Search

Evaluating the Inherent Risk of a Data Inventory record from the Data Inventory list page

Overview

From a newly created Data Inventory record, you must first evaluate Risk Severity and Risk Likelihood to enable the Risk Profile to calculate an Inherent Risk score for that record and include the data in the Risk Profile heat map chart of aggregate risk.

📋 Note: The Data Inventory record can be any of the following record types: System Record, Company Affiliate Record, or Third Party Record.
What you can do
✓Review the inherent risk score for a Data Inventory record
✓Review risk factors and define the inherent risk
✓Add context and explanation to your risk score selection
Reviewing the Inherent Risk Score

To review and confirm the inherent risk score for a Data Inventory record, follow these steps:

1

On the Data Inventory list page, locate the record you want to review.

📋 Tip: Use the Search field or the Filter options (1) to locate the record quickly.
Data Inventory list page showing the Search field and Filter options highlighted
2

In the Inherent Risk column, click the record's inherent risk score (2). The score can be High, Medium, Low, Incomplete, or Unavailable. Then click View Risk (3).

Data Inventory list page showing the Inherent Risk column with the inherent risk score and View Risk button highlighted
📋 Note: If the inherent risk score of a Company Affiliate or Third Party record shows as Incomplete, complete the business process or system records associated with it. The inherent risk score is calculated automatically once the required records are complete.
Data Inventory list page showing a Company Affiliate record with an Incomplete inherent risk score

The system navigates to the Risk & Assessments tab of the record.

Risk and Assessments tab of the Data Inventory record showing the Review Inherent Risk Score section
3

In the Review Inherent Risk Score section, click Review Score, and then select the record type to review.

Review Inherent Risk Score section showing the Review Score button and record type selector

The Review [record type] Risk modal appears.

Review Risk modal showing the record selector dropdown and risk review fields
📋 Note: This modal only appears if the Company Affiliate or Third Party record owns two or more system or business process records.
4

Select a record from the dropdown list, and then complete the following:

Review Risk modal with the record dropdown selected, showing the Risk Factors, Define Inherent Risk, and Explain Your Risk Score Selection fields
•Risk Factors — Review the risk factors identified for the record.
•Define the Inherent Risk — Set the inherent risk level for the record.
•Explain Your Risk Score Selection — Add context or justification for the score you selected.
5

Click Save & Close.

📋 Result: The updated inherent risk score is visible on the Data Inventory list page under the Inherent Risk column for the record.
TrustArc Data Mapping & Risk Manager  ·  Reviewing the Inherent Risk Score  ·  support.trustarc.com