How to filter Risk Assessment Methodologies for the populated Entity Class?

MU1
Tera Contributor

hi,

 

I want to filter the Risk Assessment Methodologies options to only display the RAMs on which I have configured the applicable entity classes. 

 

Below is the Risk form which shows the Risk Assessment Methodology of the populated entity which is linked to the entity class. The entity class is configured with the RAM:

 

Screenshot 2024-05-07 at 12.56.02 PM.png

 

Entity Form > entity Class:

 

Screenshot 2024-05-07 at 1.09.56 PM.png

 Risk  Assessment Methodology record that shows the linked applicable entity classes (entity_classes):

Screenshot 2024-05-07 at 1.14.40 PM.png

Currently, the script include shows the primary risk assessment methodology. I want to see all the RAM for the populated entity > entity class. For e.g. Continuous Assessment and Enterprise Assessment for Projects are Risk Assessment Methodologies that should show for the entity class 'Project'.

 

2 REPLIES 2

jaikishan1
ServiceNow Employee
ServiceNow Employee

The Primary RAM field displayed on the entity is used when reports are generated for an entity class. When a report is generated on entity class, it considers the primary RAM of the entities to collect the assessment data and create the report.
Changing the Primary ram might cause issues with report generated on the entity class.

That said, if the user still wants to change it, he can customize the existing logic which sets the primary RAM on the entity and use a script to fetch all the associated RAMs and display them.

Please mark this as helpful if it solves your query.

Regards,
Jai

Jan Spurlin
ServiceNow Employee
ServiceNow Employee

@MU1 - @jaikishan1 is correct, but there is more.

The reason there is a primary RAM on the entity record is because the rollup of the risks is by RAM.  You can't combine the risk ratings from two different RAMs and have them roll up. It just doesn't make sense to do that. The RAMs are different and could have different contexts.

 

What you will find is that in the related lists for the entities there are two related lists that may help. One is called Risk Assessments and the other is Aggregated Risks.

On the Risk Assessment related list you will find all the assessments that have been performed for that entity. I frequently configure this related list to include the RAM name.  That makes it easier to see what I need.

Then on the Aggregated Risks, you will find one record for each RAM on the previous page - that provides a rollup of all the assessments for that RAM/entity combination.

Hope this helps.