I know we can build recovery teams, but I need a call tree like this: Anyone know how to go about building this, I'm assuming this would be a document template and javascript to get the fields from sys_user and ...group.members etc. Department Mana...
Hi All, Has anyone came across the issue with the "Import Policy Text" functionality which is available on compliance workspace under Policy Text field on policies I am trying to import one doc and it performs the steps but does not show up the polic...
Hi Everyone, In current system when a risk is moved to respond state a risk response task gets created. Can I change this functionality and create multiple risk respond tasks and assign them to users who are of same group?? If I change , will it bre...
I am interested to know whether anyone has recently upgraded from GRC to IRM Pro or IRM Enterprise? If so, did you go straight to IRM Ent or did you start with IRM Pro then upgrade to IRM Ent? I am interested to know how intrusive an upscaling is if...
Hello, I have been trying to get a better understanding of how others are using the Out of the Box Policy Exception module in ServiceNow. To me, the process seems a bit counterintuitive in that approvals are the responsibility of control owners and ...
Can we upload data into the GRC module via a CSV (or similar) to batch / bulk load the input?
Hi All, I have a client scenario where one child Risk Statement has more than one Parent Risk Statement. The issue is that the Parent field on the Risk Statement form is a single reference field. Any idea, on what would be the best course of a...
I am implementing SAM & HAM from Scratch in my organization so what are things I need to consider ? Any reference Documents that will help me ?
Please can someone explain how the 'Mitigating Controls' related list works when creating a policy exception?
Hello - As I understand, ServiceNow support free SCF (Secure Controls Framework) to manage compliance and also support subscription to UCF (Unified Compliance Framework). Do you use SNOW RMF to assess against SCF or UCF or some other compliance fram...
need to write business rule. for entity which has applies to record field it is dependent on tables.. when we trying add any cmdb_ci(parent table) tables the field owner will be populated in an entity owner field,.. for this we need to write BR for...
Hello community... Situation: I am building entities for SOX compliance and querying the cmdb_ci_database table Is there a way for me to easily bring in databases that are in scope for SOX controls without having to use and populate a custom attribut...
Hi, We are trying to trigger both On boarding and detailed assessments from business service form once it is created and we provide this flexibility through a UI actions (buttons). We configured triggers and actions in flow designer. But is there a...
We have a CI audit module(desired state) in compliance application , which helps "Desired State performs scheduled or on-demand audits of CMDB data to determine which records match the expected attributes, CI relationships, and relationships to other...
Hi All I writing a control indicator on the sys_user table . As per the attached screenshots , the option to fetch supporting data are very limited by giving a simple condition . My query is , how can i write a script for fetching supporting data f...
