---
title: Association of entities at any level of a risk statement
description: You can associate entities, entity types, and indicator templates, at any level of the risk statement hierarchy. Creating this association is useful for risk managers while assessing risks.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-risk-management-workspace/associate-entity-types-at-any-level-of-risk-stmt.html
release: australia
product: GRC: Risk Management Workspace
classification: grc-risk-management-workspace
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Risk hierarchy and scoring, Manage risks, risk statements, and risk frameworks, Explore, Risk Management, Governance, Risk, and Compliance]
---

# Association of entities at any level of a risk statement

You can associate entities, entity types, and indicator templates, at any level of the risk statement hierarchy. Creating this association is useful for risk managers while assessing risks.

All organizations maintain a standardized risk taxonomy. This taxonomy is organized into hierarchies and sub-hierarchies that enable the right level reporting of risk to the appropriate stakeholders. Also, depending on the user who is assessing the risks, the level at which the risk may be assessed is different. For example, enterprise risks are assessed at the top level while detailed risk and control assessments are done at the bottom-most level of the risk hierarchy. With the latest release, users can now associate entity types or entities along with indicator templates at any level of risk statement hierarchy. Therefore, if a customer wants to perform a top-down risk assessment, they can do so by mapping the company to the top-level risk statement hierarchy. They can also perform the traditional bottom-up risk assessment by applying the lowest risk statement to the business units or lines of business. The bottom-most or lowest level is also known as the leaf level. This flexibility to associate entities to risk at any level is useful for enterprise risk managers as it helps them perform the top-down risk assessments.

The following figure shows the risk statement form where users can associate entities to create risks.

\[Omitted image "associate-entities-to-rs.png"\] Alt text: Form where the users can associate entities to risk statements at 0 level

**Parent Topic:**[Risk hierarchy and scoring](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-risk-management-workspace/risk-hierarchy-scoring.md)