GRC: Advanced Risk , what is the possiblility of caluclating the score based on questionarrie

[Nagasai Ram San]

what is the possiblility of caluclating the score based on questionarrie responses instead of out-of-the box manual factors and group factors. Is there a way to include scoring part in questionarrie assessment ?

@Gunjan Kiratkar @Community Alums

[Connor Levien]

Hey @Nagasai Ram San ,

You can configure automated factors to look at a questionnaire instance and to calculate the risk based on the questionnaire assessment. As part of the questionnaire design using survey designer or if the template is manually built you can give each choice in the questionnaire a score and then in the automated factory you can aggregate these scores in a way you see fit to assess the risk.

[PhilOptDigiSol]

Automated factors does however require the enterprise license.

[Community Alums]

Hi @Nagasai Ram San ,

You are using Advanced Risk Management already as i can see from your screenshot.

So, to achieve the possiblility of caluclating the score based on questionarrie responses , you will need to create a RAM (Risk Assessment Methodology) "//make sure it's in the published state// and under RAM can have different assessment types, where you can create factors which is nothing but the questionarries and you can define the calulations based on these factors.

To Create a RAM, follow these steps properly :

1. Navigate to All > Advanced Risk Assessment > Administration > Risk Assessment Methodologies .
2. Select New .
3. On the form, fill in the fields.

   For a description of the field values ​​on the risk assessment methodology form, see Risk Assessment Methodology form .

4. Right-click and save the form.
5. To configure the various assessments, select one of the following options.

   Choice	Related links
   Configure inherent assessment	See Configure an inherent assessment .
   Configure control effectiveness	See Configure a control effectiveness assessment
   Configure residual assessment	See Configure a residual assessment

6. Select Publish .
   Note: After a new assessment is created on the same risk and the assessment is in the Monitor state, the other assessments automatically move to the Completed state. When an assessment instance is in the Monitor state, you can't move the RAM back to the Draft state. A RAM can only be moved back to the Draft state if there are no assessment instances.

• Risk Assessment Methodology form

  Use the Risk Assessment Methodology form in the Advanced Risk application to specify the types of risk assessments and the entities on which the risk assessment is performed.

Now, Let's say you have chosen "Inherent assessment" as your Aseessment type:

1. Navigate to the RAM form that has the inherent risk as an assessment type.
2. In the Assessment Types related list, select Inherent Assessment .
3. On the form, fill in the fields.

   For a description of the field values ​​on the inherent assessment form, see Inherent Assessment form .

4. To add factors, select the Factors related list.
   This related list is available only when Factor responses is selected from the Calculate based on field.
5. Select Edit and add the factors.
6. Select Save .
7. Select the Qualitative Rating Criteria related list and select New .
8. On the form, fill in the fields.

   Qualitative Rating Criteria form

   Field	Description
   Lower rating interval	Range for qualitative risk ratings. For example, for a range of 0–10, you can enter 0 as the lower range. For a range of 11–20, the value can be 11 as the lower range.
   Rating	Severity of the risk. You can enter ratings such as high, medium, or low. For example, assume that the lower rating interval for the Low rating is 0, and that the lower rating interval for the Medium rating is 11. If the risk score is 15, then the rating criterion is Medium because 15 is in the range of 11-20.
   Overridden score	Score that is used when the assessor overrides the risk rating.
   Risk color style	Color code style for the background color on the risk rating value and for the text color on the risk assessment instance.
   Risk appetite scale	Risk appetite scale for the risk rating criteria. The appetite scales must be mapped to the qualitative risk rating criteria in the risk assessment methodology. You can compute the qualitative appetite status that is based on the latest assessment or aggregated rating to provide the qualitative appetite status For example, you can select a risk appetite scale of Hungry for the risk rating of Very High . This field appears only when the risk appetite feature is configured in the advanced risk assessment properties. Important: In a qualitative risk assessment, map the risk appetite scale to the risk rating criteria for the final assessment type. For example, if you have both residual and inherent assessments, map the risk appetite scale to the risk rating criteria in the residual assessment .

   Note: Don't enter negative values ​​in the Qualitative Rating Criteria form.
9. (Optional) If you select the Enable heatmap option, then do the following actions:
   1. Select the Heatmap Colors related list.
   2. In the Risk color style column, specify the risk color style.
10. Select Submit .
11. Select Publish .

[Community Alums]

Hi @Nagasai Ram San ,