In our Vendor Risk Management application we have an Assessment Template that contains multiple questionnaire templates and document request templates. We are trying to only score 1 of the questionnaire templates as part of the Assessment record Ris...
Hi,I was looking into Business Processes (Policy and Compliance > Scoping > Business Process, or Risk > Scoping > Business Process) for rolling up risk & compliance to process level. The documentation (see diagram at the bottom of the page) suggests ...
Hi All Did anyone configure SLAs for any module/application in servicenow GRC/IRM? any reference docs/notes would be highly appreciated. @Community Alums @Jan Spurlin Thanks in advance
Hello, I recall having seen a slide with the recommended implementation sequence for governance, risk and compliance based on a "maturity model" with foundation, crawl, walk, run, fly. Does anyone have this slide to share? Or similar methodology? Ki...
Hello, This is very much newbie question but what (if any) Compliance/Authority documents come with ServiceNow and the GRC module? I am especially interested in ISO27001 and PCI-DSS. David Smith
Hi everyone, can someone tell me where I can find a detailed description of the GRC Architecture. Thanks in advance!
I want to update some of the Policies that are published in the Knowledge library. However in order to be easier for the owner/approver, I want to be able to highlight the differences between the old (published version) and the new one that is up for...
If we are moving from respond state to review state after accepting or mitigating the risk response task, then after moving back from review to respond, the risk response task is not moving to "work in progress", why is that?
Hi. I want to know about the Indicators and indicators templates inside Governance, Risk and Compliance (GRC). I know from the documentation that Indicators monitor a single control or risk and Indicator templates allow the creation of multiple indic...
We are in the process of adding our frameworks, policies and regulatory documents. Then we will parse these into citations and into control objectives. Of course many of the control objectives are looking for the same conditions, for example say th...
Can I customize ServiceNow for my product needs?I plan to hire full stack devs for this issue following this guide. Will I succeed? Have anybody had such an experience?
Does anyone have licensing requirements info pertaining to the following case: We are standing up a risk program and I was recently told that for every risk assessment sent out, my organization would need a single license for each user attesting. Thi...
In GRC: Advance Risk assessment module : how do trigger assessments ?
Hi,I was wondering if anyone knows what is the difference of creating a hierarchy of Policies (One parent policy with one or more child policies) and a hierarchy of Control Objectives (One parent Control Objective with one or more child Control Objec...
How is the recovery time achievable (RTA) being calculated? I have only known about the description of it from the docs https://docs.servicenow.com/bundle/paris-governance-risk-compliance/page/product/grc-business-continuity-management/concept/bcm-wo...