---
sourceDocument: Yokohama Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/governance-risk-compliance

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Privacy risk management

# Privacy risk management {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

As users of Privacy Management, you can perform advanced risk
assessments with a limited set of features even if you do not have the complete license for Integrated Risk Management.

To prioritize the areas that need attention, risk assessment is performed by various
stakeholders and is embedded as part of different workflows in an organization. For example,
within Privacy Management, users must be able to identify the assets that pose
the highest risks and ensure appropriate levels of controls are implemented to mitigate those
risks. To address this need of risk assessment in other business units, a solution is
implemented to enable the users of Privacy Management to use the advanced risk
assessment capability, with limited features, without buying the Integrated Risk Management license for their risk management needs.  
The following are the key points to consider when users use the limited advanced risk assessment for their risk assessments.

* The lite users of other business units can only have two published [risk assessment methodologies](https://servicenow-prod.fluidtopics.net/trRQS6vsLOAPtnK7vQ0VSw "Configure a risk assessment methodology (RAM) in the Advanced Risk application so that you can assess the risks or objects in your organization.").
* [Automated factors](https://servicenow-prod.fluidtopics.net/8TxqCfvM_ggrdSAXg41Vig "Factors are questions that you can use to analyze risks. Factors appear on a risk assessment instance.") are available for use.
* Managing risk events and using the risk identification workflow are not available in limited risk assessments.
{#risk-assessment-as-lite-user__ul_llw_dvt_msb}
* **[Risk score rollup in Privacy Management](https://servicenow-prod.fluidtopics.net/Q7z~RsvOhBIsREBEdZ4w8A)**   
  When users of Privacy Management perform advanced risk assessments, they get the risk scores automatically rolled up.