Hi, I have the following situation. I have a control with multiple (2) attestation respondents. We did this so that only one person in a team needs to respond. Do both respondents need to complete the attestation in order to move the control state fr...
Hi All, We are currently using the UCF integration to sync the Authority Documents, citations, and controls for Policy and Compliance. We recently added a new authority document to the shared list that is integrated with ServiceNow. In order to pull ...
On the Compliance Workspace homepage, there is reference to 'Classic' attestations (see attached screenshot). What's the meaning and/or significance of 'classic' in this context? Are there other types of attestations, and if so, how do they differ?
I am importing my update sets in Kingston developer instance. After importing when I am trying to commit the update sets after preview, I am getting error as "Commit called without update set id". I got some errors and warning while preview on which ...
Hi team, we have a customer who is an existing ServiceNow ITSM user interested in implementing IRM. We want to showcase to the customer the benefits of integrating the two modules in a way that would enable them to get the most out of combination, ...
I'm curious what the rational was for only allowing the role of Compliance Manager to create Remediation Tasks on an Issue? It was seem like the Control Owner (user role) would have access to that as well. And as the Issue Owner steps through the sta...
Dear Experts, I need the recommendation on the approach of adding a new field as 'Owning Group' to the Entity screen. This is to ensure that the entities are assigned to teams than the individual owner. Any best practice advice on this OR is it rec...
Can our Compliance Department use ServiceNow to track Privacy Breaches and manage Business Associate agreements? Thank youHolly
What is the differences between the TPRM & IRM & Audit Explain in one example.
Hello, I'm unable to add a timeline to the overview tab on the remediation task. Need to see a timeline of all milestone created against remediation tasks. Not sure how to get to the correct page in UI builder and not sure what URL I need to accompl...
Testing question posting
I'm working with GRC attestation and using the Attestation Designer to manage field visibility. We want the following behavior: when 'Is control Implemented' is selected as 'YES', the 'Is evidence Attached (Boolean Yes/No)' question should become vis...
We are planning to implement Advance Risk Management for one our customer.We need to understand how all the risk calculation happened from back end.Risk calculation for below fields:Inherent Risk/Score,Residual Risk/Score,Aggregate Risk Scores etc. I...
Hi Team, In risk statement form (sn_risk_definition) pervious I able to see the assessment (attestation)field after update the form i unable to see the field in form and table but its visible in form layout and form Design . I check the all risk stat...
Hi. I have a question regarding mapping risk statements to risk frameworks and aggregation. I have created various level 0, level 1 and level 2 risk statements (parent-child relationships). All level 0 risk statements have been mapped (associated) to...