Measure Risk Reduction After Remediation
After remediation is complete and validated, measure how much the remediation reduced risk.
Before You Begin
- Make sure that the connected source has scanned the remediated assets again, or that a TruConfirm assessment has run on the remediated findings.
- If you changed asset criticality or risk factors, recompute TruRisk so that the score reflects the change. See Recompute TruRisk.
Measure the Reduction
- On the Home page, check the Last Calculated time in the TruRisk Summary panel to confirm that the score includes the latest data.
- Review Score Change. Select the Settings icon to choose a comparison period that covers the remediation work.
- In the Business Entities chart, compare the TruRisk Score of the remediated entities with their risk appetite.
- Go to Risk Management > Risk Workbench, open the plan, and compare the Potential TruRisk Reduction with the current score. For plans in TruRisk Eliminate, review Plan Progress.
- Go to Risk Management > Findings and confirm that the remediated findings are no longer open.
Report the Result
Record the score before and after remediation, the business entities that moved within risk appetite, and the number of findings closed. To share the results on a schedule, use a dashboard report. See Working with ETM Dashboard.