What is the difference between Expected loss and Potential loss in risk events?

[Sara Kiyono]

Hi, everyone.

Risk events have "Expected loss" field and "Potential loss" field. What functional differences exist between them?

I have confirmed that entering values into the Expected loss field reflects the Expected loss figure at the top of the Risk Workspace form screen. 

The documentation mentioned the following, but I couldn't determine what functional differences exist in ServiceNow. Specifically, I didn't understand where the value entered for the "Potential loss" field would be reflected.

Expected loss:Amount of loss expected. Expected loss is the probability weighted average of all possible losses. This amount is based on the user’s judgment of the expected amount that the organization might lose.

Potential loss:Amount expected to be a potential loss due to the risk event. This amount is the maximum loss an entity can incur due to the loss from the risk event.

If anyone knows anything, please let me know in the comments.

[SumanthDosapati · Accepted solution]

@Sara Kiyono 

• Expected loss = Average loss you expect, considering how likely the risk is.

• Potential loss = Worst-case loss if the risk actually happens.

Example:

• A system outage could cost $100,000 at worst -> Potential loss = $100,000

• You think there’s a 20% chance it will happen ->
  Expected loss = 20% × $100,000 = $20,000

 Expected loss = likely impact
 Potential loss = maximum impact

Accept the solution and mark as helpful if it does, to benefit future readers.
Regards,
Sumanth

[SumanthDosapati · Accepted solution]

@Sara Kiyono 

• Expected loss = Average loss you expect, considering how likely the risk is.

• Potential loss = Worst-case loss if the risk actually happens.

Example:

• A system outage could cost $100,000 at worst -> Potential loss = $100,000

• You think there’s a 20% chance it will happen ->
  Expected loss = 20% × $100,000 = $20,000

 Expected loss = likely impact
 Potential loss = maximum impact

Accept the solution and mark as helpful if it does, to benefit future readers.
Regards,
Sumanth

[Sara Kiyono]

Thank you for replying. I understand the concept.
If I enter a value in the Potential Loss field, will it change or affect the values in any other fields?

[SumanthDosapati · Accepted solution]

@Sara Kiyono 

Nope. Adding potential loss will not affect any other fields.

Accept the solution and mark as helpful if it does, to benefit future readers.
Regards,
Sumanth

[SohamTipnis]

Hi Sara,

Here is the simplified difference between expected loss and potential loss:

Expected Loss: Expected loss is the probability-weighted average of all possible losses.

Potential Loss: Amount expected to be a potential loss due to the risk event.

Note: This section only appears when:

• The sn_grc.enable_record_confidentiality property is enabled under GRC properties.
• The risk event is in New or Analyze state

I have used the reference from ServiceNow Documentation; you can use this as well.

https://www.servicenow.com/docs/bundle/zurich-governance-risk-compliance/page/product/grc-risk/task/...

If you find my answer useful, please mark it as Helpful and Correct 😊

Regards,

Soham Tipnis

ServiceNow Developer ||  Technical Consultant

LinkedIn: www.linkedin.com/in/sohamtipnis10