Hello community, I have noticed that when you set a CONTROL to 'State' = 'Attest', the assessment is generated but it is not shown under the 'Attestations' related list that is on the Control Form and appears to be OOTB behaviour.The requirement is t...
I have enabled the Confidentiality for Audit tables using the 'Enable record level confidentiality' property, So that the sensitive data can be accessed by only allowed users.But it is still accessible to the Admin user. The KB article(KB1096093 - ht...
Folks, I've a catalog item which is under GRC scope where we have a requirement to hide container variables where certain conditions are met.I tried achieving through UI policies and clients script, but hard luck didn't work out.Condition: policy=In...
The entity class is set up as Company -->Business Unit-->Division-->Department. All the entities of the 'Department' entity class are downstream of entities of the 'Division' entity class, etc. How does the risk roll up from the entity of 'Department...
Hi community,initially when glide.ui.security.allow_codetag was true it did updated as hyperlink but seems now its not.Cache cleared still not working.Any help would be appreciated. the only thing we did is custom url but all those working okayThanks...
We have a requirement to set up entity hierarchy i.e., upstream and downstream hierarchies we have 5 levels of processes (in the business process table in CMDB), we are thinking of creating an entity only at Level 5, and hence we are creating an enti...
Hi Team, Is it possible to have aggregation of an entity’s risks based on entity class hierarchy? Lets say we have entity class hierarchy as: Company Business Unit Application Is it possible to understand a Company risk profile based on its downstre...
Hello community,1. Is there any way to add extra columns in pop-up window while adding extra controls in risk assessment?2. Is it possible to change the pop-up window size?
I would like to understand out of box Risk Manangement Workflow based on Role. we are working on Qualitative approach. I am penning down my understanding on Risk Management. Risk is either Created from Risk Statement or it is created manually and i...
What is the concept behind Auditable Units in Audit Management? I am trying to create one, and when I try to add records under the 'Business Units,' 'Department', etc., the records available are the actual records from Business Unit and Department ta...
Hi, Is there any detailed documentation/blogs/posts around the Standardized Information Gathering (SIG) Questionnaire Integration and how an organization can leverage this functionality.Background - We have our own assessment's, that leverage the sub...
Background: Our company implemented GRC in early 2022 and customized the BCM process quite a bit to meet business need. We are currently revising our process in order to revert back to OOTB BCM to help with plugin updates and longevity. Through our ...
Hi there, We are configuring the BCM-application and learning how to use it given our context. I am a bit curious about how other organizations are using the element definitions for some types of resources. A process can be dependent on more resour...
I am testing Advanced Risk Assessment and am trying to understand the reporting side of things, specifically when leveraging object-based reporting. My two main questions for object-based assessments are: 1. Can I relate the RAM or object-based asses...