I am looking for the reasoning behind the two different ways Issues are related to Audit Engagements.When an issue is automatically created as a result of a Control Test failure, the Issue becomes visible on the 'Control Test Issues' tab on the Audit...
Hello, I am not able to create multiple risk records with same field values. these are the two fields (Entity, Risk Statements) business requirement is to create multiple records with same fields values
In our Vendor Risk Management application we have an Assessment Template that contains multiple questionnaire templates and document request templates. We are trying to only score 1 of the questionnaire templates as part of the Assessment record Ris...
Hi,I was looking into Business Processes (Policy and Compliance > Scoping > Business Process, or Risk > Scoping > Business Process) for rolling up risk & compliance to process level. The documentation (see diagram at the bottom of the page) suggests ...
Hi All Did anyone configure SLAs for any module/application in servicenow GRC/IRM? any reference docs/notes would be highly appreciated. @Community Alums @Jan Spurlin Thanks in advance
Hello, I recall having seen a slide with the recommended implementation sequence for governance, risk and compliance based on a "maturity model" with foundation, crawl, walk, run, fly. Does anyone have this slide to share? Or similar methodology? Ki...
Trying to sort out the workings of GRC controls.Anyone has any ideas or pointers?Perhaps I'm doing something horribly wrong here, so any help is appreciated OverviewI can't seem to get a manual Indicator to update the Control's status.When setting an...
Hello, This is very much newbie question but what (if any) Compliance/Authority documents come with ServiceNow and the GRC module? I am especially interested in ISO27001 and PCI-DSS. David Smith
Hi everyone, can someone tell me where I can find a detailed description of the GRC Architecture. Thanks in advance!
I want to update some of the Policies that are published in the Knowledge library. However in order to be easier for the owner/approver, I want to be able to highlight the differences between the old (published version) and the new one that is up for...
If we are moving from respond state to review state after accepting or mitigating the risk response task, then after moving back from review to respond, the risk response task is not moving to "work in progress", why is that?
Hello, What are the ways to integrate ServiceNow with RSA Archer? My client has its issues management on RSA Archer but they want to leverage the continuous controls monitoring feature of ServiceNow and therefore they wish to have a centralized issue...
Hi. I want to know about the Indicators and indicators templates inside Governance, Risk and Compliance (GRC). I know from the documentation that Indicators monitor a single control or risk and Indicator templates allow the creation of multiple indic...
Hi All - I have a PDI on Tokyo instance and when I go to Service portal - My GRC --> My risk assessments, there are no records visible although I have risk assessments under assess state.I am using advanced risk and below screenshot:
We are in the process of adding our frameworks, policies and regulatory documents. Then we will parse these into citations and into control objectives. Of course many of the control objectives are looking for the same conditions, for example say th...
