Every action owned. Every step visible.
Risk treatment, finding remediation, vendor follow-ups, firewall fixes and evidence work all become tasks, with sub-tasks, a timeline and progress that rolls up to the risk.
| Task | Action | Due | Status |
|---|---|---|---|
| T-221 | Enable MFA for vendor portal | Oct 18 | In progress |
| T-219 | Remove 14 dormant accounts | Oct 21 | Open |
| T-214 | Rotate service-account secrets | Oct 30 | Open |
| T-210 | Update BCP call tree | Nov 04 | Approval |
| T-207 | Patch EOL database server | Nov 12 | Open |
Illustration with sample data
What Tasks, Sub-tasks & Timeline does
Tasks are the one execution layer for every module. Each task records the record it came from. Owners can split work into sub-tasks with their own assignees, status, evidence and comments, and a sub-task assignee gets no rights over the parent. One task can be linked to several risks and findings and counts toward each, so shared work is done once.
The timeline shows each task from raised date to target date, with progress fill, overrun hatching and grouping by risk and finding. @mentions email colleagues, and assignment emails include buttons that open the task after sign-in. Nothing closes automatically. When every sub-task is done, the owner sees a ready-for-closure banner and completes the parent. Progress rolls up into each finding's and risk's closure percentage.
Key capabilities
One task layer
Risk, finding, third-party, firewall, intelligence, evidence, control and manual tasks.
Sub-tasks
One level of sub-tasks with numbered codes, assignees, evidence and comments.
Timeline view
Bars, progress, overrun hatching, grouping and zoom by weeks, months or quarters.
Shared work
Link one task to several risks and findings; it counts once for each.
@mentions & notifications
Comment mentions, assignment emails and in-app notices.
Roll-up closure
Sub-task → task → finding → risk progress, calculated automatically.
The business case.
Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Tasks, Sub-tasks & Timeline changes for your programme.
For every GRC action
Owners stop hunting across email and spreadsheets for what they need to do.
Less status chasing
Live progress, reminders and roll-ups replace status meetings and update emails.
Decisions recorded
Every change, comment and completion is in the task's history.
Shared tasks
Work that fixes several risks is tracked once.
Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.
From setup to outcome.
Create
Tasks are created from plans, findings and modules, or directly.
Split
Owners add sub-tasks and assign them.
Progress
Assignees update status, evidence and comments.
Close
The owner completes the task; progress rolls up.
Supports your obligations.
Tasks, Sub-tasks & Timeline contributes evidence and coverage to these frameworks and regulations.
Common questions.
Can a task belong to more than one risk?
Yes. A task keeps its own source and can be linked to several risks and findings, counting toward each of them.
Does completing all sub-tasks close the parent?
No. The owner sees a ready-for-closure banner and completes the parent task themselves.
How are people notified?
Assignment emails and in-app notices, @mentions in comments, and reminders and escalations for due dates.
Works better together.
Action Center & Email Approvals
Focus brings every approval, plan, task, evidence request and due date from every module into one list, ordered by urgency. Act inline, or straight from an email after…
Learn more →Risk ManagementFindings Management
Track every gap raised by audits, assessments, scans, control tests and connected systems. Give each one owners and an approved remediation plan, and let AI turn…
Learn more →Risk ManagementRisk Treatment Workflows & Approvals
Choose how a risk becomes Active, such as the Risk Team defining the plan or the Action Owner defining it for Risk Owner and CISO approval. Every plan is versioned,…
Learn more →See Tasks, Sub-tasks & Timeline in action.
Book a 30-minute walkthrough tailored to your frameworks, vendors and team.