Creating Risk Conditions

[DiegoCamacho]

My first time creating a Risk Assessment and Risk Condition. I believe the first part of the Risk Assessment was okay. I created it with the conditions Active = true and Type = normal.

I created 3 Assessment Metrics:

Question: Is there a rollback plan?

Option:                                                               Weight
Exists and has been tested -                          0
Exists, but has not been tested -                   5
No -                                                                          7

Does the requested change apply to any of the services listed below? - Impact (Question: since it's a list, I understand it should be a reference type, right?)

Option:
List

Teams involved in the change - Risk
Option:                                                                      Weight
0 to 2 times                                                                  0
2 to 5 times                                                                  5

More than 5 times                                                     7

I need to create the Risk Conditions as follows:

Risk Condition:

If 0 = Very Low

If 5 = Low

If 7 = High

If 9 or more = Very High 

Impact Condition:

If the user selects any critical service = Very High

If the user selects "None of the options" = Low

[Dr Atul G- LNG]

Hi @DiegoCamacho 

The risk calculation is based on the risk assessment and the risk conditions. From what I can see in your assessment, everything looks fine.  Did you also configure the risk thresholds?

For example:

My video will be helpful herr:

https://youtu.be/0gdkXuN9KFc

[DiegoCamacho]

@Dr Atul G- LNG 

Thank you for your help.

Yes, I took a closer look and adjusted that issue.

Now I will have to create a risk condition based on the criteria below:

If the user selects any critical service = Very High

If the user selects "None of the options" and the "Service Offer" field is empty = Low

If the user selects "None of the options" and the "Service Offer" field is NOT empty = Impact according to the "Business criticality" field of the "Service Offer".

From what I've seen, this will have to be done via script in Risk Conditions. Would that be the best approach?

[Dr Atul G- LNG]

Hii @DiegoCamacho 

As per my experience, include all risk assessment questions only within the risk assessment and keep the risk conditions unchanged. This is because the risk assessment generates a risk value, and in parallel the risk condition also generates a risk value. In the end, whichever value is higher takes precedence.

Your risk assessment structure looks good; now you only need to increase or decrease the risk threshold or value based on the answers the user provides in the risk assessment. This follows the out-of-the-box (OOTB) risk assessment and risk condition behavior.

[DiegoCamacho]

@Dr Atul G- LNG 

Just a supplement: where it mentions critical services, this information will come from filling out one of the Risk Assessment metrics. This list only includes critical services, except for the "None of the above" option.