Viewing Risk Details

You can view all flagged assessment and inventory record risks in a combined repository through the Risk Register. Clicking the name of a risk displays a detailed view of the risk's summary, details, assigned controls, add comments and attachments, and the activity history of any changes made on the Risk Details screen. This article will walk through each tab available on the Risk Details screen. For more information, see Managing Risks from the Risk Details Screen.

Tip:

You can limit the users that have access to view and edit the risk details by utilizing risk permissions. The View All Risks permission gives users view-only access to the risk details. The Risk Edit and Risk V2 Edit permissions give users the ability to edit the risk details. For more information on how to configure custom role permissions, see Creating and Editing Custom Roles.

The Risk Owners and Risk Approvers will have full access to view the risk record regardless of their permissions.

Risk Details Tab



The Details tab will be the first tab to appear when you navigate to the Risk Details screen. This tab displays key risk information and metadata associated with the risk. You can view relevant dates, risk levels, treatment details, and associated users on this tab.
Note:

The Risk description field can only be edited by users who who meet at least one of the criteria outlined below:

  • The user has the User can be risk admin and Edit risks permission. OR

  • The user is assigned as the Risk approver or Risk manager and has the Edit risks permission.

You'll notice that the following risk attributes listed in the Attribute Manager do not appear on the Details tab.

  1. Inherent Risk Score

  2. Residual Risk Score

  3. Target Risk Score

These attributes are not displayed individually because they are consolidated into a single Risk Level attribute this is based off the risk impact and probability. These levels are visible on the Details tab as:

  1. Inherent Risk Level

  2. Residual Risk Level

  3. Target Risk Level

Although the risk score and risk level attributes are kept separate in the Risk Register and Attribute Manager, they are merged into one field on the Details tab visualization.

Note:

The risk score and risk level attributes cannot be deactivated in the Attribute Manager. These attributes are core functionalities of IT & Security Risk Management.

Risk Controls Tab



The Controls tab of the Risk Details screen shows all controls associated with the risk. Controls represent security measures that may be implemented to mitigate or manage the risk.

Risk Tasks Tab



The Tasks tab of the Risk Details screen displays all of the tasks associated with the risk.

Risk Summary Tab



The Summary tab displays metadata associated with the risk. You can view related tasks, objects, comments, and attachments on this screen.

Risk Comments Tab



The Comments tab of the Risk Details screen shows all the comments associated with the risk. Comments can be seen by authorized approval personnel.

Risk Attachments Tab



The Attachments tab of the Risk Details screen shows all the file and link attachments associated with the risk. Attachments will accompany the risk to add clarity with files linked with the risk.

Risk Activity Tab



The Activity tab of the Risk Details screen displays the activity history of the risk. This allows you to track the details of any changes made to the risk.

Related Objects Tab



The Related tab of the Risk Details screen displays all objects that are related to the risk.

Risk History Tab



The History tab of the Risk Details screen displays risk score history associated with the risk.

Risk Assessments Tab



The Assessments tab of the Risk Details screen allows you to create and send assessments and view all assessments related to the risk.