Hi, I noticed that Compliance Reader role is not able to read Attestations at all. However, Compliance User role is able to read Attestations. On one hand it makes sense to limit access to the Attestations, as info about non-compliant controls pose a...
Hello We are using GRC to create sets of attestations. Then the attestation respondent needs to group them into a single grouped assessment. When the Grouped Assessment is created, the questions are in different order than desired. For instance, t...
How are the Internet ALE and ARO calculated after migrating to Advanced Risk?These fields on the risk statements are also not visible, curious as to how all the risks and scores are calculated in advanced risk.
For IRM professional, the pricing guide mentions "limited" for Advanced Risk . Unfortunately, 'Limited' is not defined anywhere. What exactly are the limitations in the professional license for advanced risk?
Hello, We are trying to improve our GRC assessment process by allowing users to take the assessment directly from the Risk. The issue is there can be multiple respondants to the Risk and therefore multiple assessment instances. We have the code to d...
I am trying to build a RAM (Risk Assessment Methodology) in which I want to have dependency between the factors (questions). For example, if user responds to a question as 'Yes', then we want to show additional questions to the user. Please suggest o...
I have developed a number of RAMs using Qualitative scoring and making use of Qualitative Transformation Criteria and each time I do so I try to figure out what OVERRIDDEN means in the context of Qualitative criteria. I have had it explained to me by...
I am getting this error, when i hit Perform Inherent Assessment button In risk assessment methodologies , although it is published. How do i fix this issue ? @Gunjan Kiratkar@Community Alums
The inherent assessment could not be initiated as the approver is not available. Please contact your administrator to review the risk identification configuration and then try to initiate the assessment again. Although the risk manager is available. ...
Our organization is new to ServiceNow, we are starting to capture Controls. Can anybody tell me what is the purpose of the Category and Type fields in the Controls entry screen? What do you use them for? Thanks for the advice
I need to modify filter conditions(if there are 3-4 records in the risk assessment table for the same risk we need to show only the latest risk assessment record) in the below heatmap. If I'm clicking on the edit option it is redirecting me to UI Pag...
Hi all,Long story short, had an SEM turnover while we were mid-stream in setting up BCM. I'm taking over and have used BCM many years ago so some things I cant recall or have changed. Current difficulty is in understating the "Score timeframe mapping...
Hi All, Would request someone can explain how the issue risk rating is getting calculated in vendor risk assessment. Also, how to modify the ootb formula and make it count of issue-based. For eg 2 issues critical, 1 medium then critical, 1 issue crit...
Hi Everyone,I've received an email notification referring to the scheduled job has identified inactive entities. When you open the link, it will go directly to the list of entities (that are active). And so I just typed in "Inactive Entities" in Serv...
On the workspace (compliance), has multiselect option worked for anyone on the List type of field !!?? I am facing issue like whenever selecting multiple options from the list earlier record got wiped off . when I have selected one approver from th...
