Project Risk Assessment using Advanced Risk Assessment
Manage your project risks by using the Project Risk Assessment capability. Risk administrators, projects managers, and risk owners can manage the complete project risk life cycle by using the Project Risk Assessment capability.
As your organization grows, it is important to perform risk assessments of your projects. Because each project is unique, it is important to customize the project risk management process according to the unique project requirements. Determining the right level of project risk management process constitutes the risk management plan. The project risk life cycle consists of phases such as project risk identification, project risk assessment, project risk mitigation, and project risk monitoring.
You can use Governance, Risk, and Compliance (GRC) Advanced Risk Assessment to assess your project risks. It is built on a strong risk assessment engine for projects with demanding risk management requirements. It gives efficient visibility and reporting of the project risk posture through aggregated project risk ratings and heatmaps. If a project risk threatens to affect the enterprise, you can report it to the enterprise risk team, which then defines the necessary mitigating actions.
Project risk assessment on the Project form requires the Project Portfolio Management plugin (com.snc.financial_planning_pmo) to be active, in addition to Advanced Risk Assessment. To enable the integration behavior, such as aggregate risk scores and retiring GRC risks when the PPM risk closes or is deleted, set the sn_risk_advanced.enable_advanced_risk_ppm_integration property to true. The property is false by default.
Benefits of the GRC and Project Portfolio Management integration for managers
Using this integration, Project Managers can do the following activities:
-
Identify the risks from a standard risk taxonomy.
-
View the risks for their projects within the Project form.
-
Identify and assess the risks from the Project form itself.
-
Assess the inherent and residual risks.
-
Elevate a project risk to an enterprise risk if the risk impacts the enterprise.
-
Calculate the roll-up risk scores across projects, programs, and portfolios so that the stakeholders can view this information.
-
Monitor the risk posture of a project through risk aggregation.
Note: Only the project risks that are assessed contribute to the final risk scores.
-
View the heatmap of the risks as well as understand the mitigating actions.
-
View the Project Risk Overview dashboard to get an overall risk posture.
Enterprise Risk Managers also benefit from the integration. They can do the following activities:
- View the project risks that affect the enterprise and take necessary action.
- Get an overall view of the enterprise-level risks and their nature at all levels.
Use case for the GRC and Project Portfolio Management integration
To understand the use case for this integration, consider the following scenario. An organization can have multiple projects. Some projects are complex and some are less complex. Risk management of complex projects may be aligned to ISO 31000 risk assessment standards. Complex projects require various activities such as risk identification, assessment, response, and monitoring. Less complex or simpler projects might require only simple assessments. The integration between Project Portfolio Management and Advanced Risk Assessment supports the risk assessment of project risks.
- Workflow of project risk assessment
To understand the integration of Project Portfolio Management and Governance, Risk, and Compliance risk management capabilities, it is important to understand the workflow of project risk assessment. - Configure Project Portfolio Management and Advanced Risk integration
Use the Project Integration Configuration form to set up the risk assessment. You have to select the risk assessment methodology, the right assessors and approvers, and the formula to roll up the risk scores and show the scores at a project level. - Assign project risks to stakeholders for assessment
Assign the project risks to the relevant stakeholder for assessment. You must manually assign the risks to the stakeholders. - Assess project risks using Advanced Risk Assessment
Assess the project risks by responding to predefined factors or questions. Arrive at a risk score for the project. - Elevate a project risk to enterprise risk
Elevate a project risk to an enterprise risk if the project risk has an impact on the enterprise.
Parent Topic:Governance, Risk, and Compliance
Related topics
---
title: Project Risk Assessment using Advanced Risk Assessment
description: Manage your project risks by using the Project Risk Assessment capability. Risk administrators, projects managers, and risk owners can manage the complete project risk life cycle by using the Project Risk Assessment capability.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/governance-risk-compliance/grc-risk-management-workspace/risk-and-ppm-better-together.html
release: brazil
product: GRC: Risk Management Workspace
classification: grc-risk-management-workspace
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 3
breadcrumb: [Integrate, Risk Management, Governance, Risk, and Compliance]
---
# Project Risk Assessment using Advanced Risk Assessment
Manage your project risks by using the Project Risk Assessment capability. Risk administrators, projects managers, and risk owners can manage the complete project risk life cycle by using the Project Risk Assessment capability.
