The main complaint I receive from the organisation is the lack of information included in the risk mitigation sign off notifications. When clicking on the notification link, the user only sees the mitigation text - without any context.
In the notification link I suggest to include:
- risk title and description
- mitigation
- involvement
Maybe just point to the relevant dashboard row.