How to Manage Software Risks in Jira?

25 Jan 2022
by Marion

Perhaps the question we should ask first is:


A growing number of software product companies in the world are already using Atlassian tools and enjoying the seamless integration between project and document management with easy tracking and monitoring of their work.

More and more companies are ready to abandon standalone tools for product development and start using one tech stack across their organization that all the employees are used to. Including your Quality Management department. Hopefully. 

One of the integral parts of Quality Management for Safety-Critical Products is Risk Management, i.e. making sure that the product you are developing and looking forward to release carries no unacceptable risks when placed in the hands of their users.


SoftComply has developed two risk management apps on Jira: the SoftComply Risk Manager & the SoftComply Risk Manager PLUS.

On Jira Cloud, the SoftComply Risk Manager is your best choice. With the SoftComply Risk Manager app, you are able to customize your risk model/matrix and the risk table to fit your risk management process. There are embedded risk guidance templates that help you get started with FMEA or Hazard Analysis but you can also start building up your own template and use this in your next risk projects. It is easy to pull the risk data with the matrices and the table from Jira to Confluence so that you can build risk reports there for your risk management file – you can use the free Confluence extension for that.

If you are looking for a more complex risk management app for your high risk product and use Jira Server or Data Center, best try out the SoftComply Risk Manager Plus. Risk Manager Plus extends the functionality of the Risk Manager by providing an additional risk parameter to Severity and Probability/Occurrence – that is Detectability. You can choose to calculate risks into risk classes or RPNs (Risk Prioritization Numbers) as needed. In addition to Risk Management Plan and Report, there are also Risk Matrix and Risk Table reports that you can use to export them easily into different formats.

SoftComply Risk Manager apps on Jira Cloud, Jira Server/Data Center and extension on Confluence


The following table illustrates the similarities and differences between the SoftComply Risk Manager vs Risk Manager Plus. Note that all the features have been described in greater detail below the table.



Embedded Risk Management Guidance

Both the Risk Manager and the Risk Manager Plus have embedded risk management guidance within the app which can help you set up your very first risk management project. For example, if you are a medical device developer, you will need to follow ISO 14971 Hazard Analysis as a minimum. You can choose the Hazard Analysis template when you start your first risk project that will provide you the required data fields in your risk project to start with. You can further customize the project configuration and re-use that configuration in your future risk projects.

Embedded Risk Management Guidance for Creating New Risk Projects



Risk Calculation

In the SoftComply Risk Manager you will have 2 risk parameters for your Risk Class calculation – Severity and Probability. You can customize the number of the Severity/Impact and Probability/Occurrence levels in your risk projects as you need.

SoftComply Risk Manager – 2 risk parameters


In the SoftComply Risk Manager PLUS, you can have 3 risk parametersSeverity/Impact, Probability/Occurrence and Detectability. With these 3 parameters you can easily manage a more complex product FMEA.

SoftComply Risk Manager PLUS – 3 risk parameters


Risk Visualization

Risk Class calculation – both SoftComply Risk Manager apps support Risk Class calculation and visualization of them in Risk Matrices – the Initial and Residual Risk Matrices.

Risk Visualization in Initial and Residual Risk Matrices

Risk Prioritization Numbers – in the SoftComply Risk Manager Plus you can choose to calculate risks also in RPNs and visualize them in Risk Levels in addition to the Risk Matrices. RPNs are often used in FMEAs, particularly in FMEAs with Detectability parameter.

Risk Visualization in Risk Prioritization Numbers and Risk Levels



Integrated Risk Reports

Both SoftComply Risk Manager apps have integrated risk reports based on the requirements of ISO 14971. The Risk Management Plan pulls in your Risk Matrices configuration and the Risk Management Report pulls in the Initial and Residual Risk Matrices with the risk counts. You can export both of these reports to Word to add additional information about your product there.

Integrated Risk Reports in Jira


Risk Reports in Confluence Cloud

The SoftComply Risk Manager Cloud has a free extension in Confluence that supports adding Risk Matrices and Risk Table to your Confluence pages. Using this extension will help build risk reports in real time with the data you want to visualize for risk approvals or just risk tracking.

Risk Reports in Confluence Cloud: Risk Table Report macro in Confluence
Risk Reports in Confluence Cloud: Risk Matrix Report macro in Confluence


Risk Reports in Jira Server/Data Center

In the SoftComply Risk Manager Server/Data Center and in the Risk Manager Plus, there are additional reports called the Risk Matrix and the Risk Table Reports. These reports pull your chosen risks either into a risk matrix or risk table view and supports exporting to various formats from there.

Risk Table Report in Jira Server and Data Center


Risk Matrix Report in Jira Server and Data Center


Risk Matrix Dashboard Item in Jira Cloud

Dashboard items provide a fantastic visualization of your data in Jira. In the SoftComply Risk Manager Cloud, you can build your risk matrices dashboard item with the information about the risk project and the specific risks you want to display. Risk Matrix dashboard item provides a great visual overview of how the risk class of each risk has changed over time.

Risk Matrix Dashboard Item in Jira Cloud


Risk Matrix and Risk Table Dashboard Items in Jira Server/Data Center

In Jira Server and Data Center, you can build your risk dashboard items to visualize your risk data from the risk project of your choice in a Risk Table and/or a Risk Matrix format. You can choose the risks from the chosen risk project that you want to display in the risk table dashboard item. You can also customize the risk matrix dashboard item to display either initial or residual or both matrices together to see how risk class of each risk has changed after mitigation.

Risk Table dashboard item


Risk Matrix dashboard item



When you are using Jira Cloud, you will be able to trial the SoftComply Risk Manager for free for up to 30 days.

When you are on Jira Server or Data Center, you can trial the SoftComply Risk Manager or the Risk Manager Plus for free for up to 6 months.

In case you would like to get an introduction of the apps before the trial, we’d be happy to walk you through the features of the apps at a time that works for you. Feel free to book a time for a demo in our Risk Manager calendar – Demo of the SoftComply Risk Manager app on Jira – SoftComply

Try us out on

SoftComply apps are available on Atlassian Marketplace – you can try them all out for free!