Manual Adjustments for Risk Area Score
Third-Party Management
Written by Michelle Henley
Updated at August 16th, 2024
Table of Contents
To manually adjust the Risk Area Score, the user needs the following privilege:
| Privilege Name | Description |
|---|---|
| Adjust engagement risk score | It gives users the capability to adjust risk area scores assigned to third-party engagements. |
Increasing/Decreasing Risk Area Score
From the Risk Score tab within the request, click on the Down icon to the left of the Risk Area that needs to be adjusted.
Click Add Adjustment at the bottom of the Total Criteria Risk Score.
After Add Adjustment is clicked, the Risk Adjustment Score modal will open.
First select Type of adjustment.
- If Review type is selected the user can enter positive or negative numbers to the Score Impact field.
- If Mitigation type is selected the user can enter only negative numbers to the Score Impact field.
Then select one or more Categories.
Next, select + to increase to the score or - to decrease the score.
Enter the Number into the Score Impact field to either increase or decrease the score.
The Score Impact field allows numbers with up to one decimal point to be entered, For example, 1.3 or -.5. The max number that can be added is 5.0 and the minimum is -0.1.
Risk Area Scores are on a scale from 0 to 5. 0 being None and 5 being High.
The Risk Area Score can never be higher than 5 or lower than 0. Therefore, when adjusting a score, if a number is added that makes the total higher than 5, 5 will still be displayed as the Risk Area Score. Likewise, any adjustments below zero (negative numbers) will still be shown as 0.
As an option, the user can add additonal comments and/or supporting documentation. Click, Save and Close.
Once the changes are saved, the new adjustment will be displayed under Risk Score Adjustments.
Total Criteria Risk Score will still display the original score. The Risk Area Score will display the adjusted score.
In cases where more than one adjustment is made to a Risk Score Area the following rules apply:
If approver A adjusts the score to be higher than 5 or lower than 0 and approver B makes a second adjustment, the adjustment is made from the current Raw Score, not the adjusted Risk Score Displayed in the UI.
For example:
The original Risk Area Score is 4. Approver A makes an adjustment of +3. Now the score is 7, but the UI will only ever show a maximum score of 5.
Approver B makes a second adjustment of -1. The second adjustment is made from the true score of 7. The score is now 6, but the UI will still only show a maximum score of 5.
Editing Risk Score Adjustment
To edit a manual adjustment, click on the Type in the first column.
Next, click the Kebab menu in the top right corner of the pop-up box and select Update.
Make any applicable changes to the adjustment and click Save and Close.
Deleting Risk Score Adjustment
To delete a manual adjustment, click the Delete icon on the far right of the manual adjustment entry.
Select Confirm to delete the manual adjustment.
Risk Score History
Note: Risk Score History will only be available after the release of this feature for new requests and, for existing requests, if any updates are made.
To view the entire history of all changes made to the Risk Area Score, click the Clock icon in the top right corner.
The initial Risk Area Scores, Engagement Risk Score and Level will be recorded in in the Risk History at the time the request is submitted.
Subsequently, any new, updated, or removed manual adjustments will be recorded. When and who made the adjustment is noted along with the updated scores.
Any updates that are made the request that result a change to any of the Risk Area scores will also be recorded in the Risk History.
Risk Score Version Comparison
Risk Score Version Comparison allows users to view and compare historical changes within a request. Note: Risk Score Version Comparison will only be available after the release of this feature for new requests and, for existing requests, if any updates are made.
A checkbox is displayed to the left of each action listed in the Risk Score History.
In order to compare versions, the user must select two checkboxes. Then, click Compare.
From there, the Risk Score Revision Comparison page will open in a new tab.
Using the Key in the right-hand upper corner, the user can determine which fields of the risk score were removed, added, or unchanged.
