---
schema_version: "1"
id: 62a623fab268b3e0ba39f7893e6b9cd2788f1a0ddc06f7d47656902c6726b4d8
title: Configure Risk Management for IT Compliance
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_configure_risk_mgmt.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_configure_risk_mgmt.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 56896d8da2440309c54618295048b8f0e08b9fb96fb5f0755c665d76a21e6b51
description: Configure the features for risk management workflows in IT Compliance and turn on the default scoring expression set so every risk your team registers gets an automatic inherent and residual score.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Configure Risk Management for IT Compliance

Configure the features for risk management workflows in IT Compliance and turn on the default scoring expression set so every risk your team registers gets an automatic inherent and residual score.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d20900e74">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d20900e74 ">To enable foundational services, activate Risk Management, and assign permission
              sets:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d20900e74 ">Compliance Admin permission set</td>

          </tr>
        </tbody>
      </table>

Risk scoring gives your team a standardized, quantitative way to measure the severity of threats facing your organization. Each risk gets an inherent risk score (the raw threat level before any safeguards) and a residual risk score (the threat level that remains after mitigating controls are applied).

## Enable the Business Rules Engine

Turn on the Business Rules Engine so Salesforce can automatically calculate inherent and residual risk scores from the criteria you define.

1. From Setup, in the Quick Find box, enter Expression Sets, and then select **Expression Sets**.
2. Confirm that the **Expression Sets** list view is accessible. If it isn't, the Business Rules Engine isn't enabled in your org yet.
3. To enable the Business Rules Engine, follow the steps in [Get Started with Business Rules Engine](https://help.salesforce.com/s/articleView?id=ind.get_started_with_business_rules_engine.htm&language=en_US).

## Enable Context Services

Turn on Context Services so the Business Rules Engine can pull the right risk data into each scoring calculation.

1. From Setup, in the Quick Find box, enter Context Service, and then select **Context Service**.
2. Turn on the **Context Service** toggle, and then refresh your browser.
3. Confirm that a **Context Definitions** tab now appears in your org.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-it_service-264-0-0-production-enus/0a574a10-4c7a-4681-aacf-0767f8beaad4/images/icon_note.png)

Note Risk-specific context definitions appear after you activate Risk Management in Salesforce Go in the next task.

## Activate Risk Management in Salesforce Go

Turn on Risk Management and Risk Scoring in Salesforce Go, activate the default risk scoring expression set, and assign permission sets so your admins and compliance team can start managing risks.

1. On the Salesforce Go page, click the **Features** tab, and then search for and select **Accelerate Trust with Unified Risk and Compliance**.
2. Next to **Risk Management**, click **Set Up**.
3. Turn on the **Risk Management** toggle.
4. Click **Manage User Access**, and then assign the IT Compliance permission sets to the administrators who configure risk scoring and to the compliance users who manage the risk lifecycle.
5. Turn on the **Risk Scoring** toggle.
6. From Setup, in the Quick Find box, enter Expression Sets, and then select **Expression Sets**.
7. Open the default risk scoring expression set, open its version, and click **Activate**.
8. Return to the **Risk Management** settings in Salesforce Go and refresh the page so Salesforce picks up the active expression set.
9. Configure the risk scoring parameters to match your business requirements.