Move risks through their full lifecycle in one place, from spotting a new threat to closing the loop. Capture risks from a curated scenario library, score them automatically with the Business Rules Engine, link the controls and policies that mitigate them, and assign treatment plans your team can act on.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, and Unlimited
Editions with Agentforce IT Service. |
- Risk Management Workflow for IT Compliance
Follow how a compliance team identifies, evaluates, and mitigates compliance risks that threaten regulations and policies. See how risks are linked to controls that reduce risk severity, and how risk scores update dynamically as controls pass or fail tests.
- How Risk Scores Are Calculated for IT Compliance
Agentforce IT Service calculates two scores for every risk—an inherent score that reflects raw severity before any safeguards, and a residual score that shows what remains after mapped controls are factored in. Both scores are calculated automatically by the Business Rules Engine using the active risk scoring expression set.
- Continuous Risk Monitoring for IT Compliance
Background agents continuously watch your IT environment and your controls, flagging new risks and re-running evaluations the moment something changes, so your team always works from a current view of the risk landscape.
- AI-Based Summaries for Risk Records in IT Compliance
Agentforce summarizes risk data, evaluations, and treatment history into a concise narrative for compliance leaders. This helps your team analyze potential impacts and understand current mitigation strategies without opening every related record. By providing clear rationales and suggested next steps, these summaries simplify stakeholder communication and help you decide treatment plans.
- Work with Risks for IT Compliance
Capture, score, and treat the risks facing your IT environment. Build a reusable scenario library so your team logs threats consistently, gather evaluations from the stakeholders who know each risk best, map risks to the controls and policies that protect against them, and assign the treatment plans that drive each one to closure.
