Relate Risk to each other

[Arnaud Bretz1]

Greeting everyone,

I'm struggling with the concept of creating relationships between risks in ServiceNow Risk Management.

I found one page in the product document but it didn't really help me: Relate risks to each other (servicenow.com)

In my customer's instance, when I want to add a risk, I go to the related list "downstream risks" on my risk form and click on the button "Add". The problem is that the dialog box that pops up does not show any risk to select. 

On my PDI, the related lists "downstream risks" or "upstream risks" are not even showing up despite the fact that there are selected in my form layout.

Can someone explain what the prerequisites are to relate risks to each other? 

Thank you very much,

Arnaud

[Community Alums]

Hi @Arnaud Bretz1 ,

 If you are using "Advanced Risk" then i don't think, related lists "downstream risks" or "upstream risks" would populate.

For your customer's instance, just check if you have either sn_risk.manager or sn_risk.admin roles and you are not using Advanced risk management.

[Rajesh_Singh]

@Arnaud Bretz1 

If the dialog box that appears when you click "Add" in the "Downstream Risks" related list on your risk form does not show any risks to select, it might be caused by a filter applied to the list.

Here's how to check and modify the filter:

1. Open the risk form and click on "Add" in the "Downstream Risks" related list.
2. In the dialog box that appears, click on the funnel icon in the top-right corner to access the filter settings.
3. Check the conditions applied in the filter. It's possible that the filter conditions are excluding risks unintentionally.
4. Modify the filter conditions,

Let me know if that works, i can suggest you other solutions

[Oana Manda1]

Is there any update on this post? I am looking at the same table and there are no risks to be selected.

[EBT]

https://www.servicenow.com/community/grc-forum/entity-relationships-in-grc-are-very-confusing/m-p/13...>

you might find the answer in the above article

by alexrozov 

when I look at a risks and I look at upstream / downstream risks

In order to relate risks to each other as upstream or downstream risks I first need to relate the entities to each other.

so I need to go to the entity (or the GRC workbench) add other entities to the upstream / downstream entities related lists.

this will automatically populate the downstream risks and downstream controls with all relevant risks and controls and then when I go to a specific risk I can relate upstream risks and downstream risks based on the entity relationship