Resolved! Significance of Entity Type
Hi Everyone, What is the significance of creating Entity Type? I can create Entity directly and can complete the entire process. Trying to understand the need for creating Entity type?
Forum Posts
Resolved! How do I move a Risk Acceptance task to ACCEPTED state
Hi there - how do I move a 'Risk Acceptance Task' to the 'Accepted' state? Context/Info: Advanced Risk Assessment (ARA) plugin turned onAdvanced Risk done via the Risk (sn_risk_risk)After ARA done, I 'Respond' to the Risk via a Risk Acceptance TaskAf...
setting a date for assessments and reassessments for newly imported vendors
We recently moved to ServiceNow VRM and imported our vendor list from the previous GRC tool and a spread sheet. What didn't come across are the reassessment dates from the past GRC tool. Now I just want to go into each vendor record and manually set...
Change control Status When Closing all issues
Hello, How can I change the control status to "Compliant" after closing all isues associated with the control. How it Works Today: it changes the status of the control to "Compliant" When closing just one issue Regards, Control: Issues associate...
Business Continuity Management RTO Gap Calculation
We are in the process of deploying BCM. Trying to understand how RTO Gaps are calculated. I have created sample BIA and completed the RTO Impact and Dependency Assessments. I also have a Plan with a defined Scope, Loss Scenario and completed the ...
How to Exempt a whole system (entity) with Policy Exceptions
Hi,Looking at the Policy Exception process I was wondring if there would be a way to use policy exceptions for a specific use case.:"My policies applies to a selected scope of Systems and I want to descope one of this systems using the Exception work...
Entity types and filters
Hello We have 80 entities that are automatically created from a custom table called "u_products" using entity types. We have an integration set up to bring these products from an external system and are going to store in a different table (for busine...
What is vendor issues and tasks?
Hello Experts,Can you help me to understand what is the issue and task in the vendor risk management? Any examples please?Who can create these issues and tasks?ThanksUday
When I put into Attest the Risk Assessment is not created. Is it because I have to "revert to default risk score"
When I'm doing a risk assessment, I want to move it to Attest mode so that a Risk Assessment can be created. However, when I put it into Draft and then to Attest, it does not generate the risk assessment. I do notice for the ones where it does not ...
Resolved! How to add URL in email script to use it in Notification
@ankurt @Ankur Bawiskar Dear All,I'm trying to use below mention link in (var url1 = '<a href="' + gs.getProperty('instance_name')+'.service-now.com/'+'url' +'">Link</a>';) but it is not working in notification.please let me know where I'm doing mis...
Cancel expired assessment
Hi All, I have identified several of our Control Attestations being set to cancelled by a scheduled job. Has anyone else had issues with this OOTB behaviour - since it cancels active attestations for us if they are overdue! Thank you in advance. Ki...
Resolved! Access Reviews in P&C
Has anyone used the Policy and Compliance app for access review? In this case the entities will be users with access to x system. I did not think the P&C will be an audit tool but we are trying to maximize its features. e.g. create a Control Atte...
Resolved! Risk and Compliance workspaces
We recently upgraded to both San Diego and IRM (from GRC). In our test/dev environments, I can see the Risk and Compliance workspace portals, but not in or production. I was wondering if there is a simple spot for me to look to enable them? Thanks in...
Residual Risk and Calculated Score
Inherent risk = the amount of risk that exists in the absence of controls. In other words, before an organization implements any countermeasures at all, the risk they face is inherent risk. Residual Risk = the risk that remains after controls are acc...
How to create a reference between tables Control Objectives and Citations
Hello, I have imported content into 2 tables in ServiceNow called Control Objectives and Citations. The source data for these tables is in a csv file in case it's relevant. Each row in the Control Objectives table (screenshot 1) corresponds to severa...
