Hello Experts, Has anyone came up with a solution to delegate an attestation to another person, when he/she is not available? I have checked with ServiceNow, and they confirm, they dont have that option out of box. So I wanted to check, if anyone ha...
To whom it may concern, Could you please let me know where can I find the latest SOC1 Type II report? Thank you in advance. Kind regards,Sandor Molnar
I am looking for a way to have employees "Acknowledge" a policy in GRC. I was thinking of simply using the "Useful" UI Macro but due I was informed that the verbiage had to state "I have read and acknowledged this policy" then the Yes / No buttons co...
After making a change to some control objectives (classification), it has set the controls back in to draft state. How can I move these in bulk back to review and monitor state and keep frequency the same from the initial attestation date?\ Thanks
How do I request the data models for Integrated Risk Management / GRC
Following the pre-implementation episode, in this 6 minutes tutorial, Shauna and Donna are back to present a step-by-step guide to get you and your team up and running with Policy & Compliance and Risk. This is a must watch to reduce your "time to va...
Can anyone share the purpose or source of the Policy Type field? It is a drop down, and I'd like to understand how the values are intended to be used.
I noticed a feature to import stuff from UCF; is there a way to import other data or is there predefined controls based off of the authority (NIST 800-53) since UCF database is not maintained and not cross walked to industry standards. Also, is there...
We are not currently using UCF with no immediate plans to purchase a license for integration. Unfortunately, all the GRC documentation only seems to refer to UCF and no other way to import controls. Is there a tutorial or some guidance that can be fo...
Hi Can someone please give me a better understanding of indicators, Probably a layman's explanation Are control and risk owner mandatory, are they the ones to oversee the attestation and assessment can the control owner and risk owner be the same a...
Hi All, I am a newbie to the GRC and planning to implement it. Can you please tell me what all things I need to consider for the implementation and share any implementation document with me. Basically, I am looking for a technical implementation docu...
Hello Everyone, I am looking for top 10 use cases for continuous controls monitoring (CCM) using SNOW GRC both IT and Non IT
I have a control objectives that are related to my policy that create a four layer deep relationship with other control objectives (using the parent-child) relationship. If I check the compliance of the deepest level (Child objective level 4), does ...
A client hospital wants to know if NOW Platform is HiTrust certified. I know in GRC via UCF you can get Hitrust citations, but here we are referring to the NOW Platform being HiTrust Certified like it is for SSAE18, ISO.... etc.
Hi, In New york release notes it states "Your vendor contact can upload a prefilled SIG spreadsheet or take a form-based questionnaire which gets imported to the instance. " Before NY release there was a link to download them now that there is no l...
