severity using value |
risk_severity is EMPTY | All Issues not having a risk |
risk_probability = "Rare" | All Issues with probability Rare |
risk_probability = "Possible" AND risk_impact = "Medium"
| All Issues with probability Possible and impact Medium |