---
schema_version: "1"
id: 4b6b59068c0f51469bb4a692bb115358433be2f190559941d552231bf99b2d12
title: Work with Risks for IT Compliance
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_setup_work_with_risks.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_setup_work_with_risks.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a7bcf0d5927c07cfa3fe373285b2d45cbf9b66d26ccd366622c645a4bbfd8fde
description: Capture, score, and treat the risks facing your IT environment. Build a reusable scenario library so your team logs threats consistently, gather evaluations from the stakeholders who know each risk best, map risks to the controls and policies that protect against them, and assign the treatment plans that drive each one to closure.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Work with Risks for IT Compliance

Capture, score, and treat the risks facing your IT environment. Build a reusable scenario library so your team logs threats consistently, gather evaluations from the stakeholders who know each risk best, map risks to the controls and policies that protect against them, and assign the treatment plans that drive each one to closure.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

- **[Create Risk Scenario for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_create_risk_scenario.htm&release=264.0.0&type=5)**  
    Build a centralized library of reusable risk templates to ensure consistency across your organization. Creating risk scenarios saves time and standardizes the data when your compliance team registers new vulnerabilities.
- **[Register Risks](https://help.salesforce.com/s/articleView?id=service.it_srvcs_create_risks.htm&release=264.0.0&type=5)**  
    Log vulnerabilities and threats in your IT environment by creating risk records. You can quickly create a risk using a predefined risk scenario, or create a risk directly from the Risks tab in the IT Compliance app.
- **[Map Risks to Policy Clauses and Controls for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_map_risks.htm&release=264.0.0&type=5)**  
    Link risks to the policy clauses they could violate and the controls that mitigate them. Mapping policy clauses to risks helps teams track which corporate rules are threatened by each risk, while mapping controls to risks helps teams track how effective your safeguards are.
- **[Define and Apply Risk Scope for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_create_risk_scope.htm&release=264.0.0&type=5)**  
    Define the categories of IT assets, business units, and vendors your team uses to scope risks, and then associate the right scope to each risk record so its impact is grounded in real-world context.
- **[Create a Risk Evaluation for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_create_risk_evaluation.htm&release=264.0.0&type=5)**  
    Assess the severity of a registered risk by creating a risk evaluation. Gather structured feedback from stakeholders on a threat's potential impact and likelihood to automatically calculate your inherent and residual risk scores.
- **[Create a Risk Assessment for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_create_risk_assessment.htm&release=264.0.0&type=5)**  
    Send a structured survey to stakeholders so they can weigh in on a risk's likelihood and impact. The responses drive the evidence-based scoring your team needs to make confident treatment decisions.
- **[Risk Treatment for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_setup_work_with_risks_action_plan.htm&release=264.0.0&type=5)**  
    After a risk is scored, your team picks a strategy for handling it, such as mitigating the threat, accepting it, transferring it to a third party, or avoiding the activity that creates it. Each strategy can be associated with an Action Plan Template that turns the decision into a concrete set of tasks.
- **[View the Risk Heat Map](https://help.salesforce.com/s/articleView?id=service.it_srvcs_risk_heat_map.htm&release=264.0.0&type=5)**  
    The risk heat map plots each risk on a likelihood-by-impact grid, giving leaders and compliance managers an at-a-glance view of where the most severe threats sit and which trends to watch.