{"meta":{"title":"Running the secret risk assessment for your organization","intro":"Determine your organization's exposure to leaked secrets by generating a secret risk assessment report.","product":"Security and code quality","breadcrumbs":[{"href":"/en/code-security","title":"Security and code quality"},{"href":"/en/code-security/how-tos","title":"How-tos"},{"href":"/en/code-security/how-tos/secure-at-scale","title":"Secure at scale"},{"href":"/en/code-security/how-tos/secure-at-scale/configure-organization-security","title":"Configure organization security"},{"href":"/en/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools","title":"Configure specific tools"},{"href":"/en/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools/assess-your-secret-risk","title":"Assess your secret risk"}],"documentType":"article"},"body":"# Running the secret risk assessment for your organization\n\nDetermine your organization's exposure to leaked secrets by generating a secret risk assessment report.\n\n## Generating an initial secret risk assessment\n\n1. On GitHub, navigate to the main page of the organization.\n2. Under your organization name, click the ** Security and quality** tab.\n3. In the sidebar, under \"Security\", click ** Assessments**.\n4. To generate the secret risk assessment, click **Scan your organization**.\n\n > \\[!NOTE]\n > If you haven't previously run a security risk assessment, this will also initiate a **code security risk assessment**.\n\n If you're an organization owner and you've opted in for email notifications, GitHub will send you an email to let you know when the report is ready to view.\n\n## Rerunning the secret risk assessment\n\n> \\[!NOTE]\n> You can only generate a secret risk assessment report once every 90 days.\n\n1. On GitHub, navigate to the main page of the organization.\n2. Under your organization name, click the ** Security and quality** tab.\n3. In the sidebar, under \"Security\", click ** Assessments**.\n4. Towards the top right side of the existing report, click **Rerun scan**.\n\nIf you're an organization owner and you've opted in for email notifications, GitHub will send you an email to let you know when the report is ready to view.\n\n## Next steps\n\nNow that you've generated a secret risk assessment report for your organization, learn how to interpret the results. See [Interpreting secret risk assessment results](/en/code-security/securing-your-organization/understanding-your-organizations-exposure-to-leaked-secrets/interpreting-secret-risk-assessment-results)."}