As a user working the risks section, I would like to be able:
(1) Configure risks (ideal); or
(2) Ensure that generally accepted risk types are included in the status list.
While the risks section contains common risk statuses of Identified, Avoided, Mitigated, and Occurred, including Escalated, Exploited, Accepted, Transferred, and Shared as status would be helpful. Whether we can configure them as users or have them included will be beneficial.