Good Afternoon Tim,
Thank you for reaching out.
If you want to use out of box features from LeanIX for reporting on IT risk, I would recommend to use the Obsolescence Risk; Aggregated view.
If you need to report on more granular insights on risk as you said as a scoring of a type of risk, then you could add some single select fields to easily report on them in the views of your reports.
Before adding any new field be sure the governance for it and define who will be responsible to inform this information in LeanIX.

I wish you a great day.

Claire
 

Hi Claire,

Thanks for the response. 

I indeed need granular insights on the risks and want to score the risk. Is it a good idea to create a separate fact sheet and link it to the application? Or would do you score the risk at application level and/or on it component level? 

Today I create a excel file with the risk description, the impact description, probability score (1-5) and Impact score (1-5). The multiplication of probability and impact gives then the risk severity score. 

This score i plot on a heat map to visualize / report the highest risks. 

Is something like this possible in Leanix? 

Good Afternoon Tim,
I would recommend creating a risk section on an ITC level as we usually consider risk on the technical layer. You would create fields like you said such as Impact score, probability score
Then some automations might be done to bring the ITC risks to the application level ( through the relation ITC/App). it is a project that should be discussed into more details with our Technical Team or our Professional Services.
I would recommend to reach out to your Customer Success Manager to discuss further details and expected outcomes.