Adding, Editing, and Deleting Risks

You can add, edit, and delete risks for an inventory record on the Inventory Details screen.

Risks can also be inherited from risks flagged on associated assessments or added from the Inventory screen.

To add a risk from the inventory details screen

  1. On the IT & Security Risk Management menu, select Assets, Processing Activities, Entities, or Vendors.

    The applicable inventory screen appears.

  2. Click the Name of the inventory record to which you want to add a risk.

    The Inventory Details screen appears.

  3. Go to the Risks tab.
  4. Click the Add Risk button.
    Note:

    If a risk has already been added, use the Inventory Details screen Context Menu icon to flag a new risk.

  5. Complete the fields. For more information see Flag Risk Screen Reference
  6. Click the Add button.

Flag Risk Screen Reference



Field
Description
Select a Risk From the LibraryCreate New Risk

Select a risk from the library or create a new risk.

Risk Name

Enter a name for the risk.

Inherent Risk Level

Select the level of risk you want to flag.

Note:

If you have risk heatmaps enabled, you will be able to choose the level of risk based on the heatmap set up for your organization.

If you do not use risk heatmaps, the available options will be low, medium, high, and very high.

Threat

Select the threat(s) the risk presents.

Vulnerability

Select the vulnerability category the risk falls into.

Category

Select the category of the risk.

Risk Owners

Select the owner(s) of the risk.

Risk Approver

Select the approver(s) of the risk.

Deadline

Choose the deadline date.

Reminder

Enter the number of days before the deadline which the respondent(s) should be reminded to complete the risk assessment.

Description

Enter a description of the risk.

Treatment Plan

Enter a treatment plan to resolve risk.

To edit a risk

  1. Open the Inventory Details screen for an inventory record.
  2. Go to the Risks tab.
  3. Click the Description of the risk you want to edit.
    The Risk Details screen appears.
    Note:

    The Source attribute is not editable. If you create a risk directly from the risk register, the Source attribute will remain empty, and the risk Type will be set as General.

  4. Hover over the field you want to edit and click the Edit icon button on the field.
  5. Edit the fields.
  6. Click the Save button.

To delete a risk

  1. Open the Inventory Details screen for an inventory record.
  2. Go to the Risks tab.
  3. Hover over the risk you want to delete and click the Context Menu icon.
  4. On the Context menu, select Delete.

    The confirmation modal appears.

  5. Click the Delete button.

To create saved views for the Risks tab

  1. Open the Inventory Details screen for an inventory record.
  2. Go to the Risks tab.
  3. To create a custom saved view, apply your filters and column views as needed.
  4. Click the OneTrust Default View Selector to open the view selector.


  5. Click the Save As button.
    The Create View modal appears.

  6. Enter a name for your saved view.
  7. Enable the Make this View Public setting to allow other users to use this view.
  8. Click the Create View button. The custom view is now available.