12.1.4.5.1.3.5 Object Details – Risks

The object details specific to process are (including the basic object details):

• Name: The name of the risk. Note that there is a 450 character limit per name.
• Identifier: The unique identifier of the risk. Note that there is a 255 character limit per identifier.
• Type: The type of the risk.
• Category: The category of the risk.
• Description: The description of the risk.
• Override Roll Up: Overrides automatic calculation of residual risk. If residual risk values are specified, this cell must have an “X”.
• Gross Risk Impact: The gross impact of the risk. Must be an integer.
• Gross Risk Likelihood: The gross likelihood of the risk. Must be an integer.
• Gross Risk Detectability: The gross detectability of the risk. Must be an integer.
• Residual Risk Impact: The residual impact of the risk. Must be an integer. Note that Override Roll Up must have an “X” in the cell if this value is not empty.
• Residual Risk Likelihood: The residual likelihood of the risk. Must be an integer. Note that Override Roll Up must have an “X” in the cell if this value is not empty.
• Residual Risk Detectability: The residual detectability of risk. Must be an integer. Note that Override Roll Up must have an “X” in the cell if this value is not empty.
• Risk Analysis Justification: The analysis justification of the risk.