What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

A published Risk Assessment Methodology (RAM) is considered active and in use. To prevent inconsistencies in ongoing assessments, the system prohibits edits to the RAM's factor guidance while there are active assessment instances. The system enforces that all assessment instances generated from that RAM must be in a terminal state, specifically 'Closed' or 'Canceled', before any modifications to the guidance are permitted. This ensures that changes do not affect in-flight assessments, maintaining data integrity for risk calculations.

A. 'Monitor' is a state for a risk record, not a risk assessment instance record. Assessment instances have states like Open, Closed, or Canceled.
C. Deleting records is not required. Simply moving them to a closed or canceled state is sufficient to allow editing of the RAM.
D. The states of assessment instances are the critical condition that determines whether a published RAM can be edited. They are highly relevant.

1. ServiceNow Product Documentation, "Edit a risk assessment methodology". This document explicitly states, "You can only edit a RAM when all the assessment instances are in the Closed or Canceled state."

2. ServiceNow GRC: Risk Management Courseware, "Risk Assessment Methodologies". The course material emphasizes the controls on published RAMs to ensure assessment consistency.