Make Risk Assessment not required to save Change Request

[Cheri M]

Hello!

I feel like I'm asking a lot of questions lately but I'm not familiar with Risk/CAB.

Currently, I have a requirement that the user should be able to save a change request if the state = new without having to fill out the risk assessment questions.   I still want them available, should the user choose to fill it out, but I would like the user to be able to save the change request updates without being forced to fill out the risk assessment if the state is new.   I tried to add the condition on the risk assessment "state is not new" but then it's just not available at all until I request approval.

Thoughts, questions, concerns?

Thanks!

Cheri

[Robert Chrystie]

Hi Cheri,

I think possibly the easiest option, but maybe not the right one, is to update the System Property 'glide.ui.risk_calculate_rule' to UI Action. There is a business rule that runs on the Change request[change_request] table called 'Run Risk Calculation' that looks at this property in it's condition.   However, if you don't want to force a two step process on people, whereby you must first fill out the risk assessment and then use the Execute risk calculation Related link, you could update the condition to include state is not new.

[Cheri M]

Sorry Robert, that won't work. They just had me change it to the BR to auto calculate.   They don't want the UI Action.

If I use the condition "State is not new" you can't fill out the risk assessment if the change is in the new state at all, it's just not available.   Therefore, you can only fill it out if you click on "Request Approval" and the state changes to Assess.   At that time, it's a little late.   Might be the option they go for if I can't find another way.

Thank you for taking the time to look at this!

[Cheri M · Accepted solution]

Any thoughts?

I believe I have achieved this by adding   && current.state!=-5 to the Business Rule Run Risk Calculation where it looks to see if Risk Assessment was taken (line 19).

Still testing lots.

[Gayathri KV]

Hi Cheri,

Are you still using this solution? My requirement matches your solution. But the issue is we have to get the risk answers directly from the requester(who doesn't have license) via portal form. I have to convince the Change manager to assign the risk assessment to the "assign to" person. So that we can stick with OOB.

Like your solution, I have to trigger the assessment when it is in certain phase.

Any thoughts?

Thanks

Vino