In GRC: Advance Risk assessment module : how do trigger assessments ?

[Nagasai Ram San]

In GRC: Advance Risk assessment module : how do trigger assessments ?

[Gunjan Kiratkar]

Hi @Nagasai Ram San 

Please check in the assessment metric has any schedule script associated with it or not. Generally it is based on script.

[Community Alums]

Hi @Nagasai Ram San ,

To use Advanced Risk Assessment, you must set up the risk assessment methodology (RAM), define the assessment scope, and perform the assessment.

Before using Advanced Risk Assessment, different users must perform different setup tasks. These steps define the workflow of the assessment.

1. Set up the risk assessment methodology (RAM): A risk administrator with the sn_risk.admin role sets up the system. The administrator does the following:
   • Identification: Identifies if a risk or an object is being assessed.
   • Assessment: Determines how to assess the issue, such as with assessment criteria, risk scoring, or reporting preferences.
2. Define the risk assessment scope: After the RAM is defined, the entity owner defines and identifies the following:
   • The relevant risks for the entity.
   • The assessors and approvers for those assessments.
   • Periodicity of those risk assessments.
3. Perform risk assessment: The risk assessor with the sn_grc. business_user role performs the following assessment tasks.
   • Assesses the inherent risks and the effectiveness of mitigating controls​.
   • Reviews the residual risk and defines the risk treatment plan.
   • ​Triggers the review and approval workflow.
4. Monitor the assessments: After the risk assessment is approved, the assessment moves to the Monitor state. The risks assessed in the risk assessment must be monitored especially if it contains automated factors. Automated factors or questions that automatically fetch data from any of the data sources have ever-evolving risk ratings. Therefore, a risk which may currently have a low rating might have a higher rating later. This makes it imperative to monitor a completed assessment to reduce threats to your organization.

You can Configure a risk assessment methodology 

Once you have understood the above details , finally you can Perform Advanced Risk Assessment