Change of Residual Risk Score in Risk Assessment Methodology based on Risk Events or Control Testing or Mitigation Plan

User480943
Tera Contributor

Hi Community,

Currently Residual Risk Assessment  Score changes through Risk Assessment Methodology (RAM ) either as calculated or we can do Override .

a. Is there any possibility to change the Residual Risk Scoring based on the impact of a Risk Event and when the Risk Event is closed, without Re-assing the Risk through RCSA (RAM) ? Currently I dont see this option in out of the box , and I want to understand what others have done in this scenario to change the Residual Risk Rating or Risk Profile ?

b. Same Goes with Remediation /Action Plan . Currently the Residual Risk Score is Very High and based on the Action Plan or Mitigation Plan Is there any way the Residual Risk Score becomes Low after the Action Plan is closed ? I see out of the Box there is no option to change the Residual Score of the RCSA automatically after the Action plan is closed ? Again what others might have done to solve this challange ?

c. We have Control Testing performed in a different Assessment Questionnaire  and based on control Testing Results , the Score of Residual Score will change again . Does it have any impacty to change the Score of Residual Risk based on Control Testing Score Result ? 

Regards,

SB