I am looking for a way to have employees "Acknowledge" a policy in GRC. I was thinking of simply using the "Useful" UI Macro but due I was informed that the verbiage had to state "I have read and acknowledged this policy" then the Yes / No buttons co...
After making a change to some control objectives (classification), it has set the controls back in to draft state. How can I move these in bulk back to review and monitor state and keep frequency the same from the initial attestation date?\ Thanks
How do I request the data models for Integrated Risk Management / GRC
Following the pre-implementation episode, in this 6 minutes tutorial, Shauna and Donna are back to present a step-by-step guide to get you and your team up and running with Policy & Compliance and Risk. This is a must watch to reduce your "time to va...
Can anyone share the purpose or source of the Policy Type field? It is a drop down, and I'd like to understand how the values are intended to be used.
I noticed a feature to import stuff from UCF; is there a way to import other data or is there predefined controls based off of the authority (NIST 800-53) since UCF database is not maintained and not cross walked to industry standards. Also, is there...
We are not currently using UCF with no immediate plans to purchase a license for integration. Unfortunately, all the GRC documentation only seems to refer to UCF and no other way to import controls. Is there a tutorial or some guidance that can be fo...
Hi Can someone please give me a better understanding of indicators, Probably a layman's explanation Are control and risk owner mandatory, are they the ones to oversee the attestation and assessment can the control owner and risk owner be the same a...
Hi All, I am a newbie to the GRC and planning to implement it. Can you please tell me what all things I need to consider for the implementation and share any implementation document with me. Basically, I am looking for a technical implementation docu...
Hello Everyone, I am looking for top 10 use cases for continuous controls monitoring (CCM) using SNOW GRC both IT and Non IT
I have a control objectives that are related to my policy that create a four layer deep relationship with other control objectives (using the parent-child) relationship. If I check the compliance of the deepest level (Child objective level 4), does ...
A client hospital wants to know if NOW Platform is HiTrust certified. I know in GRC via UCF you can get Hitrust citations, but here we are referring to the NOW Platform being HiTrust Certified like it is for SSAE18, ISO.... etc.
Hi, In New york release notes it states "Your vendor contact can upload a prefilled SIG spreadsheet or take a form-based questionnaire which gets imported to the instance. " Before NY release there was a link to download them now that there is no l...
Please guide on how to get the latest SOC 2 report
Hi Team, Is there any way to export an excel template for Risk Assessment Designer to be used for creating set of questions? Is there any way to Import a set of questions (an excel file) to Risk Assessment Designer? Your help will be much appreciated...
