Privacy risk management

As users of Privacy Management, you can perform advanced risk assessments with a limited set of features even if you do not have the complete license for Integrated Risk Management.

To prioritize the areas that need attention, risk assessment is performed by various stakeholders and is embedded as part of different workflows in an organization. For example, within Privacy Management, users must be able to identify the assets that pose the highest risks and ensure appropriate levels of controls are implemented to mitigate those risks. To address this need of risk assessment in other business units, a solution is implemented to enable the users of Privacy Management to use the advanced risk assessment capability, with limited features, without buying the Integrated Risk Management license for their risk management needs.

The following are the key points to consider when users use the limited advanced risk assessment for their risk assessments.

• The lite users of other business units can only have two published risk assessment methodologies.
• Automated factors are available for use.
• Managing risk events and using the risk identification workflow are not available in limited risk assessments.

• Risk score rollup in Privacy Management
  When users of Privacy Management perform advanced risk assessments, they get the risk scores automatically rolled up.