Configure Secondary Risk Matrix
Overview
Administrators can now define and configure a Secondary Risk Matrix alongside the existing Primary Risk Matrix. This enables organizations to capture risk values against an additional risk framework — for example, to support both negative and positive consequence assessments, such as opportunity risk, within the same environment.
The Secondary Risk Matrix is configured independently of the Primary Risk Matrix. Changes to one matrix do not affect the other.
Enable the Secondary Risk Matrix
Enable the Secondary Risk Matrix at the company level to make the configuration options available.
Procedure
- Navigate to Admin → Business Rules → {Your Company}.
- Locate the Enable Secondary Risk Matrix setting.
- Select the checkbox for the setting to enable.
- Click Save.
Once enabled, the secondary matrix configuration options become available in the Business Rules area.
Note: When the Enable Secondary Risk Matrix is disabled/unchecked, the Edit Secondary Risk Matrix setting option is unavailable under the Operations section.
Configure Custom Terminology
If your organization uses different terminology for the secondary matrix, rename the label to match your preferred naming convention. This change is reflected throughout the application wherever the secondary matrix is referenced.
Procedure
- Navigate to Admin → Business Rules → {Your Company} → Terminology.
- Locate the Secondary Risk Matrix entry.
- Enter your preferred name in the text field — for example, Opportunity Risk Matrix or Positive Risk Matrix.
- Click Save.
Configure the Secondary Risk Matrix
Define the Likelihood levels, Consequence levels, and Risk Heat Map for the secondary matrix. This configuration determines the risk values the system applies automatically when users select a combination of likelihood and consequence.
Procedure
- Navigate to Admin → Business Rules → {Your Company}.
- Click Edit Secondary Risk Matrix.
- Configure the three matrix components.
- Click Save to apply the configuration.
