---
title: Create or Edit Threat Analysis and Risk Mitigation Questions
slug: neurons-for-itsm/admin-user-help/enu/latest/create-or-edit-threat-analysis-and-risk-mitigation-questions
createdAt: 2026-07-14T19:16:50.966Z
---

You can create new questions or edit existing questions and assign Risk Values, Question Impact, and Question Sequence to use with the Risk Assessment form. The questions help assess risk and threat and the current state of requirements.

Threat Analysis Questions and Risk Mitigation Questions populate the Risk Assessment. We recommend that you align Risk Assessment questions with current industry standards such as FedRAMP:2014, ISO 27001:2013, or ISO 9001:2015.

:::hint{type="info"}
You must be logged in as a **GRC Manager** to create or edit Threat Analysis or Risk Mitigation questions.
:::

**To create new Threat Analysis and Risk Mitigation Questions:**

You can add new questions to an existing Assessment or create a new  Assessment and add new questions to it.

1. Open the **Assessment** workspace.
2. Open an existing Assessment or click **New GRC Assessment** to create a new Assessment.
3. In the **Threat Analysis** tab:

:::Paragraph{indent="1"}
a. Click **New GRC Threat Analysis** to open a blank **Threat Analysis Assessment** form.
:::

:::Paragraph{indent="1"}
b. Enter the question text in the **Threat Analysis Control** field.
:::

:::Paragraph{indent="1"}
c. Add any additional details you want to include in the **Additional Details** field.
:::

:::Paragraph{indent="1"}
d. Click **Save**.
:::

4. In the **Risk Mitigation** tab:

:::Paragraph{indent="1"}
a. Click **New GRC Risk Mitigation** to open a blank **Risk Mitigation Assessment** form.
:::

:::Paragraph{indent="1"}
b. Enter the question text in the **Risk Mitigation Control** field.
:::

:::Paragraph{indent="1"}
c. Add any additional details you want to include in the **Additional Details** field.
:::

:::Paragraph{indent="1"}
d. Click **Save**.
:::

**To edit existing Threat Analysis and Risk Mitigation Questions:**

1. Open the **Assessment** workspace.
2. Open an existing Assessment, or click **New GRC Risk Assessment** to create a new Assessment.
3. In the **Threat Analysis** tab:

:::Paragraph{indent="1"}
a. Double-click the question to edit.
The **Threat Analysis Assessment** form opens.
:::

:::Paragraph{indent="1"}
b. Edit the question in the **Threat Analysis Control** field.
:::

:::Paragraph{indent="1"}
c. Edit the details in the **Additional Details** field if required.
:::

:::Paragraph{indent="1"}
d. Click **Save**.
:::

4. In the **Risk Mitigation** tab:

:::Paragraph{indent="1"}
a. Double-click the question to edit.
The **Risk Mitigation Assessment** form opens.
:::

:::Paragraph{indent="1"}
b. Edit the question in the **Risk Mitigation Control** field.
:::

:::Paragraph{indent="1"}
c. Edit the details in the **Additional Details** field if required.
:::

:::Paragraph{indent="1"}
d. Click **Save**.
:::