Risk domains configuration

To let organisations express risk in their own terms, risk domains will become configurable per domain rather than fixed by the platform. Today every domain uses the same four level names and the same four colours, drawn from the platform instead of the customer's own risk taxonomy. In addition, the lowest score an answer can carry is 1, so no answer can take a domain out of scope and suppliers end up scored on domains that do not apply to them.

Key Enhancements

• per-domain level naming: Low, Medium, High and Critical can be renamed to an organisation's own terminology, independently for each risk domain.

• configurable colours: each level's colour is set from a colour picker and applied wherever that domain's score appears, including PDF reports and exports.

• translatable names: level names are held per language, so each language carries its own wording, with uniqueness checked per language within a domain.

• independent domains: two domains can label the same level differently, and editing one never affects another. Existing domains keep current names and colours until edited, and nothing is applied until saved.

• calculation safety: renaming or recolouring a level never alters a score or a risk calculation.

• expanded answer scoring: answer scores become a searchable list running from Not applicable through 0 to 100, replacing a free number field with a minimum of 1.

• zero scoring: an answer scored 0 keeps its question in the calculation and contributes nothing to the total.

• not applicable scoping: an answer marked Not applicable removes its question from the calculation entirely, so a single answer, such as confirming a supplier processes no personal data, can take a whole domain out of scope for that supplier.

• clear empty state: a domain with nothing left to score shows greyed out in the catalogue rather than as a low score.

• unchanged for assessors: answers are still chosen by their wording, with changes confined to configuration.

This update will let each customer align risk domains with their own taxonomy and language, and stop suppliers being scored against domains that do not apply to them.