# Treatment Plans for Risk Analyses — Changelog
[ 
Changelog
](/changelog) August 26, 2026 [ Risk Management ](/changelog?tag=Risk%20Management) 
# Treatment Plans for Risk Analyses

Risk analyses now hold a dedicated treatment plan for each risk with its own score, treatment choice, and owner, and linked measures move it from inherent toward residual automatically. 

Until now, treatment lived loosely attached to a risk, and reusing it across a new period meant copying values by hand. Now each treatment plan is tied to one risk and one analysis. The risk still needs a spot on the scenario map, but once it’s there you can set a score, pick a treatment, and assign an owner directly on the plan.

[Linked measures](/docs/product/compliance-program) do the rest. As they get implemented, the plan’s risk level moves from inherent toward residual on its own, except for risks marked Accepted, which stay at inherent since there’s nothing left to mitigate.

[Risk analysis pages](/docs/product/risk-management) also split the heatmap from the plan table, so you’re not scrolling through diagrams to find open action items.
