Skip to main content

Overview

PropertyValue
Type IDriskControl
Sort Order6
DomainRisk Analysis (Risks space)
Managed InRisk Control Plan risksheet document
ISO StandardISO 14971 — Risk Control Measures
Risk controls are created and managed exclusively through the Risk Control Plan risksheet document. Each control is classified using the ISO 14971 three-tier hierarchy and linked to the risk records or failure modes it mitigates.

Custom Fields

Risk control work items have a single custom field that classifies the type of risk reduction measure:
Field IDDisplay NameTypeEnumMulti-valued
riskControlTypeRiskControlTypeenumriskControlTypeYes

riskControlType Values

The field supports multiple selections, allowing a single control to span more than one tier. Per ISO 14971, controls should be applied in priority order:
PriorityEnum IDDisplay NameDescription
1 (highest)InherentSafetyDesignInherent Safety by DesignEliminate the hazard entirely through design choices
2ProtectiveMeasureProtective MeasurePhysical barriers, guards, interlocks, or automatic shutoffs
3 (lowest)InformationForSafetyInformation for SafetyLabels, warnings, instructions for use, training
diagram

Standard Fields

In addition to the custom riskControlType field, risk control work items use these standard Polarion fields:
FieldTypeDescription
titleStringName of the risk control measure
descriptionRich textDetailed description of the control implementation
statusEnum (status)Lifecycle state: Draft, In Review, Pending Approval, Approved, Rejected, Obsolete
severityEnum (severity)General severity classification (Blocker through Trivial)
priorityEnum (priority)Priority level (Highest through Lowest)

Risk control work items participate in three link roles:
Link RoleDirectionConnected TypePurpose
mitigatesForwardriskRecord, failureModeIdentifies which risk records and failure modes this control addresses
implementsReverse (from sysReq, desReq)sysReq, desReqTracks which requirements implement this control
implementsReverse (from task)taskTracks which tasks implement this control
diagram

Risksheet Behavior

Risk controls appear in two risksheet contexts:

Risk Control Plan Document

The dedicated Risk Control Plan risksheet has a flat, single-level layout with three columns:
ColumnBindingDescription
Risk ControltitleName of the control measure
Risk Control TyperiskControlTypeISO 14971 control tier classification
Risk Recordsmitigates (multiItemLink)Linked risk records this control addresses

HARA and DFMEA Documents

In HARA and DFMEA risksheets, risk controls appear as task link columns. The HARA sheet references controls from the Risks/RiskControlPlan document via the mitigates link role, showing the control ID, title, and type alongside each risk record.
Risk control work items are created and edited only in the Risk Control Plan risksheet document. HARA and DFMEA sheets reference them via task link columns but do not create new control records.

ISO 14971 Context

Per ISO 14971:2019, the manufacturer shall implement risk control measures in the following order of priority:
  1. Inherent safety by design — Eliminate or reduce the hazard by changing the design
  2. Protective measures — Add physical safeguards (guards, interlocks, automatic shutoffs)
  3. Information for safety — Provide warnings, labels, instructions for use, or training
The multi='true' attribute on the riskControlType field allows a single control to be tagged with multiple tiers simultaneously, though ISO 14971 typically treats these as a priority hierarchy.