Risks can be used to actively manage any risks on your organisation, programmes, projects, sub-projects or change requests.
Each risk has its own workflow. When you add the risk you can select the Standard Risk Workflow, or you add a new workflow specific to your organisation.