Update risk rating in residual assessment matrixesHow to Update Specific Residual Risk Matrix Values

[KarankiS]

Hello ServiceNow Community,

I'm working with ServiceNow GRC Advanced Risk Assessment and need guidance on updating specific values in the Residual Assessment Matrix without impacting other records.

Current Matrix Configuration:

Inherent Risk Control Effectiveness Current Residual Risk Current Score

High	Strong	Very Low	1
High	Satisfactory	Low	2

---

Desired Changes:

Inherent Risk Control Effectiveness Desired Residual Risk Desired Score

High	Strong	Low	2
High	Satisfactory	Moderate	3

---

What I've Tried:

1. Manual editing via Matrix tab: The matrix appears to be read-only or updates trigger cascading changes to other records with the same rating.
2. Direct table access: Attempted to edit records in sn_risk_advanced_residual_assessment_matrix table, but encountered business rule validation errors:
   • Error: "Another record with same score 2.0 and a different rating Low exists. Provide a different score."
3. Updating Qualitative Rating Criteria: Considered adjusting the score intervals in the Residual Assessment Qualitative Rating Criteria, but this would affect all 20 matrix combinations, not just the two I need to change.

Questions:

1. What is the recommended approach to update specific matrix records without affecting other combinations?
2. Is there a way to bypass the business rule validation that prevents duplicate scores with different ratings during a controlled configuration change?(OOB Config.)
3. Should I use a Fix Script with setWorkflow(false) to make these changes, or is there a better practice?

Thanks in advance...

[Its_Sagnic]

Hi @KarankiS ,

Hope you are doing well.

1. The first thing you need to do is to move the Risk assessment Methodoldy to Draft ( if you are not able to do so please try to close all the risk assessments attached with it )  ( sn_risk_advanced_risk_assessment_methodology ).
2. Now you need to seach for the Resudual Assessment Assessment type (sn_risk_advanced_residual_assessment) ..
3. Then within that Assessment type you will get the option to update the Factors and The rating crieria. Based on the rating criteris It will show the final result in the risk assessment.

The rating crieria :

Lower rating intervalRatingOverridden scoreRisk color styleRisk appetite scale

		1	Very Low	2	Very Low Risk	1 - Averse
		3	Low	5	Low Risk	2 - Minimalist
		6	Medium	12	Medium risk	3 - Cautious
		13	High	19	High Risk	4 - Open
		20	Very High	25	Very High Risk	5 - Hungry
		26	Extremely High	36	Extremely High	5 - Hungry

4. Now you need to open any of the factor Group factor ( Impact , Likelyhood etc ) and need to set the Factors and Qualitative transformation criteria.

Factors :

Actions NameFactor contributionTypeDisplay orderQualitative weighting (%)

		Strategic	Qualitative	Manual Factor	1	100%
		Public Opinion	Qualitative	Manual Factor	1	200%
		Regulatory	Qualitative	Manual Factor	1	600%
		Operational	Qualitative	Manual Factor	1	400%
		Environmental	Qualitative	Manual Factor	1	300%
		Health & Safety	Qualitative	Manual Factor	1	500%

Qualitative Transformation Criteria :
Actions Lower limit of rangeScoreDisplay text

		0	1	Negligible
		1.01	2	Minor
		2.01	3	Moderate
		3.01	4	Significant
		4.01	5	Critical
		5.01	6	Catastrophic

So after you update the record you need to save the factors and then the Publish the group factors .

and then publish the assessment as well.

So if you find the solution useful for you please mark it as helpful and accept the solution to close the thread.

Regards,

Sagnic