---
title: "Candidate risks"
canonical: "https://support.appfire.com/space/RM/3505291413/Candidate%20risks"
format: markdown
---
The *Candidate risks* tab contains AI-suggested risks that are waiting for review. From here, you can:

- Review a candidate and its proposed risk information.
- Accept a candidate to create a risk work item.
- Dismiss a candidate and provide a reason.

Open LiveRisk in the Jira space, then click the **Candidate risks **tab.

## Before you begin

- The** ***Candidate risks* tab requires **Manage LiveRisk Risk Register **permission. The **LiveRisk Manager** and **LiveRisk Analyst** roles have this permission by default.

## Suggest risks with Rovo

You can ask Rovo to generate candidate risks from security findings on the [Signals](https://appfire.atlassian.net/wiki/spaces/RM/pages/3459318006)** **tab.

1. Narrow the signals using signal groups, assets, or search criteria.
2. Open **Actions** and select **Suggest risks**.

> ℹ️ If the **Suggest risks** button is disabled, hover over **Suggest risks** to see why it is unavailable. Possible reasons include:
> ℹ️ 
> ℹ️ - Rovo is not enabled on this site.
> ℹ️ - Add search text, select asset anchors, or select at least one signal group row to suggest risks.

Rovo uses the selected signal groups, assets, or search criteria to propose candidate risks. The suggestions are added to **Candidate risks** for review.

![Rovo panel showing candidate risks generated from the selected signals.](media://7f6758b7-4453-4527-8bf5-b50b9598d643)

## Candidate queue

![Candidate risks tab showing asset filtering, candidate fields, and candidate statuses.](media://3170676d-bf72-4e8e-b29a-5ca30b8a2c77)

You can filter the list of candidate risks using the **Asset** pulldown to display only candidates associated with the selected asset. 

Each row shows:

- **Name**
- **Assets**
- **Priority** is a lozenge (**Critical**, **High**, or **Medium**) derived from the highest impact among the candidate's assets.
- The **Critical/High** signal count
- **Owner**
- **Status**: Candidates can be **New**, **Active**, or **Dismissed**. After you accept a candidate, its status changes to **Risk issue created**, and an **Open issue** link becomes available. Dismissed candidates are hidden by default. To display them, turn on **Show dismissed candidate risks**.

### Review a candidate

Select a candidate's name to open its details. The candidate details include:

![Appfire LiveRisk, a candidate risk pop-up with Accept and Dismiss options.](media://3db22893-0b53-4fd7-9dc9-e03e8eb35489)

- **Overview**: **Assets**, **Priority**, **Critical / High signals**, **Owner**, and the **Created**, **Updated**, and **Last signal change** timestamps.
- **Proposed Risk Fields**: a **Field** and **Value** table of how the Risk issue will be created, including **Title**, **Severity**, **Source**, **Status**, and the proposed risk response (**Avoid**, **Reduce (Mitigate)**, **Retain (Accept)**, or **Transfer**).

A dismissed candidate also shows its **Dismissal reason** and **Dismissed at** time.

### Accept or dismiss

1. To accept the candidate, click **Accept**, then click **Create Risk**. The Risk issue is created with the proposed fields and the candidate is marked as having a risk issue.
2. To dismiss a candidate, click **Dismiss**.** **Enter a **Dismissal reason**, and click **Dismiss**.

> 📝 A site administrator can clear this queue from the admin panel with **Delete candidate risks** (run per space). Additionally, a site administrator can run **Delete all candidate risks** which clears every risk register space on the entire site. For more information, refer to **[Developer tools](https://appfire.atlassian.net/wiki/spaces/RM/pages/3655761999)**.