Add or modify risk and impact conditions
You can define risk calculation rules on which the risk and impact of a change are calculated. Best Practice - Change Risk Calculator is activated by default in the base system.
Before you begin
Role required: itil_admin or admin
About this task
Risk Conditions are run against the change request based on their Order field from lowest to highest. The first Risk Condition that matches the change request record is applied. All subsequent risk conditions are then ignored whether they match or not. A risk calculation rule is defined with two elements.
- Conditions that can evaluate to true or false. You can use a condition builder or write a script.
- Risk and Impact field value settings when the conditions evaluate to true.
Procedure
Navigate to All > Change > Administration > Risk Conditions.
Click New, or click the risk condition to modify.
You can also edit risk conditions from within the Change Request form by opening the form context menu and clicking Edit Risk Conditions.
Complete or update the form, as appropriate.
| Field | Description |
|---|---|
| Name | Enter a descriptive name for the rule |
| RiskImpact | Select a value for one of these fields. The selection determines which field to update based on this risk calculation. |
| Active | Select the check box to use the rule. |
| Order | Enter the order in which this risk calculation is evaluated. Rules with lower numbers are evaluated first. If there are two or more rules with differing orders, the rule with the lowest order is evaluated and the others are ignored. |
| Use advanced condition | Select the check box to enter a script instead of using the condition builder. |
| Use script values | Select the check box to hide the Risk and Impact fields. The script specifies the risk and impact values. |
| Description | Enter a description of how this risk calculation is applied. |
- Specify the rule based on your selected rule method.
| Choice | Action |
|---|---|
| Condition | Use the condition builder to add conditions. It is hidden if you selected Use advanced condition. |
| Use advanced conditions | Write the script in the Advanced condition field using standard business rule syntax. The condition must set the global variable answer to true or false. |
| Use script values | Write the script in the Script values field. Specify the Risk and Impact values in the script.The conditions are set using either the condition builder or an advanced condition script. |
In the following example, the **Advanced condition** script first determines whether the CI is a business service. If so, the script identifies whether the **Business criticality** value is **1 - most critical** or **2 - somewhat critical**. If it does, it sets the global variable answer to *true*.
Critical business service risk condition
When the **Advanced condition** script returns *true*, the script in the **Script values** field sets the change request **Impact** and **Risk** values based on the **Business criticality** value.
Parent Topic:Risk conditions and calculation
Related topics