When I put into Attest the Risk Assessment is not created. Is it because I have to "revert to default risk score"

[JH4]

When I'm doing a risk assessment, I want to move it to Attest mode so that a Risk Assessment can be created.  However, when I put it into Draft and then to Attest, it does not generate the risk assessment.  I do notice for the ones where it does not generate the risk assessment, there is a link to "Revert to default risk score."  I suspect that has something to do with it but does anyone know why it was put there in the first place?  

[Sulabh Garg]

Hello JH,

I tried generating the assessments on below scenarios and it successfully generated, Not able to reproduce your issue and nor I found the link "Revert to default risk score."

1) Create Risk in Draft state and enter the assessment and assessment respondent and change the state to Assess - Assessment generated successfully.

2) Now Risk is in "Assess" state, Now I click on UI action "Return to draft", Risk moves to "Draft" state. Now I again click on "Assess" UI action, It again moves to "assess" state  - Assessment generated successfully.

Could you provide more details and how I can reproduce it.

Please Mark ✅ Correct/helpful, if applicable, Thanks!! 

Regards

Sulabh Garg

[JH4]

Could the problem be that I have recently defined the Inherent and Residual Impact and Likelihood for that particular Risk Statement?  Would that somehow affect the fact that I can't generate assessment instances for these risks?

[Sebastien Fix]

@JH4  Are you talking about classic risk and not advanced risk? If Classic Risk, you need to make sure you have defined a Risk Assessment template for the Risk Assessment to be generated. 

Same as for Control Objectives requiring an Attestation Type linked to them for Attestations to be generated.

More info here: https://docs.servicenow.com/bundle/tokyo-governance-risk-compliance/page/product/grc-risk/concept/as...

[JH4]

Yes. It's classic risk. I did define the assessment template.  This assessment template will create the risk assessment for a different risk but not this particular risk.  I don't know why.  I even deleted this risk and recreated it to see if it will generate the risk assessment and it will not (same risk statement, same entity).