Hi, While we generate Risks from Risk Statements. Just wondering if there is way to move risk state from Monitor back to Draft automatically, like how we do it for Controls? I don't think there is any frequency concept in Risk Management App as such,...
Hi all , I want to know the use of the risk roll up and tolerance in risk statements and entities , is the risk rollup and tolerance in these two modules inter related? Or is the Risk Rollup anyhow dependent on the Risk score generated in Risk Statem...
Hi All, Can I know how we can achieve RCSA in ServiceNow GRC solution? It will be great if someone can explain the lifecycle of the Risk Management use case starting from entities up to roll up values. Thanks in advance
I have a policies in which whenever I create a new policy it gets published and the KB article is also available in the knowledge base , but there is a workflow field in knowledge base which shows the status in draft state even though its published.I...
I have found out that the inherent likelihood and inherent impact is referencing to the risk criteria table , I want to know why is it this way ? I want to know the entire functionality behind this , and if possible the entire risk management ? Is th...
I found an old post that provides information about Compliance Reports, in particular, SOC 1 TYPE 2 Report from ServiceNow https://community.servicenow.com/community?id=community_article&sys_id=350f2115dbe9a300107d5583ca9619ae I looked at the https:/...
Can you confirm what are the roles within the BCM module? For e.g. a Risk Module has Risk Admin, Risk Manager etc?
I am new to GRC:Risk Mangement , I want to set the qualitative feature to true to compute risk score in risk register . Can anyone tell me how can i do that? Also when a risk is created through risk statement and after filling the assessment question...
I have few controls for which attestations are not at all getting created. The control is already associated to the attestation. I notice this happening, when I make some changes to the attestation in our dev environment and then commit those changes...
Hello Experts, We have this flag exempt. But I am not sure what is the business use of this. I know that if issue is accepted, an exception needs to be created. But Who sets the exempt flag? What happens if exempt flag is checked? Does it not gener...
can anyone explain about below four integrations.which is better and why, what does it brings. ions
I understand that the sn_grc roles are changing in Orlando (per this post https://community.servicenow.com/community?id=community_blog&sys_id=7d07e198db4b0cdc5ed4a851ca961994)The question I have is based on the following scenario. I have two differen...
Hi All, We are in the process of implementing Risk Management and have a custom rating matrix as shown below. Depending on the Likelihood and Impact the score should be A, B, C or D. Can someone please suggest how to adjust these values in the Risk C...
We are debating whether to setup our internal Quality Manual (which contains our basic IT general controls) as a Authority Document or a Policy. Is there a reason why we couldn't\shouldn't setup as an Authority Document? Appreciate any suggestions.
