Hello Verinice Community,
I’ve recently started using Verinice for risk management, and I’m having a bit of trouble implementing the risk management process effectively within the tool. I’m trying to assess and manage risks for my organization, but I find it difficult to set up and track the risks, especially when I try to align them with the controls and mitigation actions.
Could anyone guide me on the following?
- How do I efficiently map risks to controls within Verinice?
- What are the best practices for tracking risk mitigation over time?
- Are there any tips for customizing the risk matrix to suit specific risk management needs?
I’ve gone through the documentation but still find some aspects unclear, especially when it comes to managing and reporting on risks at different levels of the organization.
Any advice or examples would be greatly appreciated!
Thanks in advance!
motivue