Hello, We are trying to improve our GRC assessment process by allowing users to take the assessment directly from the Risk. The issue is there can be multiple respondants to the Risk and therefore multiple assessment instances. We have the code to d...
I am trying to build a RAM (Risk Assessment Methodology) in which I want to have dependency between the factors (questions). For example, if user responds to a question as 'Yes', then we want to show additional questions to the user. Please suggest o...
I have developed a number of RAMs using Qualitative scoring and making use of Qualitative Transformation Criteria and each time I do so I try to figure out what OVERRIDDEN means in the context of Qualitative criteria. I have had it explained to me by...
I am getting this error, when i hit Perform Inherent Assessment button In risk assessment methodologies , although it is published. How do i fix this issue ? @Gunjan Kiratkar@Community Alums
Hello GRC Community!In an Authorization Package, we have added Controls using Control Overlays and as expected, they generate Indicators and Control Tests. ONE control was manually added and it generates an Indicator but not a Control Test. I have tr...
The inherent assessment could not be initiated as the approver is not available. Please contact your administrator to review the risk identification configuration and then try to initiate the assessment again. Although the risk manager is available. ...
Our organization is new to ServiceNow, we are starting to capture Controls. Can anybody tell me what is the purpose of the Category and Type fields in the Controls entry screen? What do you use them for? Thanks for the advice
I need to modify filter conditions(if there are 3-4 records in the risk assessment table for the same risk we need to show only the latest risk assessment record) in the below heatmap. If I'm clicking on the edit option it is redirecting me to UI Pag...
Hi all,Long story short, had an SEM turnover while we were mid-stream in setting up BCM. I'm taking over and have used BCM many years ago so some things I cant recall or have changed. Current difficulty is in understating the "Score timeframe mapping...
Hi All, Would request someone can explain how the issue risk rating is getting calculated in vendor risk assessment. Also, how to modify the ootb formula and make it count of issue-based. For eg 2 issues critical, 1 medium then critical, 1 issue crit...
Hi folks, Client is asking for us to remove some duplicate Entity records from sn_grc_profile table. When I delete the entity, it stays deleted until "GRC audit daily data run" and "GRC Daily scheduled data collection job" jobs run. At that point, th...
Hi Everyone,I've received an email notification referring to the scheduled job has identified inactive entities. When you open the link, it will go directly to the list of entities (that are active). And so I just typed in "Inactive Entities" in Serv...
On the workspace (compliance), has multiselect option worked for anyone on the List type of field !!?? I am facing issue like whenever selecting multiple options from the list earlier record got wiped off . when I have selected one approver from th...
Hi Team, We are looking to build an OOB dashboard targetted toward a CISO. I wanted to check if you have similar dashboards in your organization, what are the top Metrics / Reports / Visualizations that CISOs would like to see in your organization?...
Hi, I was wondering is anyone could recommend a GRC course? I've been recommended GRC fundamentals by my employer but I can't find a specific course with that name. Would the GRC fundamentals include all courses in the attached picture? Thanks in adv...
