Using Zoho Desk to support ISMS process

Using Zoho Desk to support ISMS process

Hi,
I am evaluating using Zoho Desk for security incident management. This seems to be aligned with Zoho Desk purpose as its just another type of incident. However in security incident management, ideally I can link incidents (tickets) with a risk from a risk register. 

The question I have is how could I build a risk register in Zoho Desk, so that I use lookup more effectively. 
Currently I have the risk register in a Sharepoint list, so I can consider to lookup from Zoho Desk ticket into that SPO list, but I dont know if this is possible.

Thoughts?