How to create COntrol Tests in GRC. I do not see the IT GRC -> Control Tests as given in the Madrid Docs. I believe Attestations are created to check the Control Design Effectiveness. How to check the Control Effectiveness in GRC
In preparation for my next project, I'm reading through the GRC documentation and I'm a little confused. This is what I understand it is saying:Profile type has a single reference to a profile classAny record in ServiceNow can have a profile generate...
Hello everyone, I'm working on the DEV instance (Madrid version) on GRC - Policies and Compliance for a long time. I've customized a lot of different fields, tables, labels and so on. I would like to export this work in a different instance. I would...
In the Citations table, citation names sometimes contain characters/symbols that are unreadable by JavaScript and it's causing my script that works otherwise not to work. To test this I would copy a query from the citation table where the name had a ...
What is the best way to enter (copy & paste) content from a Word doc into the policy text section of the policy form to maintain formatting? is there a third party app or any recommended method? thanks!
Hello, the final goal of my question is the compliance score % in policy statements. In my understanding and implementation in servicenow, every policy statements are evaluated through the attested controls related to statements. For example, if th...
How do I schedule my attests? My control owners need a clear idea ahead of time so they can resource plan for their attestations. Right now, there doesn't appear to be a "date" field to register. There is a "frequency" field where I can choose freque...
Does each policy statement have an indicator template? Also when the indicators are generated, what would be the next step?
Would like to clean up the OOB Choices that do not pertain to our organization, and also edit / complete other fields. Have the GRC Admin role, but the role seems to be lacking ability in the Policy and Compliance area, (Risk works better). Our Sys...
We just installed the Vendor Risk Portal. We currently have Service Portal and our Instance as well.Both SP and the instance works correctly for checking SSO, and directing the user based on role. But some reason Vendor Portal isn't challenging ...
Hi All, I'm wondering if there's a way to edit or add on to a submitted attestation. Use case is that a control owner forgot to add an attachment to their attestation and it looks like the only way to turn in that attachment is by doing the whole att...
Need to activate GRC module on personal instance in madrid version. The plugin is not available on the instance.
Friends, I have enabled Risk managemnt plugin in my Prod instance..I want to assign below roles to users sn_risk.admin sn_risk.asmt_creator sn_risk.manager sn_risk.reader sn_risk.user etc to team members..are these roles chargeable? Will it impact it...
Before turning on Instance Security Dashboard (PA) in our production I activated this in our development instance. The numbers that show between Instance Security Dashboard ( PA) and Instance Security Dashboard do not match. For instance using the...
for Policy Statements. - what is the scope or definition of Category and Type fields. In other words, how best can one define values for these fields