We are in the process of adding our frameworks, policies and regulatory documents. Then we will parse these into citations and into control objectives. Of course many of the control objectives are looking for the same conditions, for example say th...
Can I customize ServiceNow for my product needs?I plan to hire full stack devs for this issue following this guide. Will I succeed? Have anybody had such an experience?
Does anyone have licensing requirements info pertaining to the following case: We are standing up a risk program and I was recently told that for every risk assessment sent out, my organization would need a single license for each user attesting. Thi...
In GRC: Advance Risk assessment module : how do trigger assessments ?
Hi,I was wondering if anyone knows what is the difference of creating a hierarchy of Policies (One parent policy with one or more child policies) and a hierarchy of Control Objectives (One parent Control Objective with one or more child Control Objec...
How is the recovery time achievable (RTA) being calculated? I have only known about the description of it from the docs https://docs.servicenow.com/bundle/paris-governance-risk-compliance/page/product/grc-business-continuity-management/concept/bcm-wo...
Trying to determine if ServiceNow meets HIPAA ComplianceCan anyone answer this of point me to an article the explain this?Thanks,Bob
Hi I have a sample of 49 Audit Tasks, 2 are marked as closed complete. When should the approver receive a request to either approve or reject the engagement? Is it only after all tasks are closed and no pending open tasks.
Created 2 Entities with respective Controls(Control Objectives)Control Objectives were having Parent Child Relationship ( CO1 - Parent , CO2 - Child)Now CO2 is assessed and got Compliance status which in deed gets compliance Score on to Entity.I need...
Hi Experts, I would like to know if is there a standard build already available in UCF for GRC standard frameworks (the basic compliance frameworks that contain the authority documents, citations, and controls). Is there a possibility to obtain these...
Hi Team, There is a particular Workspace appearing in our sandiago drop down by the name of " GRC workspaces" . How is it different from Compliance /audit / Risk workspace. What is the exact use case of it ? Please guide . Thanks in advance Regards ...
Can someone explain the value of manual indicators in comparison to Attestations. They seem to do similar things. I will break this down into two areas to help my understanding. Situation: I have a control objective applied to 100 devices where I nee...
Most GRC issue(IPT's) are taking more than 20 seconds to open from the list view in both new tab, current tab. This issue began several months ago. They used to open very quickly. This is a major time waster and makes it very difficult to manage our ...
Hi, We are looking to activate this and operationalize this for Policy Management and other needs within ServiceNow. How to enable this in ServiceNow such as - creating Campaign, Analysis of Updates, Approval workflow and Control updates, etc. Need h...
Hi community, I am a bit perplexed with respect to how the Policy Exception record/app works in ServiceNow. My GRC knowledge tells me that when a Policy Exception (PER) is requested against a Policy, a Risk Assessment would need to be conducted, but ...
