All users can look at their risks in the report however if you are a professional or business user you may wish to further amend your risk outcomes, adjust actions and and create a treatment plan.
A risk assessment is an editing/mastering step between completing an assessment and producing a report.
To access the Risk Assessment:
For each risk you can also:
1 - Go to risk assessment module within assessment
2 - Review All Risks
3 - Select a Risk a view the key findings from the assessments which contribute to why the risk is rated the way it is.
4 - View the Current Risk Ratings. You can make adjustments if required.
5 - Save Current Risk if you made changes.
5 - View the Treatment Plan. The treatment plan includes all actions that were assigned to related controls during the assessment.-
6 - Select a Treatment Plan
7 - If you have decided to Take Action: Select the actions you plan to implement. These actions will be the ones that will now show in the report. Other actions will remain in the assessment but no longer be available in the report. Any new actions you add here will only be available here and not be in the assessment.
8 - Save the Treatment Plan.
9 - View the Target Rating.
10 - If you have decided to take action then adjust the target risk ratings accordingly. Usually taking action will result in a lower likelihood of the risk occurring.
11 - Save the Target Risk.
You can select Risk Assessments Breadcrumb to go back to risk list.