Create or Edit a Risk Assessment

create a risk assessment to discover, correct, and prevent security problems complete analysis questions and calculate risk scores (mitigated and unmitigated) accept the risk and mitigate with controls or a mitigation plan, or transfer or avoid the risk to create or edit a risk assessment, you must log in to as a grc manager create a risk assessment to create a risk assessment open the risk assessment workspace click new grc risk assessment to open a blank risk assessment form enter the information into the fields as required the questions for threat analysis and risk mitigation are based on the risk assessment type % of threat analysis assessment complete is based on the total number of questions answered % of risk mitigation assessment complete is based on the total number of questions answered current unmitigated risk and current mitigated risk are based on the questions weighted response mandatory fields are marked with an asterisk click save in the threat analysis tab, there are a set of questions for questions that have an impact, select each question, and then select a threat analysis level from the select threat analysis level drop down list for questions that have no impact, select each question, and then click no impact if a threat analysis question is set to no impact , it is removed from the percentage complete you can select no impact for all but one question, and then select the level of threat and your analysis will be complete in the risk mitigation tab, there are a set of sample questions select a risk mitigation level from the select risk mitigation level drop down list use the threat analysis , risk mitigation , risks , journals , controls , mitigation plans , exceptions , and linked risk assessments tabs to link or create new associated records for the risk assessment use the tasks tab to create new tasks associated to the risk assessment you cannot link to an existing task from this tab, only create new tasks you can restore hidden tabs using the plus sign (to the right of the tabs) click save click refresh if changes you made or relevant tabs are not shown in the record after you have saved it edit a risk assessment to edit a risk assessment double click the risk assessment to open the details edit the information as required click save