Managing Risk Scenarios in .legal 🛡️

Risk doesn't sit in midair, it sits on something concrete.

That's why there's a, difference.

If you work with risk in terms of your processes, your assets or systems or your suppliers, it could be multiple different scenarios that are relevant for each of these examples.

So the right risk scenarios needs to be mapped to the right entities and afterwards you can start working with the risk.

So in .legal, you are able to work with risk scenarios in terms of different risk domains, but also on different levels such as legal entities, assets and processes.

Let me show you how.

When you have a risk area in the platform, the first thing you need to do is to look into which entities , have relevance for this area.

In my example, I look at my NIS2 risk, so it makes sense to add all entities that has relevance for my NIS2 risk, which in this case would be critical entities.

You can either find the entities in the risk area and add them from this list, or you can go to your, your asset list, for instance, find the assets that needs to be added and add it to a risk area.

From here, when you have a, operational list of multiple entities, it's possible to filter and see different types.

For instance, my assets that has relevance for NIS2 compliance.

On each of these I can now add multiple risk scenarios.

Simply select add risk scenarios and the catalog of risk scenarios that you have defined within a domain will be present.

You can add multiple scenarios at the same time and then you can start assessing the specific scenario.

So let's just make a real quick one here.

I will put a financial exposure and then I will select save.

Now this scenario has a high risk within this given assets and in the operational list it will now be shown as a high risk.

If there's a risk scenario that's relevant for each of these, you can make a, bulk assessment as well.

Select all your assets in the list and assess them all at once by selecting the risk scenario, selecting a score, consequence, description, so on, and assess.

Then each of these will get a new risk scenarios in terms of the bulk update.

This way you can work with multiple scenarios within a domain, but also on different types of entities, both processes, assets and legal entities, which could be for instance your vendors.