Categorizing Risks

You can categorize your risks to group them according to the criteria relevant to your organization.

To categorize an assessment risk

Note:

Assessment risks must be edited within the assessment from which they originate. Assessments can be accessed from many areas in the application. The method described here starts from the Risk Register screen.

  1. On theIT & Security Risk Management or Risks menu, select Risk Register.

    The Risk Register screen appears.

  2. Click on the Source for the risk in which you want to categorize an assessment risk.

    The Assessment screen appears.

  3. In the assessment header, click the Risks Flag icon.
    Note:

    Assessment must be Under Review or Completed stage or status to click Risk Flag

    The Risks pane appears.

  4. Select the risk you want to categorize.
  5. Click on the Risk Category field to make the fields editable.
  6. In the Risk Category field, select the categories you want to apply to the risk.
  7. Click the Save button.

To categorize an inventory risk

Note:

Inventory risks can be edited from the Risk Details screen. The Risk Details screen can be accessed from the Risks tab of an inventory record. The method described here starts from the Risk Register screen.

  1. On the IT & Security Risk Management or Risks menu, select Risk Register.

    The Risk Register screen appears.

  2. Click on the Description for the risk you want to categorize.

    The Risk Details screen appears.

  3. Click on the Risk Category field to make the fields editable.
  4. In the Risk Category field, select the categories you want to apply to the risk.
  5. Click the Save button.