Hi, I need help with a report. My requirement is when user select a risk statement, I need to show all the Controls associated with the Risk Statement.The relation between Risk statement to controls is as follows:Under Risk statement , there is M2M t...
Hi there, I’m trying to understand the intended purpose of the Category field on Citations in ServiceNow IRM, and whether it is expected to be actively used by business or Compliance users. When creating a new Citation, the Category field is visibl...
I’m trying to understand the system and data impacts of retiring a Risk Framework. I know how it works for control but just want to double check on the risks.Specifically, I’d like clarity on the following:What happens to downstream records associat...
want to confirm: OOB are indicator tasks created with control state = draft or control state=monitor? If draft is also creating indicator tasks, what is the logic behind this? Shouldn't only monitor state create indicator tasks?
Hello together, Does anyone know if there is a possibility to enable "multi select" for List fields in the Configurable Workspace like it works in UI16:Is there potentially an attribute or anything like that which could be enabled?
Dear IRM Experts, We are experiencing an issue with Advanced Risk Assessments in ServiceNow.Once an Advanced Risk Assessment is submitted, it moves to the state “Waiting for Approval.” However, it cannot be approved because no approval task is genera...
can someone explain why a new policy exception goes straight to Analyze if raised from the service portal, but stays in New state when raised from compliance workspace? I've looked for business rules, workflows, that might doing this after the excep...
I understand that controls cannot be added to a risk assessment when the RAM is configured to assess risk based on the existing control environment. However, I would like to better understand the rationale behind this limitation. Ideally, we would wa...
Hi everyone, I am looking to add a new factor and replace an existing one within the Control Assessment section of my Risk Assessment Methodology (RAM). In our Dev environment: I cannot move the RAM back to the 'Draft' state because there are assessm...
Hi ServiceNow Community,I have been encountering a peculiar issue for the past week while trying to install GRC (Governance, Risk, and Compliance) related plugins in ServiceNow. The main plugins required for GRC functionalities are not appearing in t...
Hi Team, I am facing an issue in all the environment including PDIs in Zurich version.Issue - ADD UI Action on Engagement(sn_audit_engagement) Related List on PLAN(sn_audit_advanced_plan) Form doesn't behave as expected. It shows the message "Success...
We have a new requirement in GRC (Governance, Risk, and Compliance) in ServiceNow. Currently, we are using the out-of-the-box assessment for attestation in a control named “GRC CR Attestation.” One of the questions in this assessment is:“Is the contr...
we have a business requirement as follows. Client currently uses 'Network Security Checklist' excel sheet which will sent to network team. This excel sheet contains list of questions. Each question maps to a control objective (and citations). NEtwo...
Hi All, I need help to determine if BCP owners can be same as BCP approvers? I believe that they can be same for BIA but need to know if that’s possible for BCP too
Hi all, I have come across a field called Authority Section and I am trying to understand its intended purpose and how it is meant to be used, particularly while setting up the IRM data model. So far, I have not been able to find any reference to thi...