Loading
Table of Contents
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

          Search all of Salesforce Help
          Create a Risk Assessment for IT Compliance

          Create a Risk Assessment for IT Compliance

          Send a structured survey to stakeholders so they can weigh in on a risk's likelihood and impact. The responses drive the evidence-based scoring your team needs to make confident treatment decisions.

          Required Editions

          Available in: Lightning Experience
          Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service.
          User Permissions Needed
          To create and manage risk assessments: Compliance Admin permission set OR IT Compliance Fulfiller permission set

          A risk assessment is the survey your team sends from within a risk evaluation to gather input from the people closest to the risk, like the control owner, asset owner, or business unit leader. The active scoring expression set uses the participants' responses as input to recalculate the evaluation's likelihood and impact. This in turn, feeds into the residual risk score and any treatment recommendation that follows.

          Send assessments manually when you want a specific stakeholder's perspective. When Continuous Evaluation is turned on, the AI agent also sends assessments automatically, picking the most appropriate survey template and the relevant stakeholders for each evaluation it drafts.

          1. From App Launcher, go to the IT Compliance app and select Risks. Open the risk record you want to assess, go to the Assessment tab and click New.
          2. Fill in the assessment details:
            • Participant. The user or user group you're surveying. Choose stakeholders with direct knowledge of the risk, like the control owner, asset owner, or relevant business unit lead.
            • Survey Template. The survey to send. Pick the out-of-the-box template that best fits the evaluation type, or one your admin has customized.
            • Due Date. The date by which you need responses.
          3. Save your changes.

          The participants receive a survey invitation with a link to the assessment. As responses come in, they appear on the assessment record. After all responses come in or the due date for completion is reached, the active scoring expression set uses the responses to recalculate likelihood and impact on the parent evaluation, and updates the inherent risk score accordingly.

           
          Loading
          Salesforce Help | Article