Once the demand is accepted and its scope is clear, create the risk scenarios it needs to assess. Each risk combines a profile, inherent/current/target assessments, recommended controls and a documented response.
The following guides explain those steps in the current inline demand editor. Use the same assumptions and configured scales throughout an assessment, and save each risk before handing the demand to another reviewer.