Summary of risk library customizable template
Caseware provides a default risk library. You can download a template to add, edit or suppress risks and procedures from the default library. Once uploaded to the Risk Library section, your customized version sits on top of the default library, which remains available in the background.
The template provides in-field guidance as:
-
red indicators in cells (
) - provide tips when hovered over to help you complete each section. -
red asterisks (*) – mark cells that require input to customize that worksheet in your library.
General template rules
-
Use consistent alphanumeric IDs for new risks and procedures.
-
Only populate rows you intend to import — delete or clear test rows.
-
Export the latest version of the risk library before starting edits to ensure your changes are based on the most recent content.
-
Do not rename or alter sheets/columns
-
Avoid duplicating entries or creating conflicting actions (e.g., suppressing and creating the same risk number)
-
You cannot delete primary authored content. Suppression is permanent but non-destructive.
Worksheet: New Risks
When to use: If your network faces unique risks not covered in the default risk library.
| Column | Instruction |
|---|---|
| Number | Create a unique, alphanumeric ID for the new risk (e.g., ENT-R001, RISK1001) that does not conflict with an existing risk number. |
| Title | Create a short name for the risk. |
| Description | Explain the risk’s nature and potential impact. |
| Is significant risk | Enter Y (Yes) or N (No). |
| Is fraud risk | Enter Y (Yes) or N (No). |
| Is entity level | Enter Y (Yes) or N (No). |
| Direction | Enter one of the following: one, under or misstatement. |
| Order | Enter one of the following: bottom, middle or top. |
| Risk Group | Enter a Number ID from the Risk Group sheet in the default risk library. |
| Areas | *Enter Number (for internal usage) IDs from the Areas section in your Product Settings. Separate multiple IDs with a comma. |
| Cycles | *Enter Number (for internal usage) IDs from Cycles section in your Product Settings. Separate multiple IDs with a comma. |
| Components | *Enter IDs from Components section in your Product Settings. Separate multiple IDs with a comma. |
| Financial Categories | Enter Number IDs from the Financial Categories sheet in the default risk library. Separate multiple IDs with a comma. |
| Procedures | Enter Number IDs from the Procedures sheet in the default risk library. Separate multiple IDs with a comma. |
| Control Objectives | Enter Number IDs from the Control Objectives sheet in the default risk library. Separate multiple IDs with a comma. |
| Linked Risks | Enter Number IDs from the Linked Risks sheet in the default risk library. Separate multiple IDs with a comma. |
| Custom Properties | Delimit key-value pairs by colons (:) and separate multiple pairs with commas (,). Example: foo:bar, key:value. |
| Priority | Enter a number that is equal to or greater than 0 to be used as a primary sorting key. |
*To learn more about how to enter Areas, Cycles and Components to your customized risk library, refer to: To enter Areas, Cycles or Components into your customized library.
Worksheet: Customized Risks
When to use: If you need to update the title, description, or attributes (such as significance or fraud risk) of a risk to better reflect your network’s environment.
| Column | Description |
|---|---|
| Number | Enter the risk number from the default risk library that you want to customize. This must match an existing ID exactly. |
| Title | Enter a new title for the risk. Leave blank to retain the original. |
| Description | Enter a new description for the risk. Leave blank to retain the original. |
| Procedures | Enter Number IDs from the Procedures sheet in the default risk library. Separate multiple IDs with a comma. |
| Priority | Enter a number that is equal or greater than 0 to be used as a primary sorting key. Your priority risks appear before priority risks from the default risk library. These risks receive a special visual indicator. |
Worksheet: Suppressed Risks
When to use: If certain risks in the default risk library are not relevant to your network or should not be shown to engagement teams.
| Column | Description |
|---|---|
| Number | Enter the risk number from the default risk library that you want to customize. This must match an existing ID exactly. |
Worksheet: New Procedures
When to use: If your network has unique procedures not covered in the default risk library.
| Column | Description |
|---|---|
| Number | Create a unique, alphanumeric ID for the new procedure (e.g., ENT-P001). Must not conflict with existing procedure numbers. |
| Title | Create a short name for the procedure. |
| Text | Explain the procedure's nature and potential impact. |
| Guidance | Explain the procedure process. |
| Parent procedure | Enter the unique procedure ID from this worksheet that governs this procedure, if applicable. |
Worksheet: Customized Procedures
When to use: If you want to update or remove procedures linked to a risk to match your network’s audit approach.
| Column | Description |
|---|---|
| Number | Enter the procedure number from the default library that you want to customize. Must match an existing ID exactly. |
| Title | Enter a new title for the procedure. Leave blank to retain the original. |
| Text | Update the procedure text. Leave blank to retain the original. |
