Advanced Risk - a How To article on Object-based Assessments

[Jan Spurlin]

The Advanced Risk application has a number of features that make risk management super powerful. One of the features is the ability to assess an object versus a risk. To some this comment may not be meaningful, so allow me to explain.

In our original Risk Management application, if a customer wanted to assess a risk to their organization; then the risk would need to be related to an Entity and represented in the risk table (sn_risk_risk). That assessment also does not have a direct impact on the risk score on the risk. The information on the assessment can be used to evaluate the risk, but there is no automation.

This is where the assessment features in the Advanced Risk application entered the picture. The assessment function in Advanced Risk is more powerful than the original process. Here are some of the features/benefits:

• The Assessment process has a dedicated engine and is more flexible.
• Risks can be assessed qualitatively or quantitatively.
• A risk that is not scoped with an Entity can be assessed. It does not have to be in the risk table.

There are many more benefits, this is just a sampling. This article focuses on setting up your ServiceNow instance to allow a customer to assess risks that are not in a risk table.

Any record in any table in ServiceNow can be assessed as a risk. For example, a department, a citation, an application or a location. Since anything can be set up to be assessed, there are some manual steps that need to be taken related to the table that holds the records that will be assessed. 

In the baseline ServiceNow has created an example. They have set up the ability to assess a citation using a UI Action button. There is also a Risk Assessment Methodology for the citation object that is launched when the button is clicked.

But how can you set this up for other tables?  The attached document has been provided by Product Development to help with those efforts.  This document is in the HI KB, but since there are some that don't have access to HI we wanted to provide it in the Community. There is a link in the document to the HI KB article.

This article covers:

• Set up of ad-hoc risk assessment (from a UI Action button)
• Event Driven assessments - two APIs
• Implementing Event Driven option with Flow Designer
• Implementing Event Drive option with Business Rule

I will try and update this attachment when updates are made in HI - but I can't promise! So, if anyone sees an update, please let me know.

Thanks and I hope that this helps those who are digging into the Advanced Risk Assessment features to build some amazing things.

Jan Spurlin

Principal Technical Trainer