Setting Up Risk Scoring

You can configure the application to use a risk heatmap to quantify risks based on both impact and probability. 

Risks are rated using heatmap scores between 1 and 25, with 1 being the lowest. Both the level of impact and the probability of the risk occurring are used to select the level of risk and assign a score. 

You can configure the labels on the heatmap to use specific terms in association with certain levels of impact or probability. Once you configure risk scoring, you can navigate to the Risks tab of an inventory record to view a breakdown of risks per risk categories.

To configure the individual risk heatmap

CAUTION:

The ability to configure an individual risk heatmap using the matrix or standard scoring methodology in Global Settings will be removed for some users starting in the OneTrust Fall 2024 release. This change is part of the risk scoring upgrade. Going forward, risk scoring must be configured in the Attribute Manager for Inherent Risk Score, Residual Risk Score, and Target Risk Score attributes.

For more information, see the Risk Scoring Upgrade Guide and Configuring a Risk Score Matrix articles.

  1. On the Global Settings menu, select Risk & Controls > Risk Scoring.

    The Risk Scoring screen appears.

  2. You can select a standard or matrix scoring methodology for your risks in the Scoring Methodology field. Configure the Risk Score Methodology to align with your business needs.


  3. Edit the labels to reflect the level of impact and probability for each risk level. Add or delete columns as necessary.


  4. Define the risk score ranges for each risk level by clicking and dragging the slider bar. Your changes will be reflected in the heatmap.


  5. Click the Save button.
    The Save Changes modal appears.

  6. Click the Save button.