Hi,I am new to IRM area. Have basic question on two fields available on 'Issue' (sn_grc_issue) form.Want to know what is difference between 'Priority' and 'Issue rating' fields. Does they fulfill different purpose? Thanks.
When performing a BIA dependency assessment, for a given dependency, how should one determine what value to specify for the Recovery Time Objective (RTO) and/or Recovery Point Objective(RPO)? The documentation (https://docs.servicenow.com/bundle/utah...
Hi, Whenever we are trying to move BIA (Impact analysis record) in 'Pending for Approval' state by clicking on 'Submit for Approval' button. We are not seeing any record update in 'sn_bia_approval' table.Similarly when Impacy analysis is approve or r...
Hi all!! For BIAs and BCPs, are there any OOB Approval/Review workflows documented that show lifecycles? For example, is there anything OOB that would show/document (allow ) a BIA to go from draft, review, approval, and then back to review when a th...
Hello All,I am using below query BR to copy tags from one table to another, but currently all records from the target table are getting updated I want only the associated record should have the tag copied from source record which has new tag added.Pl...
Is there a way for vendors to easily upload completed assessments from an excel into ServiceNow?
We are in the design of IRM. I know that issues can be generated automatically when a control or a risk indicator fails. I am hesitant to turn the automation on because a lot of issues are going to be reported manually and I am concerned with duplica...
Hi All, I need help to get the implementation documents or the documents on GRC and Security Operations. Thanks
Hi All,I would like to know how to set-up confidentiality for GRC tables other than OOB tables?There are a few tables for which this feature is supported by servicenowWould like to know if there's any other way I can configure the same for other exis...
Hi All,I have a query on the document templates. There is an existing template on the sn_doc_template table. The requirement is to modify the logo image, and in order to do that added an attachment to the template. But user added 2 more images and tr...
I have set the "Read-only" flag on a number of assessment metrics but it has no effect when the assessor is completing the assessment - they can still change the answer.Is it meant to set the answer as read-only to the assessor or am I misunderstandi...
Hi every one,Given the number of entities, how are using the Risk appetite and tolerance? are you defining them at the risk statement and autopopulated at the risk record? What is the goal of the risk appetite at the enity level? Your input is very a...
Greetings, I have the following questions in regards to relating an Entity directly to a Control Objective Is it possible to bypass mapping a Control Objective to an Entity Type and instead map the Control Objective directly to an Entity?What would b...
Hi Friends,We are trying to set up the Advanced Risk Assessment where the customer wants to assess each control on 2 factors say Design and Operating Effectiveness.But current OOB ServiceNow solution only provide ability to assess entire control envi...
What is the purpose and advantage/disadvantage of using the 'Applies to record' option on the entity record?