---
schema_version: "1"
id: c4373950e08d45280656d24b185e099110afdca2a535477a54c457dd3559e98d
title: Create Risk Scenario for IT Compliance
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_create_risk_scenario.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_create_risk_scenario.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: b349ed0a6884ec9f9e62be19f97761621c83f531e430cf6053f848261df69a39
description: Build a centralized library of reusable risk templates to ensure consistency across your organization. Creating risk scenarios saves time and standardizes the data when your compliance team registers new vulnerabilities.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Create Risk Scenario for IT Compliance

Build a centralized library of reusable risk templates to ensure consistency across your organization. Creating risk scenarios saves time and standardizes the data when your compliance team registers new vulnerabilities.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d100382e74">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d100382e74 ">To create risk scenarios:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d100382e74 ">Compliance Admin permission set</td>

          </tr>
        </tbody>
      </table>

A risk scenario is a reusable template that describes a category of risk your organization faces, like phishing attacks, data retention failures, or supply chain breaches. Storing scenarios in the Risk Scenario Library lets your team apply the same definition, category, and source framework every time someone registers a new risk, so risks of the same type stay consistently classified across your Risk Register.

1. From App Launcher, go to the IT Compliance app and select **Risk Scenario Library**.
2. Click **Add** and then enter the Name, Description, Category, and the Source Framework.
3. Save your changes.

![Example: a phishing risk scenario](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-it_service-264-0-0-production-enus/0a574a10-4c7a-4681-aacf-0767f8beaad4/images/icon_example.png)

Example: a phishing risk scenario

Suppose your organization wants to standardize how it tracks the threat of phishing attacks across every business unit and vendor. You create a single risk scenario in the library with these values:

- Name: Phishing Attack
- Description: Attackers attempt to steal credentials or deliver malware by impersonating a trusted source through email, SMS, or messaging.
- Category: Cybersecurity
- Source Framework: ISO/IEC 27001:2022

From now on, anyone registering a phishing-related risk against a specific business unit, vendor, or asset can pick this scenario as the template. The risk record inherits the description, category, and framework from the scenario, so phishing risks stay classified the same way across your entire Risk Register, no matter who creates them or when.