Recommendations identify the measures needed to address the scenario and support its target assessment. Open the risk on its parent demand and use Recommended controls.
Link a measure
Choose Recommend control. The selector separates Workspace policy records from the Control catalog and provides source and text filters. Inspect the record's name, reference and context, then use its Add action.
Workspace choices can include policies and their elements. Catalog choices provide reusable control definitions. Availability depends on the workspace's visible records; an empty result should prompt a check of the source and search filters.
Adding a recommendation records a relationship to that measure. It does not implement the control or automatically improve the current risk score.
Describe additional work
Use Additional recommended controls for measures that are not adequately represented by the available records. Make the recommendation actionable: describe the change, its scope and the expected effect on the scenario.
Save the assessment text and check the resulting links. Link actions have their own persistence and should not be treated as part of an unsaved narrative draft.
Connect recommendations to delivery
When the chosen response is Mitigate, create appropriate remediation plans. The target assessment should state which recommendations it assumes are successfully implemented and which residual limitations remain.