When creating your Risk Assessment Type you are required to configure both a Suggested Risk Factor and a Mitigation Risk Factor.
A Suggested Risk Factor is the scoring in which a mitigation will be suggested if the risk factor is above the given score.
A Mitigation Risk Factor is the scoring which will then trigger a mitigation if the risk factor is above this score.
This applicable to both manual and automated scoring.
Relevant for: Administrators / Managers