Summary of risk library customizable template

Caseware provides a default risk library. You can download a template to add, edit or suppress risks and procedures from the default library. Once uploaded to the Risk Library section, your customized version sits on top of the default library, which remains available in the background.

The template provides in-field guidance as:

  • red indicators in cells () - provide tips when hovered over to help you complete each section.

  • red asterisks (*) – mark cells that require input to customize that worksheet in your library.

General template rules

  • Use consistent alphanumeric IDs for new risks and procedures.

  • Only populate rows you intend to import — delete or clear test rows.

  • Export the latest version of the risk library before starting edits to ensure your changes are based on the most recent content.

  • Do not rename or alter sheets/columns

  • Avoid duplicating entries or creating conflicting actions (e.g., suppressing and creating the same risk number)

  • You cannot delete primary authored content. Suppression is permanent but non-destructive.

Worksheet: New Risks

When to use: If your network faces unique risks not covered in the default risk library.

Column Instruction
Number Create a unique, alphanumeric ID for the new risk (e.g., ENT-R001, RISK1001) that does not conflict with an existing risk number.
Title Create a short name for the risk.
Description Explain the risk’s nature and potential impact.
Is significant risk Enter Y (Yes) or N (No).
Is fraud risk Enter Y (Yes) or N (No).
Is entity level Enter Y (Yes) or N (No).
Direction Enter one of the following: one, under or misstatement.
Order Enter one of the following: bottom, middle or top.
Risk Group Enter a Number ID from the Risk Group sheet in the default risk library.
Areas *Enter Number (for internal usage) IDs from the Areas section in your Product Settings. Separate multiple IDs with a comma.
Cycles *Enter Number (for internal usage) IDs from Cycles section in your Product Settings. Separate multiple IDs with a comma.
Components *Enter IDs from Components section in your Product Settings. Separate multiple IDs with a comma.
Financial Categories Enter Number IDs from the Financial Categories sheet in the default risk library. Separate multiple IDs with a comma.
Procedures Enter Number IDs from the Procedures sheet in the default risk library. Separate multiple IDs with a comma.
Control Objectives Enter Number IDs from the Control Objectives sheet in the default risk library. Separate multiple IDs with a comma.
Linked Risks Enter Number IDs from the Linked Risks sheet in the default risk library. Separate multiple IDs with a comma.
Custom Properties Delimit key-value pairs by colons (:) and separate multiple pairs with commas (,). Example: foo:bar, key:value.
Priority Enter a number that is equal to or greater than 0 to be used as a primary sorting key.

*To learn more about how to enter Areas, Cycles and Components to your customized risk library, refer to: To enter Areas, Cycles or Components into your customized library.

Worksheet: Customized Risks

When to use: If you need to update the title, description, or attributes (such as significance or fraud risk) of a risk to better reflect your network’s environment.

Column Description
Number Enter the risk number from the default risk library that you want to customize. This must match an existing ID exactly.
Title Enter a new title for the risk. Leave blank to retain the original.
Description Enter a new description for the risk. Leave blank to retain the original.
Procedures Enter Number IDs from the Procedures sheet in the default risk library. Separate multiple IDs with a comma.
Priority Enter a number that is equal or greater than 0 to be used as a primary sorting key. Your priority risks appear before priority risks from the default risk library. These risks receive a special visual indicator.

 

Worksheet: Suppressed Risks

When to use: If certain risks in the default risk library are not relevant to your network or should not be shown to engagement teams.

Column Description
Number Enter the risk number from the default risk library that you want to customize. This must match an existing ID exactly.

 

Worksheet: New Procedures

When to use: If your network has unique procedures not covered in the default risk library.

Column Description
Number Create a unique, alphanumeric ID for the new procedure (e.g., ENT-P001). Must not conflict with existing procedure numbers.
Title Create a short name for the procedure.
Text Explain the procedure's nature and potential impact.
Guidance Explain the procedure process.
Parent procedure Enter the unique procedure ID from this worksheet that governs this procedure, if applicable.

 

Worksheet: Customized Procedures

When to use: If you want to update or remove procedures linked to a risk to match your network’s audit approach.

Column Description
Number Enter the procedure number from the default library that you want to customize. Must match an existing ID exactly.
Title Enter a new title for the procedure. Leave blank to retain the original.
Text Update the procedure text. Leave blank to retain the original.