No mappings of risk are affected in any way; this is purely a change that affects underlying data, so won’t affect coverage, completeness of matrix reports, documentation and so on, except for the risk naming/numbering point mentioned below.
We are standardising the way that risks work in Axiom to be more like other pieces of information.
Instead of a risk having multiple versions for each topic that it belongs to, a risk will now work just like a process or control where it has one single version, mapped into multiple places.
Currently, risks in Axiom have a different version for each topic that they are mapped into. We did this so that you could score a risk (Likelihood and Impact values) differently in each place that you mapped it.
However, this approach has some limitations:
After our new update, one risk will have one set of scores, and you will be able to map this to multiple places. It will be mappable directly to rules in the new mapping interface, if you wish.
The upside is that a risk will now show a comprehensive view of each area where it’s relevant, and will display and be reported on in a way consistent with processes and controls in the system, making it easier to understand overall.
MI numbers may be affected; if a common risk had mappings in ten places before, it would have shown up as ten risks. Now, it will show up as one risk (with ten topic mappings).
We hope that this change will be a clear improvement in understanding and working with risks in Axiom, but if you do have any questions or problems arising from this, or would simply like to discuss it further, please let us know at support@axiomhq.com.