How to change the Inherent Risk Score calculation in Advanced Risk Assessment?

[Shweta Kharb]

Hi Team,

We are trying to use a custom scoring logic to calculate the Inherent Risk in Advanced Risk Assessment Instance. We understand it gets calculated from Impact & Likelihood factors. But tried to find out the relevant business rule but failed to do so.

We appreciate any help around where and how can we use our score instead of calculated inherent score coming from Factors.

Thanks

[UTKARSH JAIN · Accepted solution]

Hi Shweta,

1. To launch Assessment based on UI Action "Assess Risk" do we need to script and create assessment instance? If yes, then how will select which RAM to pick as there can be multiple on one object or table?

Once a RAM is defined on the table on which you wish to perform an assessment, the system automatically creates the relationship. Therefore, for any object assessment you can only have 1 active RAM on that table. To initiate assessment you need to create UI action on that object and call the code in the document

The RAM is automatically selected based on the object 

2. I am not able to find Risk Assessment related list in Entity Type table.

[Utkarsh] Since you may assess anything using this framework we do not preship any related list. However, you can establish that relationship very easily. Attaching a document which has some help towards that topic

3. We do not need to create scope like we used to do previously to assess Entities?

[Utkarsh] No you do not need to create scope for any object. You may directly assess the record in Any Object Assessment

Regards,

Utkarsh

[Shweta Kharb]

There can not be a better detailed explanation than this.

Thanks a ton Utkarsh:)

[Shweta Kharb]

Hey Utkarsh,

As per your guidance, I am able to configure an Object level assessment. But still not able to configure Automated factors to have desired outcome.

Below are the roadblocks:

1. In the Automated Query Factors, Can't I bring value from a field and map to the factor result.

Like If I am creating a Impact Automated factor, it should bring in value from Impact field on the Entity Type Table. I don't need its sum, average or any sort of aggregation. I just need the value from that field as it is.

If I will be running my Object level assessment at Entity Type X, it should bring in Impact value from X record. Will it be possible?

I will be having a different value of this factor for every assessable record in that table.

2. I tried to achieve this using Automated scripted factors as well, but in the script there, we need to assign a numerical value to 'result.score' variable. Can't we assign a runtime value from a field??

If you can please guide me through this as well..it will be really helpful. Thanks in advance.

[UTKARSH JAIN]

Hi Shweta,

When we were designing automated factors, we always thought you would some kind of aggregation or mathematical operation. But you bring about a good use case, where you just want the results of one field as an automated factor response and not necessarily doing a mathematical operation on it. I will discuss with the team and see if this is something we can do in the upcoming releases.

Also, In your use case, you said you are doing an Any Object Assessment on the Entity type and you want the impact to be inherited from a record X. Now if a do a Max on that record, i should get the impact score from record X since this is the only record? Wouldn't that work?

Regards,

Utkarsh

[Shweta Kharb]

Hi Utkarsh,

If we use Max as an aggregation type, then the factor will give same value irrespective of the object assessed.

Can we achieve this functionality using the scripted factor? i see we have variables available there like object_id and sys_id. Is it not possible to fetch the value of a field from that sys_id/object_id?

Regards

Shweta