---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Modify risk and Request risk modification form fields

# Modify risk and Request risk modification form fields {#ariaid-title1}

Release version: Brazil  
Updated September 30, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The following table shows the fields on the Modify risk and Request risk modification dialogs.
{#sem-modify-risk-form__table_smrf__entry__2}

| Field | Description |
|-|-|
| New risk rating | Risk rating to apply to the record. |
| Compensating control (Optional) | A compensating control to associate with the risk modification. Only controls associated with the affected findings appear in the list. If no controls are associated with the vulnerability, all active controls from the library will appear. |
| Justification | Reason for the risk modification. |
| Risk adjusted until | Date on which the risk rating expires and the record reverts to its calculated risk rating. * Remediation Owner: Required. * Vulnerability Admin/Analyst: Optional. If you leave this field empty, the adjusted risk rating applies indefinitely. {#sem-modify-risk-form__ul_smrf_until}You can't select a past date. The maximum number of days you can select is determined by the Maximum duration for exception (days) field in the Exception Management form. |
[Table 1. Modify risk / Request risk modification form fields]

{#sem-modify-risk-form__table_smrf}
**Related tasks**   

* [Modify the risk rating for a finding or remediation task](https://www.servicenow.com/docs/VnGNvQPt67gzejM9JnP_Hg "Change the risk rating for a host vulnerable item, application vulnerable item, container vulnerable item, or remediation task in the Security Exposure Management Workspace.")