Hi, I am not sure to understand what the difference is between, on one side: Policy > Policy statements > Controls And on the other side: Risk framework > Risk statement > Risk Thanks for helping! M
I've update GRC: BCM Core to 3.0.2 and I'm trying to update my training material. On a recovery task there is a new field TAG. What is this field? And, How is it to be used?
I know we can build recovery teams, but I need a call tree like this: Anyone know how to go about building this, I'm assuming this would be a document template and javascript to get the fields from sys_user and ...group.members etc. Department Mana...
Hi Team, Would like to know the feasibility of the following- If the user creates the risk event from portal with financial loss amount in $, someone from UK can view the loss amount in pounds or someone from Australia can view the amount in AUS Th...
Hi All, Has anyone came across the issue with the "Import Policy Text" functionality which is available on compliance workspace under Policy Text field on policies I am trying to import one doc and it performs the steps but does not show up the polic...
Hi Everyone, In current system when a risk is moved to respond state a risk response task gets created. Can I change this functionality and create multiple risk respond tasks and assign them to users who are of same group?? If I change , will it bre...
I am interested to know whether anyone has recently upgraded from GRC to IRM Pro or IRM Enterprise? If so, did you go straight to IRM Ent or did you start with IRM Pro then upgrade to IRM Ent? I am interested to know how intrusive an upscaling is if...
Hello, I have been trying to get a better understanding of how others are using the Out of the Box Policy Exception module in ServiceNow. To me, the process seems a bit counterintuitive in that approvals are the responsibility of control owners and ...
Hi Community, I need to create a report in which i need to apply vendor filter on it. When i select a vendor it should filter related business apps, related business apps should show servers associated with it and server should show the count of vuln...
When a user takes an attestation:- "Is this control implemented": Yes- Attach Evidence - click paperclip- Choose file: [file]- The attachment now seems to be attached- Add text to Explain field- SubmitThe Attestation is now Complete 100%, the Control...
Can we upload data into the GRC module via a CSV (or similar) to batch / bulk load the input?
Hi All, I have a client scenario where one child Risk Statement has more than one Parent Risk Statement. The issue is that the Parent field on the Risk Statement form is a single reference field. Any idea, on what would be the best course of a...
Hi , We have a requirement where we have to set a Field as Ready only based on a condition in list view. See below workspace related list view: We want to make the RTC field read only when the RTC field has value pulled in while loading. As of no...
I am implementing SAM & HAM from Scratch in my organization so what are things I need to consider ? Any reference Documents that will help me ?
Please can someone explain how the 'Mitigating Controls' related list works when creating a policy exception?
