is ServiceNow HIPAA compliant
Trying to determine if ServiceNow meets HIPAA ComplianceCan anyone answer this of point me to an article the explain this?Thanks,Bob
Forum Posts
Resolved! Add CSS style to GRC - Article template
Hi, i have a article template with html type and i would like to add a css styling. There is no css field to do it.More exactly - i want to add a watermark to the policy.
Resolved! Engagement Approval
Hi I have a sample of 49 Audit Tasks, 2 are marked as closed complete. When should the approver receive a request to either approve or reject the engagement? Is it only after all tasks are closed and no pending open tasks.
Data Owner vs Control Owner
Hi Can someone enlighten me between the difference of Data Owner and Control Owner Thank you
GRC how to roll up control compliance score to Parent Control
Created 2 Entities with respective Controls(Control Objectives)Control Objectives were having Parent Child Relationship ( CO1 - Parent , CO2 - Child)Now CO2 is assessed and got Compliance status which in deed gets compliance Score on to Entity.I need...
Resolved! What are the standard GRC frameworks to select in UCF
Hi Experts, I would like to know if is there a standard build already available in UCF for GRC standard frameworks (the basic compliance frameworks that contain the authority documents, citations, and controls). Is there a possibility to obtain these...
What is GRC workspace
Hi Team, There is a particular Workspace appearing in our sandiago drop down by the name of " GRC workspaces" . How is it different from Compliance /audit / Risk workspace. What is the exact use case of it ? Please guide . Thanks in advance Regards ...
Resolved! How to call a script include through dictionary overrides
I have field reviewers on which i want to call a script include through dictionary override reference Qualifier. How can i achieve that? The reference qualifier is as below: javascript: new GetReviewers2().filter();
Difference between Attestations and Manual Indicators
Can someone explain the value of manual indicators in comparison to Attestations. They seem to do similar things. I will break this down into two areas to help my understanding. Situation: I have a control objective applied to 100 devices where I nee...
GRC issue tickets(IPT's) taking abnormally long time to open from the list view in new, current tab.
Most GRC issue(IPT's) are taking more than 20 seconds to open from the list view in both new tab, current tab. This issue began several months ago. They used to open very quickly. This is a major time waster and makes it very difficult to manage our ...
Resolved! Questions about the Regulatory Change Management application - TRRI and manual "Regulatory alert" creation
Hello, I was recently evaluating the Regulatory Change Management application and had a couple of questions that I couldn't find in the documentation or by exploring the PDI. 1. Is there a full listing of what regulatory domains or bodies Thompson Re...
Resolved! understand the Regulatory Change Management feature in ServiceNow
Hi, We are looking to activate this and operationalize this for Policy Management and other needs within ServiceNow. How to enable this in ServiceNow such as - creating Campaign, Analysis of Updates, Approval workflow and Control updates, etc. Need h...
Resolved! Requesting a Risk Assessment on a Policy Exception
Hi community, I am a bit perplexed with respect to how the Policy Exception record/app works in ServiceNow. My GRC knowledge tells me that when a Policy Exception (PER) is requested against a Policy, a Risk Assessment would need to be conducted, but ...
Implementing CIS Controls
I am looking to input CIS Controls into service now as an Authority document, but would like to know your views on how you would pick out the Entity Types and group them with Control Objections. I would like to have the description specific to the en...
How to auto fill reassessment inherent and residual answers from previous risk assessments to a new
I have request where the risk user would like to see what they have selected for a previous risk assessment. Is it possible to copy the inherent and residual answers from a previous risk assessment to the new risk assessment which has been generated ...