As your organization grows, it is important to perform risk assessments of your projects. Because each project is unique, it is important to customize the project risk management process according to the unique project requirements. Determining the right level of project risk management process constitutes the risk management plan. The project risk life cycle consists of phases such as project risk identification, project risk assessment, project risk mitigation, and project risk monitoring.
You can use Governance, Risk, and Compliance \(GRC\) Advanced Risk Assessment to assess your project risks. It is built on a strong risk assessment engine for projects with demanding risk management requirements. It gives efficient visibility and reporting of the project risk posture through aggregated project risk ratings and heatmaps. If a project risk threatens to affect the enterprise, you can report it to the enterprise risk team, which then defines the necessary mitigating actions.
Project risk assessment on the Project form requires the Project Portfolio Management plugin \(com.snc.financial\_planning\_pmo\) to be active, in addition to Advanced Risk Assessment. To enable the integration behavior, such as aggregate risk scores and retiring GRC risks when the PPM risk closes or is deleted, set the sn\_risk\_advanced.enable\_advanced\_risk\_ppm\_integration property to true. The property is false by default.
## Benefits of the GRC and Project Portfolio Management integration for managers
Using this integration, Project Managers can do the following activities:
- Identify the risks from a standard risk taxonomy.
- View the risks for their projects within the Project form.
- Identify and assess the risks from the Project form itself.
- Assess the inherent and residual risks.
- Elevate a project risk to an enterprise risk if the risk impacts the enterprise.
- Calculate the roll-up risk scores across projects, programs, and portfolios so that the stakeholders can view this information.
- Monitor the risk posture of a project through risk aggregation.
**Note:** Only the project risks that are assessed contribute to the final risk scores.
- View the heatmap of the risks as well as understand the mitigating actions.
- View the Project Risk Overview dashboard to get an overall risk posture.
Enterprise Risk Managers also benefit from the integration. They can do the following activities:
- View the project risks that affect the enterprise and take necessary action.
- Get an overall view of the enterprise-level risks and their nature at all levels.
## Use case for the GRC and Project Portfolio Management integration
To understand the use case for this integration, consider the following scenario. An organization can have multiple projects. Some projects are complex and some are less complex. Risk management of complex projects may be aligned to ISO 31000 risk assessment standards. Complex projects require various activities such as risk identification, assessment, response, and monitoring. Less complex or simpler projects might require only simple assessments. The integration between Project Portfolio Management and Advanced Risk Assessment supports the risk assessment of project risks.
- **[Workflow of project risk assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/grc-risk-management-workspace/workflow-of-ppm-risk.md)**
To understand the integration of Project Portfolio Management and Governance, Risk, and Compliance risk management capabilities, it is important to understand the workflow of project risk assessment.
- **[Configure Project Portfolio Management and Advanced Risk integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/grc-risk-management-workspace/specify-approvers-for-proj-risks.md)**
Use the Project Integration Configuration form to set up the risk assessment. You have to select the risk assessment methodology, the right assessors and approvers, and the formula to roll up the risk scores and show the scores at a project level.
- **[Assign project risks to stakeholders for assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/grc-risk-management-workspace/assess-project-risk-using-ara.md)**
Assign the project risks to the relevant stakeholder for assessment. You must manually assign the risks to the stakeholders.
- **[Assess project risks using Advanced Risk Assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/grc-risk-management-workspace/assessing-proj-risk-by-projmanager.md)**
Assess the project risks by responding to predefined factors or questions. Arrive at a risk score for the project.
- **[Elevate a project risk to enterprise risk](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/grc-risk-management-workspace/Elevating-a-risk.md)**
Elevate a project risk to an enterprise risk if the project risk has an impact on the enterprise.
**Parent Topic:**[Governance, Risk, and Compliance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/r_WhatIsGRC.md)
**Related topics**
[About Project Portfolio Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/it-business-management/c_ProjectPortfolioSuite.md)
This file has no frontmatter.