Modeling conventions
The objective of Risk Management is to identify and assess potential threats to the organization. Risks can be related to company assets. Risk assessments can be generated automatically at scheduled times or event-driven. The users responsible receive a task with information about the activities to be performed. By analyzing risks and risk assessments, the company can assess if action is required. The central objects of risk management are risks and risk assessments. Risk assessments are generated only for risks that are enabled for Risk Management by setting the Risk Management-relevant attribute to true.