--- title: Create or manage risks on a processing activity description: Add new risks or manage the risks that are automatically added to the processing activity from the assessment responses. Adding risks helps you manage processing activities using the risk-based approach. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/privacy-workspace/create-or-manage-risks-on-a-pa.html release: australia product: Privacy Workspace classification: privacy-workspace topic_type: task last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Use, Privacy Management, Governance, Risk, and Compliance] --- # Create or manage risks on a processing activity Add new risks or manage the risks that are automatically added to the processing activity from the assessment responses. Adding risks helps you manage processing activities using the risk-based approach. ## Before you begin Role required: sn\_privacy.analyst who owns the processing activity or sn\_privacy.manager ## About this task You can add or manage risks to a processing activity in the following ways: - Selecting risk statements: You can add existing risk statements to a processing activity. When you add a risk statements to a processing activity, the risks associated with that particular risk statement are added to the processing activity. - Selecting from the recommended risks: This option enables you to choose from a list of recommended risks based on the information object that is mapped to a processing activity. If an information object is mapped to one or more risk statements, and the same information object is mapped to a processing activity, the system recommends the corresponding risk statements. - Creating risks: You can create risks and add them to the processing activity. - Applying risks from entities: You can apply privacy-related risks on the processing activity from the related entity. ## Procedure 1. Navigate to **All** > **Privacy Workspace** > **Processing activities** > **All processing activities**. 2. Select and open the processing activity to which you want to add controls. 3. Click the Risks related list. 4. To add a risk to the processing activity, do one of the following.

Option	Description
To create a risk	Click New and fill in the form.For details see, [Create a risk](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-risk-management-workspace/t_CreateRisk.md).
To add a risk by using the existing risk statement	1. Click Add risk by risk statement. 2. Select the risk statements that you want to add. 3. Click Add.
To select a risk from the list of recommended risks	1. From the Add risk by risk statement list, select Recommend risks. 2. Click Add. Note: If a risk has already been added to a processing activity, then it does not appear in the list of recommendations.

## Result The mitigating controls are added to the processing activity. **Parent Topic:**[Using Privacy Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/using-privacy-mgmt.md)

Option	Description
To create a risk	Click New and fill in the form.For details see, [Create a risk](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-risk-management-workspace/t_CreateRisk.md).
To add a risk by using the existing risk statement	1. Click Add risk by risk statement. 2. Select the risk statements that you want to add. 3. Click Add.
To select a risk from the list of recommended risks	1. From the Add risk by risk statement list, select Recommend risks. 2. Click Add. Note: If a risk has already been added to a processing activity, then it does not appear in the list of recommendations.