I have attestations going to users. When they click the "Take Attestation" button in the "My Assessments and Surveys" module of the Risk application, ServiceNow shows the Number of the control and the relevant questions. However, the number itsel...
Hello Community, As shown in the below image I have an issue with the 'SAVE' button on 'risk-assessment-main' page of 'Risk Workspace'. 'Save' button on inherent risk assessment page is unable to save responses of factors that are defined for Risk A...
Hi Has anyone managed to produce a risk heat map based on actual number of risks rather than risk assessments(current dashboard provides only risk assessments total)? Also, Has anyone produced a trending of risk dashboard, so if a risk score changes ...
we have a lot of entities in our sn_grc_profile table without a class tagged to them . The main reason for this is that we did not have any entity class rules defined in our system . We are now defining these rules for various tables , but my doubt i...
Hi, I am looking for a detailed documentation of the plugin "GRC: Business User - Lite" and want to understand: a) What this plugin is about? b) What's the difference between "GRC: Business User - Lite" plugin and the role "sn_grc.business_user" ?c)...
Hi, Silly question I am sure... Can someone tell me how I download the most current ServiceNow SOC2 TypeII report? Thanks
Hi Everyone, I have two fields ( 'Risk Value' and 'Risk Rating') on the form, based on the Risk Value like, 0-5->low6-10->Medium11-15->High>16-very high Risk rating will be calculated like low, Medium, High, etc. Code: After BR: updated checked Condi...
Dear Community, I have below scenario for Risk Assessment and want to check your openinon - We have 2 different RAMs with same Class and currently If we perform Risk Assessment on (Risk Register R1) with Entity "Fashion" , the same (Risk Register R1)...
Can someone please guide me for the following scenario I am trying to setup . I have a control that no user should have admin rights . I am now designing an indicator for this control . This will be a manual indicator , but in supporting data i...
Hi, We did some testing to see how the answers affect Risk Statements and Control Objectives. We delete the attestations but the results are not removed from the Control Objective Compliance Score. Is there a way to reset all the scoring for Entity ...
There were some instances where the users contacted us asking to modify their responses as they misunderstood the questions or they had incorrect information at the time. Policy violation and fraudulent aside, from a technical perspective, is there a...
Hello, How can we map all IT Assets from CMDB to IRM Module in best effective way so that we can do Reporting on the Threat & Vulnerabilities associated with all IT Assets ? Do we need to create all IT Assets (CI Records) as Entity Records as a manda...
Can anyone please explain how compliance score is calculated. I'm using pdi (personal development instance) with servicenow sample data (san diego) In attached screenshot can anyone please explain why control is non compliant but control objective co...
New to ServiceNow and trying to clean up some older/stale policies. I have three records in "Awaiting Approval" state but do not show in the approval queue for the listed "Approver." How might I approach setting the records back to a Draft state t...
We are setting up GRC and using OOTB as much as possible but we have a slightly different response to our Risk Acceptance workflow. The OOTB behaviour is that the response approach of 'Accept' for a risk requires an approval from the risk owner. We w...
