Create a profile

Profiles are the records that aggregate GRC information related to a specific item. Profiles can exist for any particular item such as a business service, vendor, demand, software, contract, or any other record in the system. An item can only have one profile, but it can belong to many profile types. Profiles cannot be created for items that do not have a record in a table.

About this task

Note: If a new record is created, a new profile is not automatically generated. A new profile can be generated from the Related Link or from the profile type form. A new profile can also be created manually. If the profile is created manually and the new profile meets the conditions for a profile type, it is automatically related to that profile type.

Procedure

  1. Navigate to Risk > Profiles > Create New, or navigate to Risk > Profiles > Create New > My Profiles or All Profiles
  2. Click New.
  3. Complete the Profile form using the following table.
    Table 1. Fields on the Profile form
    Name Description
    Name* Sets the name of the Profile. If empty, the name is set to the name of the record to which the Profile applies.
    Owned by* Select the owner of the Profile.
    Applies to* Select the table and the document to which the Profile applies.
    Inherent Score Read-only field on the form section for Risk. Reports the inherent risk to the organization prior to any corrective action or mitigation efforts. See Scoring Risk on Profiles.
    Residual Score Read-only field on the form section for Risk. Reports the residual risk to the organization prior to any corrective action or mitigation efforts. See Scoring Risk on Profiles.
    Calculated Score Read-only field on the form section for Risk. Reports the actual score of the risk to the organization based on the inherent and residual scores and the compliance to controls used to mitigate the risks. See Scoring Risk on Profiles.
    Note: * indicates a mandatory field.
  4. Click Submit.