Changing Engagement-Level Residual Risk

Objective

After completing this lesson, you will be able to describe how to change the residual risk of a control-based engagement risk assessment project.

Making Changes to Engagement-Level Residual Risk

If an engagement has an original residual risk rating based on its issues and the engagement has not yet been approved, you can change the engagement project's residual risk rating.

  • To change the residual risk rating of an engagement project, you must be a member of its Project Owner project group or of the Supplier Risk Engagement Governance Analyst global user group.

Keep in mind the following restrictions on making changes to an engagement project's residual risk rating:

  • By default, you can edit the residual risk if the engagement has at least two associated issues with different residual risk ratings. However, sites can be configured to remove this restriction.
  • The number of levels you can change the rating either up or down is determined by your site's configuration.
  • If the engagement does not have a residual risk rating based on its issues, there is no way to edit the Residual Risk field to set it manually.

Change the Residual Risk of an Engagement

In this simulation, you will change the residual risk of a control-based engagement risk assessment project.

Log in to track your progress & complete quizzes