How to set the qualitative feature true in Risk management

Sanel
Tera Expert

I am new to GRC:Risk Mangement , I want to set the qualitative feature to true to compute risk score in risk register .

Can anyone tell me how can i do that?

Also when a risk is created through risk statement and after filling the assessment questionnare do the risk scores in risk register populate automatically?

1 ACCEPTED SOLUTION

Community Alums
Not applicable

Hi Sanel,

There are 2 properties that SN uses to set up the risk scoring. If you want to use qualitative scoring, you need to check option sn_risk.qualitative_impact and com.snc.grc_risk.max_likelihood. Risk scoring is quantitative, unless the administrator sets the qualitative system property to true.

Go to Risk > Administration > Properties 

or

Go to the URL http://instance.servicenow.com/nav_to.do?uri=%2Fsystem_properties_ui.do%3Fsysparm_title%3DRisk%20Management%20Properties%26sysparm_category%3DRisk%20Management

All information related to the properties can be also found in this link (https://docs.servicenow.com/bundle/helsinki-governance-risk-compliance/page/product/grc-risk/referen...)

 

View solution in original post

3 REPLIES 3

Community Alums
Not applicable

Hi Sanel,

There are 2 properties that SN uses to set up the risk scoring. If you want to use qualitative scoring, you need to check option sn_risk.qualitative_impact and com.snc.grc_risk.max_likelihood. Risk scoring is quantitative, unless the administrator sets the qualitative system property to true.

Go to Risk > Administration > Properties 

or

Go to the URL http://instance.servicenow.com/nav_to.do?uri=%2Fsystem_properties_ui.do%3Fsysparm_title%3DRisk%20Management%20Properties%26sysparm_category%3DRisk%20Management

All information related to the properties can be also found in this link (https://docs.servicenow.com/bundle/helsinki-governance-risk-compliance/page/product/grc-risk/referen...)

 

Community Alums
Not applicable

Related to the risk scoring, please check the link https://docs.servicenow.com/bundle/helsinki-governance-risk-compliance/page/product/grc-risk/concept....

The assessments are part of the review process but they don't have any direct impact in the risk calculations as you can check. The review should update the likelihood and impact based on the results collected, all of this scoring is been mentioned during the GRC fundamentals training 🙂

Eric Le Martre4
Kilo Guru

Very simple 🙂

Go to the menu Risk / Administration / Properties and check the 2 checkboxes for Qualitative assessment.

I would as well remove from the Risk Form all qualitative scoring fields and change in all Risks Lists quantitative columns with qualitative ones.

Best Regards

ERic