---
title: "Keep risks up to date with dynamic risks"
canonical: "https://support.appfire.com/space/RM/3714646207/Keep%20risks%20up%20to%20date%20with%20dynamic%20risks"
format: markdown
---
A risk based on security findings can change as new findings appear and existing findings are resolved. Dynamic risks let a risk work item continue tracking signals that match defined criteria instead of capturing only the findings that existed when the risk was created.

Use Dynamic risks when the underlying security condition needs to remain connected to changing source data between formal risk reviews.

## When to use this approach

Use a Dynamic risk when a risk represents an ongoing condition rather than a fixed set of findings.

For example, you might want a risk to continuously track open high-severity findings for a particular application, cloud environment, or asset. As matching signals are ingested, LiveRisk can associate them with the existing Dynamic risk.

## How it works

1. **[Connect a supported security source](https://appfire.atlassian.net/wiki/spaces/RM/pages/3459219866)****.**  
Ingest security findings from Wiz or Snyk.
2. **Define the signals that represent the risk.**  
Narrow the signals using criteria such as their source grouping, asset, title, or minimum severity.
3. **[Create a Dynamic risk](https://appfire.atlassian.net/wiki/spaces/RM/pages/3459318006/Signals#Create-a-dynamic-risk)****.**  
Create the risk using the criteria rather than treating the currently selected findings as a fixed set.
4. **Let LiveRisk backfill matching signals.**  
Existing open or in-progress signals that match the criteria are linked to the risk.
5. **Continue ingesting findings.**  
As new matching signals become available, LiveRisk can continue associating them with the Dynamic risk.
6. **Review changes to the risk.**  
Use the linked signals and your configured approval mode to determine how changes should affect the risk assessment and treatment.

## Result

The risk work item remains connected to the security condition it represents instead of becoming a snapshot of the findings that existed when it was created.

This reduces the need to manually rebuild the relationship between an ongoing risk and newly discovered findings.