Advanced Risk Flashcards
What are the main differences between classic and advanced risk?
advanced is more configurable, multiple level statement hierarchy, assessment risk score rollup
What are the 4 advantages of advanced risk assessments?
determines the risk score and customer controls the formula to calculate the risk score, scoped risks and objects can be assessed, allows for a mixture of question types, integrates with other SN apps
What are the 3 primary risk management tables?
sn_risk_framework, sn_risk_definition, and sn_risk_risk
the Risk framework extends from the ______
document table (sn_grc_document)
the Risk statement table extends from the _______
content table (sn_grc_content)
The Risk table extends from the_______
item table (sn_grc_item)
______ risk assumes there are no controls or actions in place to reduce likelihood or impact
inherent
________ risk is the amount of risk left over after any controls or actions have been put in place and are functioning properly
residual
There is a ________ relationship between the risk statement and risk tables
one to many (optional)
sn_risk_advanced_risk_assessment_methodology has a ________ relationship with sn_risk_advanced_assessment_type
one to many
Which tables extend from the assessment type table (sn_risk_advanced_assessment type)?
inherent assessment, control assessment, residual assessment, target assessment
The assessment type table has a ______ relationship with the factor table (sn_risk_advanced_factor)
many to many
Which tables extend from the factor table?
group factor (sn_risk_advanced_group_factor) and child factor (sn_risk_advanced_sub_factor)
Which tables extend from the child factor table (sn_risk_advanced_sub_factor)?
manual factor and base automated factor
The child factor has a _______ relationship to the group factor table
one to one
Where do you go to enable advanced risk assessment?
Advanced Risk Assessment > Administration > Properties, enable Migrate to Advanced Risk Assessments property
Migrate to Advanced Risk Assessments makes changes to which 3 forms?
risk, entity, risk statement
What are the key features included in the GRC: Advanced Risk application?
risk aggregation and appetite, advanced risk assessments, and risk events
Which client scripts are invoked when migration to advanced risk assessment occurs?
ARA Migration on the Risk Statement form, Show/Hide advanced risk content on the Risk form, several scripts on the Entity form
