---
sourceDocument: Zurich Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/governance-risk-compliance

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Perform Advanced Risk Assessment

# Perform Advanced Risk Assessment {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Use the ServiceNow®
Governance, Risk, and Compliance (GRC) Advanced Risk Assessment feature to create an integrated risk
platform.

To see the roles required for performing and approving the assessment, refer to [Roles for performing advanced risk assessment](https://www.servicenow.com/docs/Zf~xmF~uMZ_1gbZPQg0vow "When you integrate advanced risk assessment with other applications, you must ensure the users have the necessary roles to perform and approve the assessments.").
* **[Create a manual factor](https://www.servicenow.com/docs/M4M7GoPHOCY3_Bf41seR4g)**   
  Create manual factors to evaluate and assess risks on a risk assessment instance.
* **[Create a group factor](https://www.servicenow.com/docs/IfExdIUAdQgFyxsvPeTq1w)**   
  Create group factors to evaluate and assess risks on a risk assessment instance.
* **[Create an automated factor](https://www.servicenow.com/docs/UoQuUNFkX0VGVjvsnVlcLw)**   
  Create automated factors to automatically fetch data from other data sources such as tables or database views.
* **[Create a scripted automated factor](https://www.servicenow.com/docs/9~J5GF~iGSk13wQgBu_Cvg)**   
  Create scripted automated factors that use a script to fetch data from ServiceNow® records or from external sources. During risk assessment, scripted automated factors automatically calculate and provide the responses for factors.
* **[Copy a factor](https://www.servicenow.com/docs/BUMXOY3ao7Qcbe5ttTFpFA)**   
  Create a copy of a published factor to make minor modifications and then reuse the factor.
* **[Configure a risk assessment methodology](https://www.servicenow.com/docs/VuTLZdQSKreQ6DIChweFDg)**   
  Configure a risk assessment methodology (RAM) in the Advanced Risk application so that you can assess the risks or objects in your organization.
* **[Copy a risk assessment methodology](https://www.servicenow.com/docs/bkswaAWIUWYeb46~reJq5Q)**   
  Modify your risk assessment methodology (RAM) and factors by creating a copy of the record. The option to copy allows the system to create a true copy of the underlying record including all the related lists. This action saves the time of risk administrators as they do not have to create the records from the beginning each time.
* **[Retire a risk assessment methodology](https://www.servicenow.com/docs/o_3xAlOFUyOqx7G6CIKy6A)**   
  Retire a risk assessment methodology (RAM) that is no longer used. Retiring unused RAMs makes it easier to manage the active RAMs for the risk administrator.
* **[Configure an inherent assessment](https://www.servicenow.com/docs/p_mxnT9uY5bqQUWQrkajdA)**   
  Configure and publish an inherent assessment in the Advanced Risk application to assess the inherent risks in your organization.
* **[Configure a control effectiveness assessment](https://www.servicenow.com/docs/_es6D2Re80KnFTuvuL4h2A)**   
  Configure and publish a control effectiveness assessment to assess the effectiveness of controls in mitigating risks.
* **[Configure a residual assessment](https://www.servicenow.com/docs/U1yGYPmL1DkWzszOS_4Grg)**   
  Configure and publish a residual assessment in the Advanced Risk application to assess the residual risks in your organization.
* **[Configure a target assessment](https://www.servicenow.com/docs/gAx6IBTJSvyxs6aC9rj9Sg)**   
  Configure and publish a target assessment in the Advanced Risk application to assess your desired future risk level. By configuring a target assessment, you enable the assessors and approvers to perform a target risk assessment in the Next Experience.
* **[Create risk color styles](https://www.servicenow.com/docs/AjRD3a8cOrwYuxsvj250dw)**   
  Create a library of risk color styles to use for different assessment types and matrixes. A risk color style is a combination of a background color and a text color. The color styles help maintain consistency when you configure risk assessments.
* **[Configure risk heatmaps](https://www.servicenow.com/docs/1v2rVx4prFqAVF3bzLdE6w)**   
  Within a risk assessment methodology (RAM), configure the heatmap visualization for inherent and residual assessments. Use different heatmaps for different risk assessment methodologies.
* **[Create a risk assessment scope and initiate assessments](https://www.servicenow.com/docs/uRMmloXkyBs4RB_lK9DlHg)**   
  Create a risk assessment scope to define and identify risks for an entity. Identify assessors and approvers for assessments, and define the frequency of assessments.
* **[Simulate a risk assessment](https://www.servicenow.com/docs/AOBQ8QZZ7rN_W1tBmpp5Vg)**   
  Simulate a risk assessment to verify the associated risk assessment methodology (RAM) configuration when it is in the draft state.
* **[Assess risks and objects on an assessment instance](https://www.servicenow.com/docs/5YcyR656r4_c37kekjzTsw)**   
  Assess the risks that you have configured and reassign the risks to relevant approvers.