Can someone explain what happens after a policy expires? Do you need to create a new Policy or can you update the expiration date? What happens to the Controls that have attestations? Do they all get reset? We have a policy that states that Service C...
I teach the GRC courses and I get this question a lot and some of the answers are the same for all the exams. The common answers are: Review the exam blueprint (How to get to this is at the end of this article)READ the book - both the slides and the...
My org has a set of policies on the website and some are in the documents. Is there a way to load the data into ServiceNow?
Hi All,i am facing the issue while importing the date type data in to service now.it is giving me error.Please help me to rsolve this issue.can we write any script to bring it into yyyy-mm-dd format?
Hello, I noticed that on the CIS RCI blueprint for the exam Policy and Risk management Lifecycles are mentioned, however, I was unable to find any slide about this in the participant guide from the beginning of September. Can someone point me to some...
Hi, I'm reviewing the following but cannot follow the steps described on my dev instance/london. https://community.servicenow.com/community?id=community_article&sys_id=0f7ce2e1dbd0dbc01dcaf3231f96192f Specifically these steps: - Get the list of table...
We have not subscribed yet to UCF for our implementation. We are still evaluating. My Compliance area has asked if there is integration with ACLI/American Council of Life Insurers or NILS is Wolters Kluwer. Our Compliance area gets daily update...
Hello, I have been tasked with assessing the controls for ServiceNow (they are providing service to us). As a result, I need access to SOC 2 Type II (full report) and ISO 27001 documentation (including Statement of Applicability and the testing resul...
Hello, Could you please advise if there is any new ISO27001 certificate available. I only found those covering 1st Sept 17 to 30th Sept18 and ISO27001 certificate only until December 2018. I'd like to know if you're currently being audited for new on...
Hi all, Need one very quick help. Can i have multiple controls linked to 1 Policy Statement (Control Objective) which is tied to a Profile Type (Finance) and i don't check "Create controls automatically", and lastly i create controls manually, link i...
I need to create the process flow of risk management module in servicenow. Can someone help to understand the entire process?
I am planning to test the GRC part of ServiceNow on NewYork developer instance however for certain plugins it says "a fee-for subscription", is it paid plugin on developer instance as well or is it just for the production instance? For ex. GRC: Polic...
Hi All,We are in the process of setting up and configuring our CMDB within SN. One of the teams have asked if there is the functionality of storing usernames and passwords within the CMDB i.e. for particular servers. If this is possible what issu...
I'm looking for the steps/process to configure a local MID server to be able to pull down the security logs from our production instance of ServiceNow. Thank you.
I have questions related to defining the best configuration for Profiles types, etc. I believe I understand the basic concepts (create Profile types, define Profile filters, associate Policy statements, controls generate, etc. ) What is challenging ...
