[GRC-RM FAT] Add fields on Risks

Inherent risk -Risk have no control, it accessed before and after implementation of control risk Residual -remaining after implementation of control