Are policy written from citations? Are authority document a framework can an organization have more than one framework/authority documents How is control objective related or connected with control? Please, I need a layman's explanation once UCF is a...
Hello, I want to understand how authority documents are updated in SN. I understand that once we activate the UCF plugin, it allows you to import all the documents in SN. However, when the authority documents/citations/regulations gets updated on UCF...
Hi,We have an edge encryption proxy which work on another port than the 443 due to security constraint.This configuration generate white screens because some redirection in iframe are not the same "domain:port".The glide.set_x_frame_options properti...
If I have a manual indicator frequency set (say 1st of each month), is it the 'GRC indicator nightly run' that creates the new indicator tasks when the date is correct? In our system, this job is currently not active.
We've been trying to get the GRC Attestation OOTB assessment notification firing when the control state changes to Attest. We have tried various workarounds including changing the Notify Assessment User BR to include "Attestation" and changing the O...
I have an issue with vendor risk assessment process. One of the vendor using the vendor portal has partially completed the vendor risk assessment. Now due to some problems he is unable to access the assessment record. The vendor has not hit the Submi...
[OOTB] I noticed that the Related Lists for the Entity Type form contains duplicate items. These duplicate items are illustrated in the screenshot below. What purpose do these duplicate items serve?
Hello Group,Sorry if this has been answered already, but I couldn't find a related post. I am using my developer's instance to create a test audit environment for my company as a use case. I did the following step:I loaded the appropriately GRC plugi...
Can someone explain what happens after a policy expires? Do you need to create a new Policy or can you update the expiration date? What happens to the Controls that have attestations? Do they all get reset? We have a policy that states that Service C...
I teach the GRC courses and I get this question a lot and some of the answers are the same for all the exams. The common answers are: Review the exam blueprint (How to get to this is at the end of this article)READ the book - both the slides and the...
My org has a set of policies on the website and some are in the documents. Is there a way to load the data into ServiceNow?
Hi All,i am facing the issue while importing the date type data in to service now.it is giving me error.Please help me to rsolve this issue.can we write any script to bring it into yyyy-mm-dd format?
Hello, I noticed that on the CIS RCI blueprint for the exam Policy and Risk management Lifecycles are mentioned, however, I was unable to find any slide about this in the participant guide from the beginning of September. Can someone point me to some...
Hi, I'm reviewing the following but cannot follow the steps described on my dev instance/london. https://community.servicenow.com/community?id=community_article&sys_id=0f7ce2e1dbd0dbc01dcaf3231f96192f Specifically these steps: - Get the list of table...
We have not subscribed yet to UCF for our implementation. We are still evaluating. My Compliance area has asked if there is integration with ACLI/American Council of Life Insurers or NILS is Wolters Kluwer. Our Compliance area gets daily update...
