Configure a risk assessment methodology
Configure a risk assessment methodology (RAM) in the Advanced Risk application so that you can assess the risks or objects in your organization.
Before you begin
Role required: sn_risk_advanced.ara_admin
About this task
A RAM is a configuration or record in the new risk assessment engine in the Advanced Risk application.
You can use a RAM to assess either the risks or objects in your organization. For example, you can configure a RAM to specify the types of risk assessments and the entities on which a risk assessment is performed. By using a RAM, your organization can have different methodologies for assessing risks.
After you move a RAM to the Retired state, you can also move it back to the Draft state if you want to make some changes later. You can only move a RAM to the Draft state if it doesn’t have any assessments in the Monitor state or the Closed state. When you move a RAM back to the Draft, the on-going assessments and the associated scopes are deleted.
Procedure
Navigate to All > Advanced Risk Assessment > Administration > Risk Assessment Methodologies.
Select New.
On the form, fill in the fields.
For a description of the field values on the risk assessment methodology form, see Risk Assessment Methodology form.
Right-click and save the form.
To configure the various assessments, select one of the following options.
Choice Related link Configure inherent assessment See Configure an inherent assessment. Configure control effectiveness See Configure a control effectiveness assessment Configure residual assessment See Configure a residual assessment Configure target assessment See Configure a target assessment Select Publish.
Note: After a new assessment is created on the same risk and the assessment is in the Monitor state, the other assessments automatically move to the Completed state. When an assessment instance is in the Monitor state, you can’t move the RAM back to the Draft state. A RAM can only be moved back to the Draft state if there are no assessment instances.
Risk Assessment Methodology form
Use the Risk Assessment Methodology form in the Advanced Risk application to specify the types of risk assessments and the entities on which the risk assessment is performed.
Parent Topic:Perform Advanced Risk Assessment