Hello experts,This is regarding third party risk management .......I would like to know if we can dynamically select categories on ISR questionnaire based on the vendor type selected for company record...All suggestions are welcome here, Thank you
Hi community, I want to add items in the OOB Header Menu of the Employee Portal. However, when adding Menu Items in the related List of the Widget, they seem to be added on the main navigation. They are linked as in the screenshot below. As you can s...
Hello ServiceNow GRC Community,As a newcomer to ServiceNow GRC, I've been exploring the modules such as Policies, Risks, Controls, Issues, Policy Exceptions, Remediation Tasks, and Audits. While I've grasped the basic lifecycle stages of these compon...
Currently I am working on the GRC feature 'Policy authoring and redlining in Compliance Workspace' which requires O365 integration. I have completed the below steps so far Have integration Hub entitlements Installed Compliance Workspace Installed Mi...
Hi all, I'm configuring Audit Workspace, but this question is similar to every workspace. For example I open Audit Workpace, check all engagements from list view. I can see that there is OOB "Select all" checkbox next to name. When I click it all eng...
In current IRM setup, Entity owner is global across the board which we can understand from reporting perspective. However, Control objective owners are tied to the entity owners by default which is not common across industry. To explain more see bel...
Hello,I'm currently working on audit management module and some concepts are confusing :1.What is the use case for creating an auditable unit and what the different with scoping an entity? 2.What is the difference between test template and test plan?...
Audit requirement that both BIA's and Plans be produced with previous versions. We have elected to make a copy, pull in the attributes and create a relationship but this is not the most user friendly experience on BCM version control. Has anyone d...
Hey Community! Has anyone ever put an inactivity timer in place on the Vendor Portal (/svdp) so Vendor Contact users are automatically logged out after a certain period of inactivity? It doesn't appear that the standard instance session properties (...
Hi, I am getting this error when trying to Initiate inherent assessment from Risk Identification record. But I already setup my RAM for this.Could anyone tell me if I'm missing something here? Thanks.
Hello, We had a customer provide a requirement in which they want to review and approve the scope of a risk assessment and all the responses after the completion of all the assessments. Essentially they want a way to show an entity owner signing o...
Our scenario is that our compliance team has created a Risk and it is owned by a standard GRC user. The assessment was taken and the response was set to mitigation. A mitigation task opened as expected and the GRC user who is assigned to the task wro...
Hi Friends,I am facing an odd issue that, Step 1: I have configured an m2m table to select Dependent Business Process for BIA ( Business Impact Analysis ) record.M2m TableStep 2: I have also added Access Controls on this m2m table (Create, Read and W...
HiWhat is the difference between a test template and test plan? Looking at the system architecture the test templates are linked to the control objective which in turn than links to the test plan when generating a control test. What is the reason for...
According to the SN documentation for Vancouver for Advanced Risk Assessments, the risk response workflow is not available for object-based risk assessments. What are the alternatives to document a risk response? For example, if I do an object-based ...
