Need some help to understand how Risk is calculated for a Change request

[VIVEK GARG]

Hi,

We have defined Risk conditions and risk assessment questions to calculate Risk for a change.

For 1 change, Risk Assessment is set to Low and Risk conditional rules value is set to High but final risk set for change request is low. Our assumption was in this case, risk for a change should be High as it should be a higher of Risk Assessment and Risk Conditional Rule value.

Need to know how Servicenow calculated this to be Low, and where do we set these values that what should happen when one rule says high and one rule says low.

Please help to clarify.

[AnubhavRitolia]

Hi Vivek,

Please refer below link:

https://docs.servicenow.com/bundle/quebec-it-service-management/page/product/change-management/conce...

Please mark this as correct answer and helpful if it resolved, or mark this helpful if this help you to reach towards solution.

[Community Alums · Accepted solution]

Hi @VIVEK GARG ,

Out of the box there are Risk Conditions defined. It uses this conditions, like lead time, business service critically, etc to calculate risk:

The second way is to load the plugin Change Management - Risk Assessment which uses a series of questions and values to the answers to calculate risk:Define risk assessments

Learn more from here : Risk conditions and calculation

Mark my answer correct & Helpful, if Applicable.

Thanks,

Sandeep

[VIVEK GARG]

Hi,

My questions is actually specific to below screen shot, I understand that from Risk Conditions and Risk assessment below values are set.

Problem is if one of these 2 (risk conditional rule and risk assessment) is high, shouldn't the risk must be calculated as High.

Here it says 'based on calculation, risk has been set to Low', whereas becuase one parameter is high, risk must be calculated as High.

Why it is giving more weightage to Risk Assessment to calculate Risk as low but not to Risk conditional rules which is High to set final risk value for change as High.

[Yousaf]

Hi Vivek,
I think this is calculated based on only these too impact also plays the role in setting the risk. I am not sure but check these tables specially the one highlighted

Mark Correct and helpful if it helps.