Controls Not Removing from Risk After Control Assessment

[SimonL898794821]

Hello,

I am facing an issue when performing a risk assessment in ServiceNow. Specifically, when I reach the Control Assessment phase and remove controls, they are not actually removed from the associated Risk after completing the assessment.

Has anyone else encountered this issue? Is there a specific configuration or process that needs to be followed to ensure that removed controls are properly reflected in the Risk record?

Any guidance or troubleshooting tips would be greatly appreciated!

Thanks in advance.

[ThineshT]

Hi @SimonL898794821 ,

Removing controls at the risk assessment control will not delete it, instead it just removes it from that specific risk assessment instance.

[SimonL898794821]

Thank you for your response!

Does this mean that removing controls during an assessment is equivalent to marking the control assessment as "Not Applicable"?

I believe this may be somewhat misleading, as users might assume they are removing the controls from the risk itself rather than just from the risk assessment.

[ThineshT]

Removing a control during an assessment is equivalent of marking that specific control is not applicable for this assessment.

I believe this may be somewhat misleading, as users might assume they are removing the controls from the risk itself rather than just from the risk assessment.
Thinesh : Thanks for the suggestion, we will definitely explore on how better we can convey it in the UI