Make comments for risk resonse Not Mandatory

[ujjwalababa]

Hello Everyone,

We have defined a RAM for risk team to perform risk assessments , now that our client do not want to provide risk response comment every time he takes up an assessment. Is there a way we can make comments for risk response not mandatory? As of now they are mandatory. Could anyone please guide how we can make them non mandatory just for a specific RAM?

Thankyou in advance!

[VaishnaviK3009 · Accepted solution]

Hi @ujjwalababa !!

Yes, this can be done per Risk Assessment Methodology (RAM).

Steps to make Risk Response comments non-mandatory for a specific RAM

1. Go to
   Risk → Administration → Risk Assessment Methodologies

2. Open the RAM used by the client.

3. Check the Risk Response / Assessment configuration section:

   • If there is an option to make response comments mandatory, disable it.

   • This change applies only to this RAM.

4. If comments are still mandatory:

   • Go to System UI → UI Policies

   • Find the policy making Risk Response comments mandatory

   • Update the condition to exclude this RAM (or apply it only to other RAMs)

   • Remove the “Mandatory” action for this RAM.

5. Save and test by running a risk assessment using this RAM.

Mark this as Helpful if it clarifies the issue.
Accept the solution if this answers your question.

Regards,
Vaishnavi
Associate Technical Consultant