When using Advanced Risk Assessments, it seems the 'Residual risk' score remains fixed at the value it was last assessed at. When related controls change from compliant to non-compliant (or vice versa) the residual score is never updated.
In the example below, the related controls have become non-compliant since the last risk assessment has taken. I would have hoped that would change the residual score (which by book definition is the 'current' score) but it hasn't.
In Classic Risk, a change in related controls' compliance status would trigger a re-calculation of the 'Calculated score' but once you migrate to Advance Risk Assessments that field is never updated. It seems like a huge retrograde step not having the system automatically calculate the current risk level as Classic Risk has always done. Am I missing something here? How to we get Advanced Risk to dynamically calculate the current risk score based on controls/indicators/KRIs etc.?
