Single Control Attestation For multiple controls

[BhanuS856067857]

Hello Community ,

We have requirement where a client wants to update the status of multiple controls when a question in an attestation is answered as Yes/No.

Example: If a question in an attestation is answered as No then based on the response from the user, the status of multiple controls can be updated.

Has anyone faced this type of requirement for ServiceNow GRC Controls.

Thanks

[Matthew_13]

Hi my Friend,

Yes, this type of requirement is fairly common in GRC implementations and can be achieved, but it typically requires some configuration rather than being available out of the box.

When a user answers an attestation question, that response can be used to trigger automation to update related control records. The usual approach is to capture the Yes/No response and then use a Flow or Business Rule to identify and update the associated controls accordingly.

For example:

• If the response is “No,” the related controls can be moved to a status such as Failed, Ineffective, or Needs Review.

• If the response is “Yes,” the controls can remain Effective or be updated based on your control lifecycle model.

Also consider governance and auditability. In most cases, instead of directly updating control status, organizations create issues or tasks tied to the control so the change is tracked and reviewed.

So yes, this is achievable in ServiceNow GRC, and the recommended approach is to implement it through automation triggered by the attestation response, aligned with your control lifecycle and compliance processes.

@BhanuS856067857 - if help you answer, Please mark Solution Accepted and Thumbs Up