Loading
Table of Contents
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

          Search all of Salesforce Help
          Manage Risks for IT Compliance

          Manage Risks for IT Compliance

          Move risks through their full lifecycle in one place, from spotting a new threat to closing the loop. Capture risks from a curated scenario library, score them automatically with the Business Rules Engine, link the controls and policies that mitigate them, and assign treatment plans your team can act on.

          Required Editions

          Available in: Lightning Experience
          Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service.
          • Risk Management Workflow for IT Compliance
            Follow how a compliance team identifies, evaluates, and mitigates compliance risks that threaten regulations and policies. See how risks are linked to controls that reduce risk severity, and how risk scores update dynamically as controls pass or fail tests.
          • How Risk Scores Are Calculated for IT Compliance
            Agentforce IT Service calculates two scores for every risk—an inherent score that reflects raw severity before any safeguards, and a residual score that shows what remains after mapped controls are factored in. Both scores are calculated automatically by the Business Rules Engine using the active risk scoring expression set.
          • Continuous Risk Monitoring for IT Compliance
            Background agents continuously watch your IT environment and your controls, flagging new risks and re-running evaluations the moment something changes, so your team always works from a current view of the risk landscape.
          • AI-Based Summaries for Risk Records in IT Compliance
            Agentforce summarizes risk data, evaluations, and treatment history into a concise narrative for compliance leaders. This helps your team analyze potential impacts and understand current mitigation strategies without opening every related record. By providing clear rationales and suggested next steps, these summaries simplify stakeholder communication and help you decide treatment plans.
          • Work with Risks for IT Compliance
            Capture, score, and treat the risks facing your IT environment. Build a reusable scenario library so your team logs threats consistently, gather evaluations from the stakeholders who know each risk best, map risks to the controls and policies that protect against them, and assign the treatment plans that drive each one to closure.
           
          Loading
          Salesforce Help | Article