Tips when migrating from Classic to Advanced Risk

[H_kon Faanes]

Hi,

We are migrating from Basic to Advanced risk in our instances. I am aware of "how" to migrate to Advanced Risk, so that is not my main concern. What i would like are some tips from somebody who has experience in migrating a mature instance (we have been using Classic Risk for a few years already with many users) to Advanced Risk. I have read that it is suggested that you complete all active risk assesments before migrating to Advanced Risk as there is no "in-flight" migration functionality. Unfortunately i am afraid that that is impossible for us due to the size of our instance and number of assesments.

In short i am looking for general tips and things to look out for before and after migration as there is little information on the subject available.

Thanks in advance,

Håkon Faanes

[Community Alums]

Hi @H_kon Faanes ,

To use advanced risk assessment, you must enable the Migrate to Advanced Risk Assessments property located under the Administration module. The assessor and approver for the risk assessment must have the sn_grc.business_user role.

Now, if  you are referring to moving answers from the classic risk assessment into Advanced Risk , that's not possible, you will have to use Advanced risk management concept of RAMs. and once you have migrated to Advanced risk management then you cannot comeback to classic risk.

Advanced Risk Assessment 

[H_kon Faanes]

Hi @Community Alums,

I appreciate your response, but this was not what i was looking for this time. 

[Community Alums]

Hi @H_kon Faanes ,

Can you specify your pain points , so i can be more specific

[jingpingge1]

I would suggest to consider create a single assessment methodology definition, using this to match your current risk assessment setup. This is the assessment methodology you will be using for all entities classes, and entities. This is how your current risk assessments done using Advanced Risk assessment approach. This way, you can starting using risk assessment methodology, and evaluating when/where/how to introducing additional assessment methodologies.