How to migrate the risk assessment's inherent's impact & likelihood, control assessment's data?

[ChuanYanF]

Dear experts,

I would like to know how do we migrate the data for the risk assessment's inherent and control's data like the impact factors and likelihood factors? Is that possible to do so? Because I don't see a table that contains this sort of records in the system. Please advise.

[ShafrazMubarak]

The best approach for this is to make the risk assessment recorded in an non-production instance (like dev, qa or uat) freshly and import the data into production tables. 

The risk assessment process saves the data in multilpe tables (assessment, assessment responses, factors, metric types and etc) and it is a hectic process is to record them one by one and import. 

In one of our recent project, we noticed this and we have imported all the existing risk assessment responses by simulating them in a different instance fresh and then import the data to respective tables. 

[ChuanYanF]

Hi Shafraz

Thanks for the reply, but can you show me a detailed steps in how you perform this action? Because I dont really understand what is the proper way in doing so.

[ShafrazMubarak]

Hi ChuanYanF,

Sorry for the late reply due to holidays. 

Here are the steps i followed. 

1. We took a fresh non-prod instance (or delete existing records). 

2. Make sure all the existing data in the risk transactional tables of risk are deleted. (Risk, Risk Assessment, Risk Assessment Factor Responses, Risk Response Tasks such as Acceptance, Transfer, Avoidance and Mitigate - each has its own tables in addition to the risk response task table)

3. Make sure you have an excel sheet which contains the data. Make sure you have the data aligned that every risk will have its own assessment results (one or more), all the assessment responses to factors (inherent, control, residual OR as per your Risk Assessment Methodology). 

4. Make sure all your users who were involved in the process (Risk Owner, Risk Assessor, Risk Assessment Approver, Risk Response Task Owner and etc) are assigned with respective roles in the instance. 

5. Start creating the risks by impersonating the respective owner (or the one who supposed to be updated as created by) 

6. Assign the Risk Assessor and Approver for the Risk Record. 

7. Impersonate as the Risk Assessor and update the risk assessment responses as per the excel sheet. 

8. Update the Assessment Responses (Factors, Comments, Any Overrides) and continue the process sequentially (Inherent --> Control --> Residul --> Respond --> Request Approval)

9. Impersonate as the Approver and provide the approvers. 

10. Impersonate the Risk Response Task Owner and update the respective risk response tasks. 

11. Repeat this for all the records in your excel sheet. 

12. Once all the risks are updated, check whether the data is updated with correct owners, dates, and etc. Check all the values are populating correctly. 

13. Once the verification is completed, you can export the data from all the respective data and import them in the correct instance. 

The reason we are doing here is there are few tables getting updated while doing a risk assessment process with some calculations. So it is some time difficult all these into an excel sheet and then import using transform map. Therefore, we used simulation method where we did all these activities manually and then import the respective data to prod instance.