Skip to main content
New Risk Analysis
VISO TRUST has rolled out an updated risk analysis: a new version of the risk model and a rebuilt Risk Analysis view. It’s now on for every organization, and the previous risk model is retired. You don’t need to enable anything.
The new risk analysis can’t be turned off. The previous risk model is no longer available.

​
What’s changing

  • A simpler calculation. Risk is calculated so it’s clear which factors directly affect your score.
  • The math is visible. Each risk dimension shows a step-by-step Risk breakdown from impact through residual risk. Each control also has its own Risk breakdown panel showing exactly how its weight and the assurance of its evidence produced the mitigation it earned.
  • History over time. Risk analysis is retained per assessment, so you can select a past assessment and see how your analysis has changed.
Your risk methodology doesn’t change: impact, likelihood, control mitigation, and residual risk mean what they’ve always meant. See Risk Analysis for a full walkthrough of the new view.
History only accrues from the first assessment that runs under the new model.

​
What happens when it turns on

  • Completed assessments keep their scores. Every assessment that has already completed keeps the scores it was calculated with, under the model that calculated them. Your history stays intact.
  • In-progress and new assessments use the new analysis. Any assessment still running when the new analysis turns on, and every assessment started afterward, uses the new model and the new Risk Analysis view.
  • Your portfolio is recalculated in the background. VISO TRUST re-runs the risk model across every relationship to produce its current score under the new model. This does not overwrite any completed assessment.
  • The difference surfaces as a pending change. Where the new model produces a different result than a relationship’s last completed assessment, it appears as a Risk model updated pending change rather than silently changing the score. You decide when to bring each relationship current.
To bring a relationship onto the new analysis, run Update assessment from the relationship. Until that assessment completes, the relationship keeps showing its most recent completed assessment.
Once a relationship has a completed assessment on the new model, the risk analysis sections of its older assessments can’t be opened. Selecting one shows “Risk analysis history is not available for some older assessments.” The assessment summary and questionnaire sections for those assessments still work.

​
FAQ

Do I have to do anything? No. The new risk analysis is already on for your organization. Will my existing risk scores change when it turns on? No. Completed assessments keep their scores. Affected relationships flag a Risk model updated pending change, and scores only move once you run an assessment update. Can I turn it off? No. The previous risk model is retired. Where do I see what changed on a specific vendor? Open the relationship’s Risk Analysis after an assessment update completes.