Change Risk Assessment - use Value from field to autocalculate (Business Crititcallity Service)

[KThiere]

Hey community,

I have the requirement that one of the clients change risk assessment metrics for normal changes should be autopopulate from field and not to be shown as a question in the change risk assessment. It is about the business criticality of the the service table that is selected in the configuration item in the change form. (Table cmdb_ci_service, vaule field busines_criticality)

Definition is
Service with Business Criticality for 4 – not critical --> should get the value 0
for 3 – less critical the value should be 2,
for 2 – somewhat critical the value should be 5, and for

1 – most critical the value should be 10

I guess i need to create a BS for that, but i have no idea how to define the relevant metric (asmt_metric)
Or is it possible to script this in the metric?
I tried around, but I have not found the best way to configure the metric, also no best practice for the use case.

I am still kind of new as an implementor, Thanks alot for your help

[Dr Atul G- LNG]

Hi @KThiere 

Greetings!!

OOTB, SN provide risk conditions which has been used for Risk calculation. In OOTB Risk condition one condition which fit in your area.

You can refer my video, to get more clarity about Risk calculations

https://youtu.be/0gdkXuN9KFc

[Community Alums]

Hi @KThiere ,

I think you can create these and put relevant conditions and put scripts as well.

navigate to YOURINSTANCE.service-now.com/risk_conditions_list.do

Here is an example that might help you. Put your relevant condition and script values as per your need.

if (serv.busines_criticality == "1 - most critical") {
    current.impact = 1;
    current.risk = 2;
}
if (serv.busines_criticality == "2 - somewhat critical") {
    current.impact = 2;
    current.risk = 3;
}

If my response has resolved your query, please consider giving it a thumbs up ‌‌ and marking it as the correct answer‌‌!

Thanks & Regards,

Sanjay Kumar

[KThiere]

Thank you both @Community Alums and @Dr Atul G- LNG for the quick reply.
I've already gone that far with the risk calculation, but I don't think it will help in this case. The business criticality value of services is part of a defined risk assessment (see screenshot) and defined with defined values and the all over thresholds and I don't think I can combine risk calculation and risk assessment in a meaningful way. Does anyone have an idea how to implement this via the risk assessment?