Resolved! SLAs for any module in GRC/IRM
Hi All Did anyone configure SLAs for any module/application in servicenow GRC/IRM? any reference docs/notes would be highly appreciated. @Community Alums @Jan Spurlin Thanks in advance
Forum Posts
Resolved! GRC Recommended Implementation Sequence
Hello, I recall having seen a slide with the recommended implementation sequence for governance, risk and compliance based on a "maturity model" with foundation, crawl, walk, run, fly. Does anyone have this slide to share? Or similar methodology? Ki...
What UCF Authority Documents are bundled with ServiceNow
Hello, This is very much newbie question but what (if any) Compliance/Authority documents come with ServiceNow and the GRC module? I am especially interested in ISO27001 and PCI-DSS. David Smith
Resolved! IRM/GRC Architecture
Hi everyone, can someone tell me where I can find a detailed description of the GRC Architecture. Thanks in advance!
Is there a way to track changes to documents published in the Knowledge library
I want to update some of the Policies that are published in the Knowledge library. However in order to be easier for the owner/approver, I want to be able to highlight the differences between the old (published version) and the new one that is up for...
Risk response task
If we are moving from respond state to review state after accepting or mitigating the risk response task, then after moving back from review to respond, the risk response task is not moving to "work in progress", why is that?
Resolved! Archer and servicenow integration
Hello, What are the ways to integrate ServiceNow with RSA Archer? My client has its issues management on RSA Archer but they want to leverage the continuous controls monitoring feature of ServiceNow and therefore they wish to have a centralized issue...
Resolved! GRC indicators
Hi. I want to know about the Indicators and indicators templates inside Governance, Risk and Compliance (GRC). I know from the documentation that Indicators monitor a single control or risk and Indicator templates allow the creation of multiple indic...
Need help avoiding duplicate controls.
We are in the process of adding our frameworks, policies and regulatory documents. Then we will parse these into citations and into control objectives. Of course many of the control objectives are looking for the same conditions, for example say th...
Customizing ServiceNow
Can I customize ServiceNow for my product needs?I plan to hire full stack devs for this issue following this guide. Will I succeed? Have anybody had such an experience?
licensing requirement for Risk Module but need to send out assesments to multiple users
Does anyone have licensing requirements info pertaining to the following case: We are standing up a risk program and I was recently told that for every risk assessment sent out, my organization would need a single license for each user attesting. Thi...
In GRC: Advance Risk assessment module : how do trigger assessments ?
In GRC: Advance Risk assessment module : how do trigger assessments ?
Resolved! Hierarchy of policies vs control objectives
Hi,I was wondering if anyone knows what is the difference of creating a hierarchy of Policies (One parent policy with one or more child policies) and a hierarchy of Control Objectives (One parent Control Objective with one or more child Control Objec...
How is the Recovery time achievable(RTA) being calculated?
How is the recovery time achievable (RTA) being calculated? I have only known about the description of it from the docs https://docs.servicenow.com/bundle/paris-governance-risk-compliance/page/product/grc-business-continuity-management/concept/bcm-wo...
is ServiceNow HIPAA compliant
Trying to determine if ServiceNow meets HIPAA ComplianceCan anyone answer this of point me to an article the explain this?Thanks,Bob