How to calculate risk factors and how to configure risk factors in change

[dbokka]

I want how to calculate the risk factors and how the risk factors are reflecting in change 
what are the configuration steps behind them. I also want how to update the risk factors in change.

[HarishKumar6668]

Hi @dbokka ,

In ServiceNow Change Management, risk is calculated using two factors — Risk Conditions and Risk Assessments. It is recommended to use either one of them (not both simultaneously) to calculate the risk for a change request. Here is a breakdown of how each works:

1. Risk Conditions:
Risk Conditions are rule-based and evaluate automatically based on the data entered in the change request. When the defined conditions are met, the risk is set automatically — for example, the risk may be set to High while the impact is left unchanged. You can configure these conditions to match your organisation's risk criteria.

2. Risk Assessments:
Risk Assessment works similarly to a survey. When an agent clicks on Risk Assessment within the change form, a pop-up opens presenting a set of questions. Based on the answers provided, a score is calculated and the risk is determined using Assessment Thresholds.

For example, the OOB threshold configuration is:
• Score > 0 and < 7 → Risk: Low
• Score ≥ 7 and < 13 → Risk: Moderate
• Score ≥ 14 → Risk: High

• Risk Conditions are automatic and require no agent input — risk is set based on form data.
• Risk Assessments are agent-driven and require manual responses to questions before the risk is determined.

If you find this useful, please mark it as Helpful or Accept it as the Solution.

Regards,
Harish

[dbokka]

Hi @Harish

After clicking of risk assessment designer. I could see some of the values to edit and I clicked on preview I not able to submit or save the assessment. Could you please help me.

Regards,
Devi Sri.

[Srikanth_9]

Hi @dbokka,

ServiceNow calculates Change Risk using ordered Risk Conditions or weighted Risk Assessments, automatically updating the Risk field on a Change and influencing approvals, conflicts, and governance.

Risk Conditions (Rule-based calculation) - Risk is derived automatically using Risk Conditions based on fields like:

• Change Type
• CI criticality 
• Planned start/end time
• Implementation window
• Backout plan availability
• Number/type of affected CIs

The first matching rule (lowest order) determines the final Risk Value.

Risk Assessment (Questions based calculation) - It contains questions and each has a weight based on the final score Risk is mapped accordingly.

• Total Risk Score = Σ (Answer value × Weight) 
• The score is mapped against Assessment Thresholds.
• Navigate to Change -> Administration -> Risk Conditions - Each record is one rule.

If:

Change type = Emergency –

CI criticality = High

Planned start during business hours

Then:

Risk = High

• Navigate to Change -> Administration -> Risk Assessments.

• Configure:
  • Assessment Categories
  • Assessment Metrics (questions)
  • Metric Definitions (answers + weights)
• Define Assessment Thresholds
  • For example:
    
    • 0–10 -> Low
    • 11–20 -> Medium
    • 21 -30 -> High

Reference Links:

Getting started with ServiceNow Change Request Ris... - ServiceNow Community

Change- Risk Assessment Setup - ServiceNow Community 

Please add if you have any other questions while configuring.

If the provided solution is useful/working, please Accept as Solution and hit the Helpful. 

Thanks & Regards,

Srikanth Akula.

[HarishKumar6668]

HI @dbokka ,
Could you please share the screenshots here? It would be really helpful.

But if you are on the Assessment Designer page, you should be able to find the relevant options at the top of the page as shown in the screenshot I have attached.

If you find this useful, please mark it as Helpful or Accept it as the Solution.

Regards,
Harish