Open Risk Management, then Configuration. These lists are the choices on the risk, control, and non-conformity records.
The lists
Changing a list changes the choices on new and edited records. It does not rewrite an assessment you have already saved.
- Risks. Types, sources, and statuses, plus common threats you want people to pick from.
- Controls. Categories, statuses, effectiveness options, and monitoring frequency.
- Non-conformities. Sources and statuses.