Automatic creation of Issue for GRC Metrics
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday
I have a requirement to generate issue automatically when the value in the metric data task is having the value of red threshold.
According to current functionality I understood that when indicator fails then issue can be generated automatically with issue source as indicator failure. But we are using GRC Metrics in our case.
1. In similar way like Indicators, does GRC Metrics have a functionality to generate issue automatically with issue source as metric.
2. Also, please help me understand the OOB functionality of how the issues are generated automatically for control attestations or indicator failures
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday
Hi
There is no OOTB issue creation from metric like indicator. You can maybe try with BRs or Flows
For Indicators, the process is handled by the Indicator evaluation engine. When an indicator executes (based on its scheduled job or on-demand run), it evaluates the defined logic—this could be a scripted condition or data-driven check. The outcome of this evaluation is stored as a result, typically Pass or Fail. If the result is Fail, the system checks whether the indicator is configured with the option to create an issue on failure. If this flag is enabled, the platform automatically creates a record in the Issue table (sn_grc_issue). The created issue is linked back to the indicator result, and the issue source is set to Indicator Failure. This entire flow is handled OOB without any customization.
For Control Attestations, the process is managed by the Attestation (Assessment) engine. Here, the evaluation is not system-driven but user-driven. An attestation task is generated and assigned to a control owner or responsible user. The user provides a response, typically Compliant or Non-Compliant. When the response is Non-Compliant, the system evaluates the control or attestation configuration for the flag create issue on failure. If this is enabled, an issue is automatically created in the Issue table. This issue is associated with the control attestation record, and the issue source is set to Control Attestation.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday
For GRC: Metrics, as part of our latest release in March 2026, we have introduced a capability to create an issue automatically when a threshold is exceeded. This is done as part of a larger set of enhancements for GRC: Metrics. Check this out - https://www.servicenow.com/docs/r/governance-risk-compliance/grc-risk-management-workspace/metric-de...
You can define an action when a threshold is exceeded. Send email and Create issue are the OOTB actions available. You can define your own actions as well by creating sub-flows. The issue created will automatically have the source as GRC: Metrics.
Let me know if you have any further queries.
-Vaisakh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday - last edited yesterday
Hi @Vaisakh Krishna ,
Thank you so much for your reply.
The documentation says fields "Enable threshold breach monitoring", "Actions", "Condition" can be used to create issues. But when I try to create the thresholds in my instance I'm unable to see "Enable threshold breach monitoring", "Actions", "Condition", "color" fields on the Metric definition threshold form. Please find the screenshot below. Please help me in understand how do I set actions to create issue.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yesterday
It is available as part of the latest version (March release) of GRC: Metrics (version 22.xx.xx). You are on an older version, hence you see the older screen and experience. Please upgrade to the latest version to leverage these enhancements.
-Vaisakh
