Hi @ShirishGajbhiye ,
RAM are based on Entity not Risk Statements!!
While creating RAMs , you define the Entity Class as well :
For that you will have to Scope the Entity for which you need to assess the risk , Risk statements doesn't comes into the picture.
So You can initiate assessments after you create the scope. This process provides visibility and accurate reporting for the management team.
- Navigate to .
- On form, fill in the fields.
- Right-click and save the form.
- (Optional) To view a summary of assessments, click the Summary section.
The Summary section has the following fields. These fields are populated only when you add risks to the assessment scope and when you initiate assessments:
- No. of risk assessments closed
- No. of risks not assessed
- No. of ongoing risk assessments
- Right-click to save the form.
- If you want to add existing risks, then do the following:
- In the Risks related list, click Add to add existing risks.
- From the Choose Risks window, select the risks that you want to add.
- Click Add Risks.
- To select control objectives that do not have a control for the entity, click Create from library.
- From the Choose Risk Statements window, select what risk statements to apply and click Create From Library.
- Click Initiate Assessments either for all the risk records or for the selected risk records.
Ensure that the selected records are in either the Draft or Closed state.
- To add new risks, click New, fill in the details, and click Submit.
The newly added risks appear in the Risks related list.
- To apply the new settings, click Settings.
- On the form, fill in the fields.
- To save the form, click Submit.
- To generate the assessments, click Initiate all assessments.
When you generate an assessment, the assessor receives an email notification stating that the assessment is assigned to the assessor or to the assessor's group.
