is ServiceNow HIPAA compliant
Trying to determine if ServiceNow meets HIPAA ComplianceCan anyone answer this of point me to an article the explain this?Thanks,Bob
Forum Posts
Resolved! Engagement Approval
Hi I have a sample of 49 Audit Tasks, 2 are marked as closed complete. When should the approver receive a request to either approve or reject the engagement? Is it only after all tasks are closed and no pending open tasks.
GRC how to roll up control compliance score to Parent Control
Created 2 Entities with respective Controls(Control Objectives)Control Objectives were having Parent Child Relationship ( CO1 - Parent , CO2 - Child)Now CO2 is assessed and got Compliance status which in deed gets compliance Score on to Entity.I need...
Resolved! What are the standard GRC frameworks to select in UCF
Hi Experts, I would like to know if is there a standard build already available in UCF for GRC standard frameworks (the basic compliance frameworks that contain the authority documents, citations, and controls). Is there a possibility to obtain these...
What is GRC workspace
Hi Team, There is a particular Workspace appearing in our sandiago drop down by the name of " GRC workspaces" . How is it different from Compliance /audit / Risk workspace. What is the exact use case of it ? Please guide . Thanks in advance Regards ...
Difference between Attestations and Manual Indicators
Can someone explain the value of manual indicators in comparison to Attestations. They seem to do similar things. I will break this down into two areas to help my understanding. Situation: I have a control objective applied to 100 devices where I nee...
GRC issue tickets(IPT's) taking abnormally long time to open from the list view in new, current tab.
Most GRC issue(IPT's) are taking more than 20 seconds to open from the list view in both new tab, current tab. This issue began several months ago. They used to open very quickly. This is a major time waster and makes it very difficult to manage our ...
Resolved! understand the Regulatory Change Management feature in ServiceNow
Hi, We are looking to activate this and operationalize this for Policy Management and other needs within ServiceNow. How to enable this in ServiceNow such as - creating Campaign, Analysis of Updates, Approval workflow and Control updates, etc. Need h...
Resolved! Requesting a Risk Assessment on a Policy Exception
Hi community, I am a bit perplexed with respect to how the Policy Exception record/app works in ServiceNow. My GRC knowledge tells me that when a Policy Exception (PER) is requested against a Policy, a Risk Assessment would need to be conducted, but ...
Implementing CIS Controls
I am looking to input CIS Controls into service now as an Authority document, but would like to know your views on how you would pick out the Entity Types and group them with Control Objections. I would like to have the description specific to the en...
Entity owner and control owner not populating from Entity Filter
Hi, I have a very simple entity filter on the sys user table for a proof of concept I'm demoing. The filter conditions look for specific users in the organisation (this works and creates entities for each one). However, the owner isn't getting popula...
Resolved! Is your organisation doing cyber risk quantification or have a roadmap to do this in next 6-12 months
Are looking to quantify cyber risks in your organization while using ServiceNow IRM platform? If yes, the product team would like to connect with you and have a discussion with you. This is one of the new exciting areas for us and we are really looki...
Deactivate/retire an Entity type
We are fairly new to GRC and are in the process of setting up our entity framework.However, due to a recent business re-org. we need to deactivate a specific entity type and replace it with 4 new entity types that will take on the existing risks and ...
Inherent and Residual Score to match standard heatmap on risk overview dashboard
Hello! Is there a way to adjust the risk scoring so the scoring reflects what the heatmap colors are? Red on a heatmap is usually a very high risk, but the heatmap puts a risk that has a high inherent or residual risk in the red zone just because it ...
Entities are not being tied to Entity Class, despite being defined at the Entity Filter level
Hi Community,I noticed a weird thing with Entity Scoping (perhaps it's just me or it's a SN nuance)...1. I created an Entity Class called 'SOX Infrastructure' 2. I created an Entity Type called 'SOX Applications' and in the 'Entity Filter', I build m...