Dear IRM Experts, We are experiencing an issue with Advanced Risk Assessments in ServiceNow.Once an Advanced Risk Assessment is submitted, it moves to the state “Waiting for Approval.” However, it cannot be approved because no approval task is genera...
can someone explain why a new policy exception goes straight to Analyze if raised from the service portal, but stays in New state when raised from compliance workspace? I've looked for business rules, workflows, that might doing this after the excep...
I understand that controls cannot be added to a risk assessment when the RAM is configured to assess risk based on the existing control environment. However, I would like to better understand the rationale behind this limitation. Ideally, we would wa...
Hi everyone, I am looking to add a new factor and replace an existing one within the Control Assessment section of my Risk Assessment Methodology (RAM). In our Dev environment: I cannot move the RAM back to the 'Draft' state because there are assessm...
Hi ServiceNow Community,I have been encountering a peculiar issue for the past week while trying to install GRC (Governance, Risk, and Compliance) related plugins in ServiceNow. The main plugins required for GRC functionalities are not appearing in t...
Hi Team, I am facing an issue in all the environment including PDIs in Zurich version.Issue - ADD UI Action on Engagement(sn_audit_engagement) Related List on PLAN(sn_audit_advanced_plan) Form doesn't behave as expected. It shows the message "Success...
We have a new requirement in GRC (Governance, Risk, and Compliance) in ServiceNow. Currently, we are using the out-of-the-box assessment for attestation in a control named “GRC CR Attestation.” One of the questions in this assessment is:“Is the contr...
we have a business requirement as follows. Client currently uses 'Network Security Checklist' excel sheet which will sent to network team. This excel sheet contains list of questions. Each question maps to a control objective (and citations). NEtwo...
Hi All, I need help to determine if BCP owners can be same as BCP approvers? I believe that they can be same for BIA but need to know if that’s possible for BCP too
Hi all, I have come across a field called Authority Section and I am trying to understand its intended purpose and how it is meant to be used, particularly while setting up the IRM data model. So far, I have not been able to find any reference to thi...
Please can someone explain how the 'Mitigating Controls' related list works when creating a policy exception?
I'm trying to meet a requirement to automatically answer some questions in a GRC Smart Attestation for a Control. Use case 1: I have a radio button question with 2 answers (Yes/No) (Question 1). Then I created another radio button question with the ...
ISSUE: When in BCM workspace , Japanese PDF is generated for BIAs (Business Impact Analysis), BCPs (Business Continuity Plans), DRPs (Disaster Recovery Plans), and IMPs (Incident Management Plans) for the Business Continuity Management product ,some...
Hello everyone,We have recently upgraded to the Zurich instance we see there are some limitations in accessing the BIA and DR plans during creation and viewing. Is there customization or OOB we need to install or any changes that have been made. Can ...
Hi, I just attended the 2026 Q1 Risk Confidential Product Roadmap Customer Presentation webinar. I understand the Product Roadmap will be available on the Community page. I've searched but couldn't find it. Can you please direct me to it?