We have been using GRC (IRM) to perform risk assessments for about a year. We have been maturing our capability and adding new entity types. However, with existing entity types, we have had a problem where we made a change to the entity filter and ...
Hi GRC experts. Controls are related to risks. To take into account the importance of different controls they may be weighted. So far so good. Unforunately (in my understanding) the weighting will be taken into consideration for every related risk on...
Hello Experts, I am trying to trigger a record creation on Table B based on certain conditions on Table A via a Business Rule. Written an AFTER (Insert , Update) Business Rule on Table : sn_audit_control_test When : State = Closed Complete & Control ...
Do entities automatically get created from company record?
Hi Everyone, On what I understand you can automatically assign entities to Entity Types via Entity filters. Somehow in the Entity Filters table field, its not getting any tables. Is this by default? I tried to create via background script one record ...
what are Upstream entities,Downstream entities,Downstream risks,Downstream controls,Downstream engagements,Downstream issues and Downstream tasks? and usage of them?
Hello. I have a question about the purpose of the following states in a Risk form: Respond, Review and Monitor. When a Risk Owner selects the Risk Response type (mitigate, avoid etc.) it generates a Risk Response task where a Risk Owner puts the Plan...
Hi! Currently working on a case where we don't want to assign one owner (owned by) to a entity, but rather define the owner by e.g., owned by group or owned by roles. The main reason for this is due to the internal infrastructure of the company and ...
Hi, Does anyone know how I can create new question templates (screenshot) to use in the Risk Assessment Designer? I would like to create a new template for "Likelihood" of risk, but could not find where to do it. Any help is much appreciated, thanks...
Hi All, I have configured the following in the system. - Created an Assessment Metric Type, with an associated Metric Category and Metrics - Created a Flow in the Flow Designer to trigger an Assessment based on the above Assessment Metric Type Th...
Hi, Can we automatically assign control objectives to entity base on trigger conditions. For example, the computed inherent risk > 6, it should create a control objective to its entity. Is this possible in GRC? If yes, what functionality in GRC shoul...
Hi Everyone, Can someone provide sample of a sample script for GRC: Advance Risk - Automated Scripted Factor. I have this requirement to automatically calculate the score of a company. Example: If company is greater than 5 years it would score 10, el...
How are controls and Risks related in ServiceNow. We have a process to implement where I am trying to Map compliance obligations to business processesIdentify and categorize inherent risk of non complianceCreate assessments for compliance riskAssess ...
Why does a 'risk acceptance' response require an additional management authorisation / approval step vs. 'risk mitigation, avoidance and transfer' and can the system be configured so these are aligned?? In our business the person with authority ...
Hi All, I am trying to create an assessment metric type with several questions (metrics). The assessment will start with 3 Yes/No Type questions and I would like to show the rest of the questions depending on the answers on this 3 questions. Serv...