After adding one or more Assets to the Assessment, you can add or remove Risks from each Asset.

By default, when adding an Asset to the Assessment, all Risks already defined agains that Asset will be included in the Assessment. You can then add or remove Risks by first selecting an Asset in the Asset list, click the Risks tab and use the ‘+’ and ‘X’ buttons to add or remove risks.

When clicking the ‘+’ button you will be presented with a Threat selection dialog:

Select one or more Threats and click OK. After that, you can proceed to assign Risk Owners and perform the Risk Evaluations against the Risks.