what is the difference between a policy statement and a policy in grc? what is the name of the tables for policy statement and a policy in grc? I keep seeing that their are different but I cant find the tables for policy statement, only policy
We find Likelihood, Impact and Scores are to defined in the RISK CRITERIA of SNOW. However, at the time of creation of Risk statement/Risk, we are unable to find any input fields for Likelihood and Impact. Only Score field is visible which is calcula...
Dear leaders , Can someone please help me with script for updating related records Description in Risk statement. below 2 screen shots are GRC risk statement and related list have risks. We have requirement to update all risk description if risk stat...
Hi, I'm trying to create a questionnaire to be started whenever a "business application" type entity is created in the GRC module.I started by creating a "Risk Identification Questionnaire"that was associated with a Risk Identification Configuration,...
I have a problem with the implementation, I'm going to explain it: The model of risk administration of my client is based in "Causes", I mean, 1 risk could have 1 or more Causes, and these are related with controls too. In this case (Causes related w...
Has anyone done the migration from Legacy GRC to the new separate modules? We're interested in doing so, but need to come up with an estimated LOE for our project plan. We are aware of the migration tool, but there are several functions of Legacy...
Hi All,Where is the code stored in ServiceNow instance for the Add dependencies Button which appears in the dependency assessment of BIA.Thanks.
Hi, I'm having trouble getting the sysId on the context.props in the UI Builder.My requirement is to have a dynamic stepper to fetch the state from the current record.In one page its working fine, but in another it isn't. The sysId is already part of...
Using the Evidence Collection, I wanted to add the Evidence and Related Evidence Tabs to my Control Objective, Entity, Control, etc. I saw this in the GRC Implementation Lab Instance and thought it would be useful to have in my Instance so my users ...
Hi, We want to automatically schedule evidence requests to our control owners every month. The evidence is being reviewed and approved, which then impacts the control state (compliant / non-compliant). There are multiple ways we can go about this:Con...
I have an indicator template that has a collection frequency of Daily. The indicator is actually running and moving my controls to non-compliant correctly (GRC indicator nightly run scheduled job is active). The problem I am seeing is that the "Ne...
I am looking for a way to show more than 6 fields/columns for the BCM Dependency Assessments within the BCM Workspace, has anyone had any success with this?I have not had any success using the grid configurations or list views, even though they are s...
how to make field read only on a particular condition through data policy which are already mandatory through data policy.!!
What is the logic of Issue Due date be mandatory only when the issue is moved to respond state? If the issue has 7 days to be addressed based on remediation timeframe required, and the issue is moved to respond state after 7 days that the issue was c...
I am experienceing some weirdness around my indicators in GRC. I have some control indicators set up - they are a type "Basic". They essentially check to see if the name of the entity the control is for starts with the letter A. The indicators do...
