risk-assessment-summarization

A risk assessment summary aggregates inherent versus residual risk scores across business units. It generates heat map data and trend insights to measure control effectiveness, enabling faster executive decision-making and cross-unit posture comparisons.

Generating a risk heat map from ServiceNow GRC involves querying sn_grc_risk and sn_risk_event tables to plot likelihood against impact. This visualizes inherent versus residual risk scores, highlighting areas where mitigation controls effectively reduce exposure.

To compare inherent versus residual risk across business lines, aggregate scores from sn_grc_profile and sn_grc_item. This comparison measures control effectiveness by highlighting the gap between original exposure and mitigated risk for each unit.

A quarterly risk posture review requires querying ServiceNow GRC tables including sn_grc_risk, sn_risk_definition, sn_grc_issue, and sn_compliance_control. Aggregating this data computes risk trends and generates mitigation recommendations for governance reviews.

Summarizing risk assessments does query the sn_risk_event table to track risk occurrences over time. Combining this event data with sn_grc_risk records allows the summary to identify historical trends and provide accurate mitigation recommendations.