Featured guide
Create and assess a risk
Learn how to complete CIA and FAIR assessments, add controls, assign treatment actions and manage risk exceptions.
Read the guidePrepare contextual work with PurpAI
Use verified conversation context to prepare supported editable work without allowing PurpAI to silently save a governed record.
1. Understand contextual drafts
A contextual draft carries verified PurpleWASP context into an existing workflow so you do not have to re-enter information that is already known. The draft prepares the form; it does not create the final governed record by itself.
2. Prepare a Risk from a verified Asset
The current supported contextual draft starts from a selected Asset. After PurpAI has resolved one Asset, ask for a Risk to be created for it, optionally including scenario wording.
Example
Show me our Assets.
Open the fourth one.
Create a Risk for it about ransomware exposure.
PurpAI verifies the Asset again and opens the existing Create Risk workflow with that Asset selected. When scenario wording is supplied, it can be carried into the editable Risk description.
3. Review the draft before saving
Complete or verify the scenario, owner, assessment method and other required Risk inputs in the normal Risk workflow. The draft is assistance, not a management decision.
Nothing is saved automatically. The Risk exists only after an authorised user submits the ordinary PurpleWASP form successfully.
4. One-time draft behaviour
PurpAI draft context is intentionally short-lived and one-time. If the prepared draft is no longer valid, return to PurpAI and ask it to prepare the workflow again rather than relying on an old browser link.
5. Permissions still apply
Preparing a Risk draft requires the normal Risk write capability, and the source Asset must still be available to the user. PurpAI does not convert view access into write access.
Examples
- Create a Risk for this Asset.
- Create a Risk for the second one about ransomware exposure.
- Prepare a Risk for it due to supplier service outage.