Set up Advanced Risk assessments properties

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 2 min. de leitura
  • Enable Advanced Risk Assessments (ARA) to confirm that risk‑based assessments and risk score roll‑up function correctly in the AI Risk and Compliance application.

    Antes de Iniciar

    Make sure that the Advanced Risk application is installed. You don't need to install the Advanced Risk application separately if you’re using AI Control Tower.

    If the Migrate to Advanced Risk Assessments property is already enabled, AI Control Tower uses the same configuration, and no further setup is required.

    Role required: AI Risk and Compliance Admin [sn_grc_ai_gov.ai_risk_and_compliance_admin]

    Por Que e Quando Desempenhar Esta Tarefa

    Advanced Risk Assessments (ARA) is a system-level configuration in AI Risk and Compliance that enables modern, risk-based assessment capabilities, including aggregated risk scoring across AI assets. This setting determines whether the platform uses legacy risk calculations or the Advanced Risk Assessments framework, which is required for risk score roll-up and risk aggregation in dashboards. Enabling this property is a one-way action and should be planned carefully during initial setup.

    Importante:

    After you enable the Migrate to Advanced Risk Assessments property, you can’t revert to legacy risk calculation. This property is set to No by default.

    To confirm risk-based assessments on AI assets and risk roll-up function correctly in AI Risk and Compliance, the Migrate to Advanced Risk Assessments property must be enabled. If the property is set to No, AI Risk and Compliance doesn't consider risk score roll-up.

    When Migrate to Advanced Risk Assessments is set to Yes:
    • Supports risk‑based assessments for AI assets.
    • Publish default Risk Assessment Methodologies (RAMs) and create and use custom RAMs.
    • Calculates aggregated risk scores by rolling up risk scores across AI assets.
    • Includes aggregated risk scores on the Risk and Compliance dashboards.
    When Migrate to Advanced Risk Assessments is set to No:
    • Supports risk‑based assessments for AI assets.
    • Risk score roll-up isn’t supported for risk-based assessments on AI assets. As a result, rolled-up risk scores aren’t displayed in the AI Risk and Compliance dashboards.

    Procedimento

    1. Navigate to All > AI Risk and Compliance > Risk Assessments > Properties.
    2. On the Advanced Risk Properties form, fill in the fields:
      Tabela 1. Automated metric definition form
      Properties Description

      Migrate to Advanced Risk Assessments

      [sn_risk_advanced.hide_risk_legacy_lifecycle]

      Enables the Advanced Risk Assessment (ARA) framework in the instance. When enabled, all risk assessments use Risk Assessment Methodologies (RAMs), advanced scoring, and rollups.

      Define risk appetite

      [sn_risk_advanced.risk_appetite_scale]

      Specifies how risk appetite is evaluated during assessments.

      Express risk appetite limits in

      [sn_risk_advanced.risk_appetite_analysis]

      Determines how appetite thresholds are expressed. Whether limits are qualitative, quantitative, or both.

      Enable Advanced Risk PPM Integration

      [sn_risk_advanced.enable_advanced_risk_ppm_integration]

      Enables integration between Advanced Risk and Project Portfolio Management (PPM).

      Number of days before which an email should be sent to review risk appetite

      [sn_risk_advanced.risk_appetite_review_notifcation]

      Defines advance notification timing for risk appetite reviews. Number of days before the review date that reminder emails are sent.

      Field from the risk table that will be displayed as the header for each risk in the focus mode of the risk assessment project

      [sn_risk_advanced.assessment_heading_risk_field_name]

      Controls which risk attribute is shown as the header in Focus Mode.

      This string contains the default column details for individual control assessments. The listed columns can be customized or modified as needed. The default columns include classification, weighting, status, and key_control.

      [sn_risk_advanced.grid_individual_control_assessment_columns]

      Defines the default columns shown when assessing individual controls.
    3. Set the Migrate to Advanced Risk Assessments property to Yes.
      Migrate to Advanced Risk Assessments property.
    4. Select Save.