Creating New Relationship Risks

You can create new risks on your contextual relationships from the risk register and risk library using the Data Mapping Automation module.

Note:

Relationship risks do not appear on the Risks tab of the Inventory details screen. To view relationship risks, the following conditions must be met:

The risk is associated with the correct organization hierarchy.
The user's role has the View All Org Risks and View Transfer Risks permissions enabled.

When these conditions are met, relationship risks are available under the Related tab of the Inventory details screen.

To create a new risk

On the Data Mapping Automation menu, select Assets, Processing Activities, Legal Entities, or Vendors. The corresponding inventory list screen appears.
Select the name of an inventory. The Inventory Details screen appears.
Go to the Related tab. A list of inventory relationships appears.
Click the ID for the relationship to which you want to add a risk. The Relationship Details screen appears.
Go to the Risk tab.
Click the Context Menu icon in the header. The Context menu appears.
Select Flag Risk. The Flag Risk modal appears.
Select Create New Risk.
Complete the fields, for more info, see Create New Risk Screen Reference.
Click the Add button. The Risk Details screen appears.

Note:
This is where you are able to edit, track, and manage the increase/decrease of the risk you have created. For more information see Managing Risks from the Risk Details Screen.

Create New Risk Screen Reference

Field: Description
Type: Select the inventory type and choose the specific inventory.
Inherent Risk Level: Use the risk matrix to determine the inherent risk level.
Risk Name: Enter a name for the risk.
Threat: Select the threat(s) the risk poses to your company.
Vulnerability: Enter the vulnerability of the company to the risk.
Category: Select the associated category the risk falls under.
Risk Owners: Select the name(s) of the individual(s) responsible for remedying the risk.
Risk Approver: Select the name of the person responsible for approving the risk.
Deadline: Select the date by when the risk must be resolved.
Reminder: Enter the number of days before a deadline that a reminder is sent.
Description: Enter a description of the risk.
Treatment Plan: Enter a plan to control, mitigate, and/or resolve the risk.

To create a new risk from the Risk Library

On the Data Mapping Automation menu, select Assets, Processing Activities, Legal Entities, or Vendors. The corresponding inventory list screen appears.
Select the name of an inventory. The Inventory Details screen appears.
Go to the Related tab. A list of inventory relationships appears.
Click the ID for the relationship to which you want to add a risk. The Relationship Details screen appears.
Go to the Risk tab.
Click the Context Menu icon in the header. The Context menu appears.
Select Flag Risk. The Flag Risk modal appears.
Select Select a Risk From the Library.
Select the inventory type in which you would like to link the risk and then select the specific inventory.
Select a risk from the library. This will auto populate the risk details.
Complete additional fields as needed. See Enter Risk Details Screen Reference.
Click the Add button.

Enter Risk Details Screen Reference

Field: Description
Organization: Select the organization responsible for the risk.
Inherent Risk Level: Use the risk matrix to determine the inherent risk level.
Target Risk Level: Use the risk matrix to determine the target risk level.
Risk Name: Enter a name for the risk.
Threat: Select the threat(s) the risk poses to your company.
Vulnerability: Enter the vulnerability of the company to the risk.
Category: Select the associated category the risk falls under.
Risk Owners: Select the name(s) of the individual(s) responsible for remedying the risk.
Risk Approver: Select the name of the person responsible for approving the risk.
Deadline: Select the date by when the risk must be resolved.
Reminder: Enter the number of days before a deadline that a reminder is sent.
Description: Enter a description of the risk.
Treatment Plan: Enter a plan to control, mitigate, and/or resolve the risk.
Show More Details: Configure any custom risk attributes that have been created so that they can be populated. The required custom attributes will appear above the Show More Details section.

For more information

For more information on risks, please see the following articles in the IT & Security Risk Management knowledge base. All basic risk functionality is available for transfers within the Data Mapping Automation module.

Privacy Automation