Difference between Risk State and Risk Status?

Nazia1
Kilo Expert

HI ,

 

I am trying to understand difference between Risk state and Risk status in Risk Table.

 

As per documentation this is the definition but it would be great if someone can provide a better insights on why there are 2 fields and how its it beneficial.

 

StateCurrent state of the risk. All new risks are created in the Pending state.

The available states are: Pending, Open, Work in Progress, Closed Complete, Closed Incomplete, and Closed Skipped

Risk statusStatus of the risk. The available options are: Pending, Achieved, Not Achieved, Avoid, Mitigate, Transfer, and Accept.
5 REPLIES 5

Ty18
Tera Contributor

I think an exec or decision maker is more concerned with the status of the risk itself and less so with the record's state and how it's related to ServiceNow.

Jim Hughes1
Tera Contributor

Having both fields is very confusing and Servicenow should consider to have only one field for Status/State.   At a high level, the stakeholder want sto know if the Risk is Open or Closed. If open, what is the Due date, Owner, Mitigation strategies, etc

Ashutosh Munot1
Kilo Patron
Kilo Patron

HI,


Risk State is used like a state on normal records like Open, WIP,Closed,etc. Risk Status shows the stakeholders or organisation that how risk we have and how many we mitigated or achieved.

 

So for example: A person might be working on a risk record with state as WIP but the risk is not accepted as a risk it can be a false alarm or risk.

 

Thanks,
Ashutosh

afattahQ
Giga Contributor

I agree that having both fields is very confusing, and the values for these fields makes it more so. 

 

1. The values for the Risk Status field do not make sense; "Avoid, Mitigate, Transfer, and Accept" are risk response strategies that the PM deploys to counter the risk, they are not risk status values.  

2. Risk status as "Achieved or Not Achieved" do not make sense, first time for me to see this.  A risk is not something you should categorize like that.  If a risk is "Achieved" it is no longer a risk, it is an issue at that point.

 

Hope this helps.

 

Risk statusStatus of the risk. The available options are: Pending, Achieved, Not Achieved, Avoid, Mitigate, Transfer, and Accept.