When you duplicate a risk-based authentication (RBA) policy, you create a policy with information that is identical to the original. You can edit the policy to customize it. The new policy is not assigned to any security domain until you manually assign it.
In the Security Console, click Authentication > Policies > Risk-Based Authentication Policies > Manage Existing.
Select the policy that you want to duplicate, and click Duplicate.
In the RBA Policy Basics section, enter a name for the new policy in the RBA Policy Name field, and make any other necessary changes to the new policy.