Why we are using the internal assessment in TPRM
Why we are using Internal assessment and where we can use this in TPRM
Forum Posts
How to add/change the states that are available in overview section of Engagement in workspace-GRC?
Hi Developers, How to add/change the states that are available in overview section of Engagement in workspace-GRC and accordingly sync when the engagement goes through these states?I want to show new states that I have newly created and remove some e...
Resolved! Risk Assessment Approvals Missing
Hello, I have a problem with Risk Assessment Methodology not generating Approval Workflow.This issue only happens to certain users.The problem is that as soon as I click on "Request Approval" UI action, the RASM record moves from Respond to Monitor w...
Issues Dashboard in workspace
Hello Guys, Has anyone faced the below issue? Even being an Admin I am facing this issue when I navigate to Compliance workspace and Audit Workspace, where as the same Dashboard works properly when I navigate to this Dashboard from Risk workspace
Resolved! Creating a list banner button UI Action that calls script include to create a record on another table with some populated fields
Hi all, I'm new to scripting and trying to finish up this task I was assigned. I'm at a complete standstill. I need to create a list banner button UI Action on table A that calls a script include that creates a record on table B with some of it's fie...
GRC Risk Management - Risk appetite
Hello, in order to show the risk appetite status in the risk record or risk assessment (i.e. inside appetite - green, outside appetite - amber, outside tolerance - red), we have to link our risk appetite scale to the Qualitative Rating Criteria under...
Residual risk not applicable field GRC
Hi All, In what situations I should be selecting Residual Risk not applicable when performing the residual risk assessment?
SLA Definition in TPRM vendors
Hello - We have dozens of SLAs defined in ServiceNow. We are starting to use TPRM (formerly VRM), but I don't see how I can link any of our existing SLAs with a vendor in the "Vendor Management Workspace". An option does not exist - it seems that I...
What role is required to remove entities from an entity type?
We are running Vancouver release, but it wouldn't let me select Vancouver in the Label. We have setup some Entity Types for our SOX and HIPAA controls. We are not using filters on these because we want to phase this in slowly and manually add the Ent...
Resolved! Request Extension on Policy Exception
Hi, Currently, the default duration of the policy exception on my instance is 180 days. When requesting an extension beyond 180 days from the "Valid from" date I am prompted with the following error: "The duration of this policy exception cannot be m...
Resolved! Difference between sn_risk.user and sn_risk.reader roles?
Hello, I want to understand the difference between a READER and an USER role. Which has more access rights and what are those? I have referred to SNOW docs but did not find helpful. Can someone please explain from their working experience? Thanks!!
Facing issue in generating Business Application type entities from Entity Type
Hello Experts, I am facing issue in generating Business Application Type entities from cmdb_ci_business_app table. I have total 281 active records in the table. Although the count of entities are matching, but 113 out of those are getting created wit...
Need to find what demo data got enabled when we have installed sn_grc plugin in servicenow and GRC
Hi Team, Greetings for the Day!!! We have encountered an issue, while installing GRC related data we have loaded the Demo data also and it is causing an issue. Is there any way where we can find what demo data we got it into our instance and how can ...
Activating the Control Objectives of Policies after Published
We have a client scenario that the policies are created by a 'Governance unit' and then the control objectives of the policies are converted to controls for compliance checking by 'Compliance unit'. As these two activities are handled by two differe...
Send to event creator field in notifications
in a notification, send to event creator is checked out. 'when to send' is - 'record inserted or updated'. also assigned to person will get the mail. i am updating the record. but mail is only triggered to assigned person not me. why ?will this field...