Create or Edit an Assessment

create an assessment to discover, correct, and prevent security problems complete analysis questions and calculate risk scores (mitigated and unmitigated) accept the risk and mitigate with controls or a mitigation plan, or transfer or avoid the risk to create or edit a risk assessment, you must log in to as a grc manager create an assessment to create an assessment open the assessment workspace click new grc assessment to open a blank assessment form enter the information into the fields as required current unmitigated risk and current mitigated risk are based on the questions weighted response mandatory fields are marked with an asterisk click save in the threat analysis tab, there are a set of questions for questions that have an impact, select each question, and then select a threat analysis level from the select threat analysis level drop down list for questions that have no impact, select each question, and then click no impact if a threat analysis question is set to no impact , it is removed from the percentage complete you can select no impact for all but one question, and then select the level of threat and your analysis will be complete in the risk mitigation tab, there are a set of sample questions select a risk mitigation level from the select risk mitigation level drop down list use the threat analysis , risks , controls , audits , tasks , mitigation plans , exceptions , and linked assessments tabs to link or create new associated records for the assessment use the tasks tab to create new tasks associated to the risk assessment you cannot link to an existing task from this tab, only create new tasks you can restore hidden tabs using the plus sign (to the right of the tabs) click save click refresh if changes you made or relevant tabs are not shown in the record after you have saved it edit an assessment to edit an assessment double click the assessment to open the details edit the information as required click save