highbond_risk (Resource)

Example Usage

resource "highbond_risk" "framework" {
  objective_id  = highbond_objective.framework.id
  title         = "Exposure Risk"
  description   = "Exposure to air can lead to flu"
  risk_id       = "1"
  impact        = "high"
  likelihood    = "high"
  position      = 2
  force_updates = true // Create only with force update changes
}
resource "highbond_risk" "main" {
  objective_id        = highbond_objective.main.id
  title               = "Exposure Risk"
  description         = "Exposure to air can lead to flu"
  risk_id             = "1"
  impact              = "high"
  likelihood          = "high"
  position            = 2
  owner               = "Nandana Balaram"
  owner_user          = "asX9_ANya5sF6ixVBmys"
  framework_origin_id = highbond_risk.framework.id
  entities            = [highbond_entity.master.id, highbond_entity.me.id]

  custom_attributes {
    id    = "24382"
    term  = "Custom Attr 1"
    value = ["Cust"]
  }

  custom_factors {
    id    = "106387"
    term  = "Factor1"
    value = ["point1value"]
  }
}

Schema

Required

• description (String) A detailed description of the risk
• objective_id (Number) The ID of the objective

Optional

• assurance (Number) The level of assurance that the controls in place effectively mitigate risk to the business
• custom_attributes (Block Set) An array of custom attributes defined by the user that are available on this object (see below for nested schema)
• custom_factors (Block Set) An array of custom risk factors defined by the user that are available on this object (see below for nested schema)
• entities (Set of String) List of entities associated with risk
• force_updates (Boolean) Allows overriding top-level 'create_only' option.
• framework_origin_id (String) In the Projects app, a project risk can have a related counterpart in an associated framework. The framework_origin attribute allows you to associate an risk in a project with its related counterpart in a framework
• impact (String) A user configurable rating of the consequences of the risk occurring. The options available depend on the configuration of the project type
• inherent_risk (Number) The risk that an activity would pose if no controls or other mitigating factors were in place. Can also be referred to as the gross risk, or risks before controls, and can act as the baseline for your organization's risk tolerance or appetite
• likelihood (String) A user configurable rating of the probability of the risk occurring. The options available depend on the configuration of the project type
• owner (String) The person responsible for the risk. Specifying a person's name or email does not automatically send them an email notification about the risk
• owner_user (String) The unique identifier (UID) of the user. Specifies the user responsible for the risk. A value in this field will override any value provided in the owner attribute. Specifiying a user will automatically send them an email notification about the risk
• position (Number) The value that determines the order in which it is displayed in the index action. position must be a value between 1 and 2147483647
• residual_risk (Number) The risk that remains after controls are taken into account. Can also be referred to as the net risk or risk after controls
• risk_id (String) The reference number or code for the risk
• title (String) The title of the risk

Read-Only

• created_at (String) The timestamp identifying when the risk was created
• id (String) The ID of this resource.
• mitigation_ids (Set of String) The IDs of the mitigation
• updated_at (String) The timestamp identifying when the risk was updated

Nested Schema for custom_attributes

Optional:

• id (String) The ID of the custom attribute that this custom attribute value is for. Optional if term is included
• term (String) The user defined term used to identify the custom attribute. Optional if id is included
• value (Set of String) The value or values (for multiselect) to set this custom attribute to

Nested Schema for custom_factors

Optional:

• id (String) The ID of the custom risk factor that this custom risk factor value is for. Optional if term is included
• term (String) The user defined term used to identify the custom risk factor. Optional if id is included
• value (Set of String) The value to set this custom risk factor to