Output Fields

The Capable Risk plugin creates several read-only fields in Jira that are automatically updated based on the risk assessment data. These fields provide a standardized way to track and share risk information for external consumption.

These fields are ideal for integration with:

• Jira workflow rules and transitions
• JQL queries and filters
• External plugins (e.g., Jira snapshots for Confluence)
• Automated reporting and dashboards

Output Fields

Requires Mitigation

Indicates whether the risk requires mitigation measures.

• Field Name: Requires Mitigation
• Possible Values:
  • Yes
  • No

Has Mitigation

Indicates if there is at least 1 issue linked with "is mitigated by" to the current issue.

• Field Name: Requires Mitigation
• Possible Values:
  • Yes
  • No

Risk Type

Indicates which risk assessment model is being used.

• Field Name: Risk Type
• Possible Values:
  • Risk Matrix
  • CVSS

Initial Risk Rating

The initial risk rating before any mitigations are applied.

• Field Name: Initial Risk
• Possible Values:
  • For Risk Matrix: Acceptable, Needs Control, Unacceptable
  • For CVSS: Numeric score from 0.0 to 10.0

Residual Risk Rating

The risk rating after mitigations are applied.

• Field Name: Residual Risk
• Possible Values:
  • For Risk Matrix: Acceptable, Needs Control, Unacceptable
  • For CVSS: Not applicable, will always be "N/A"

Field Updates

These fields are automatically updated whenever:

1. The risk assessment data changes in the main field
2. The risk type changes
3. Risk ratings are recalculated

The plugin uses Jira’s API to ensure all fields remain synchronized with the current risk assessment state.