Hello, I came across to following scenario: Created a policy exception from an issue linked to a control without control objective.The system automatically added an "Impacted Control" which is visible through the related lists.I was able to proceed a...
Need help on flow and subflows How to call subflow from a flow in flow designer
Hi We need "SSAE 18 SOC" papers for an audit process, I have found two documents into the community site about it: ServiceNow Platform SOC 1 Type 2 Bridge Letter 03-31 2021.pdf ServiceNow Platform SOC 1 Type 2 Report 03-31 2021.pdf but for the second...
Hi All, I am working on requirement where a UI action will show all the related task based on assessment. I am facing two issues while developing this - From UI action code, I am unable to pass sys_created_on value of current record through Glide Aja...
How is the authority document compliance score calculated?
Hi All, We have authority documents imported into the table. However, they donot currently have any sourceID. When we do any integration with UCF - what will happen with these regulations? Are they not considered at all? Is it a best practise to h...
Hi team, I need some help in understanding the Compliance Status of a control. If the Attestation fails, that Control status is non-compliant and default functionality creates an Issue. Once the Issue is worked on and a Remediation is in place, how...
Quick Question - trying to understand the difference between user and operator licenses in ServiceNow? Amit
Hello. We are implementing IRM globally. We have consider naming each geographic location, and each Legal Entity (company), as an entity in IRM; however, it looks like many of you use entities for business functions, processes, even applications. It...
We just installed IRM. If I create a risk from a Risk Statement, the Risk inherits the description from the Risk Statement, but it doesn't let me edit that description for the risk. Is this the way it suppose to work? I would imagine that it should i...
Apologies for asking so many questions, but we just recently implemented IRM. We are debating on the advantages or not of using Risk Statements vs. creating individual risks without inherit any information from the Risk Statements. We are wondering ...
We would like to make some changes to risks loaded into the system without generating associated notifcations to the owners and assessors in the business. Is there a quick way of turning off the IRM notifications which would normally generate withou...
I am new to the Risk Module (IRM). I would appreciate if somebody can provide me some guidance on the following: I understand that if I create a Risk Statement related to 3 entities it will automatically create a risk for each of those entities. Does...
We are trying to setup Integrated Risk and can't find the following plugins:Performance Analytics - GRC: Policy and Compliance ManagementGRC: Policy and Compliance ManagementGRC: DataRegistryGRC: Risk HeatmapGRC: 360 degree relationship visualization...
I have entity types that come from the same table "cmn_locations" and I have broken them down by a few Countries. US Offices, Canada Offices, and India Offices. I created an Entity Class for each and then a Class for Locations, which they all roll ...
