Hello Expert, I am working on building the controls and attestation module for our customers. As I understand, if I have a control, with a frequency, it keeps creating attestation based on the frequency every cycle. My question is, 1. if an attestati...
Q1: I read the article on HiPortal around what ServiceNow doesn't allow to do in penetration testing like no network layer testing, no DDoS etc. However, we may hire someone externally to do the pen testing on one of our sub prod instances, but would...
Hello, We noticed during some testing that vendor contacts are not able to invite others from the vendor portal. When attempting to invite a new contact, the form will show a green "Updated" banner (see screenshot below) rather than the banners sayi...
Hello, What is the relationship between issue and indicator in GRC? Thanks.
Hello i need to make yes/no data type by default answer to no in assessment metrics.and the field should be invisible to questionnaire responded unless the field right above is completed
Hi Community, I currently have an issue with the risk mangement Here is the situation (DEV-Instance):- I created a risk statement and related it to a control objective, which is active and creates controls automatically- I related an entity type to t...
I am weighing an option of not relating control objectives to polices in our environment. I understand the the basis for relating is control objectives to policies may be: 1. The related control objectives provide the foundation for the policy. On...
I have sub-Prod instance which was recently upgraded to Orlando version. When trying to add a Table to new Entity Type Filter, the only option shown is None. Verified that all entitlements are available in this instance. Is there a property or anoth...
Hi Team, We are trying to use a custom scoring logic to calculate the Inherent Risk in Advanced Risk Assessment Instance. We understand it gets calculated from Impact & Likelihood factors. But tried to find out the relevant business rule but failed t...
Hi Everyone, There are two read only fields for Entity table called "Inherent Score" and "Calculated Score". Is there any out of the box way to populate these fields automatically based on the scores of all Risks associated with this Entity? Please r...
We are configuring our Risk Criteria to be able to produce the custom Risk Matrix from the image provided. We are using qualitative approach. The combination of Impact and Likelihood must result to Inherent score of Low, Moderate, High and Extreme ...
I have seen in demo videos there is a GRC Portal webpage that shows widgets for My Attestations, My Issues, My Risk Assessments and so on. How/where can I install this in my developer instance? I do not see anything in plug-ins. Thank you-
I'm a bit confused of the intended use of the "Issue Manager Group" and "Issue Manager"? The documentation says; "The group/user responsible for managing and reviewing the issue." Our interpretation of this was at first that this could be the Risk Ma...
Hi all, I see that some products have licenses based on the number of GRC users (e.g. "1,000 GRC Users Included"). I wonder what do we intend for GRC users. I understand the number of GRC users is the number of users having at at least one GRC role (...
Hi All, I have assigned sn_grc_admin to few user and seems like this role definition is "Provides administrative rights to the GRC suite of applications and modules”. Possible a user can delete record? How do i find out how capacity of this role? Tha...
