We have imported the first shared list of authority documents, NIST SP 800-53 R4 Moderate Impact, we needed for our GRC implementation. However, we have several other authority document we want to import through the UCF integration but do not want t...
Hi,Our company has been moving to a security model in which sys admins have a separate admin login from which they perform only admin-level tasks while their regular SSO sign on is used for everything else. I'm being asked if we should implement thi...
Hello, Community experts I'm targeting to automate Vendor's risk rating definition, that will be based on conditions, that come out of GRC module. When reviewing risk rating field dictionary, I've noticed that it's values come from sn_grc_choice tabl...
I am unable to create a UI policy to expose a field in service now. At first when I went to a field name, it gave a choice list, but wasn't populating with fields from the issue table. I configured it to be a reference field, but couldn't get that to...
Hello,When a create an audit workbench defining the scope of the audit by including the profiles, controls, risks etc. What is the best way to ask all the control owners to ask for evidence during that point of time? I am aware of the functionality w...
Hello,Our instance is in domain seperated mode. We want to change the nameof one domain. Is there any risk to change the domain name? Thanks in Advance,í–zgür
We want to kill all user sessions and force to login again.How to do that?Best Regards,í–zgür
We are trying to restrict reporting for a user to limited tables .The 2 solutions could be :1. Hiding the tables to appear from the reporting list2. Ensuring that no data appears eventhough the not-needed table is selected.Also, am trying to understa...
when you impersonate a user to do fault finding is there a way to show the audit history against the system admin user that has done the impersonating and not against the user. I'm not sure this is possible but in an environment where security and ...
Hi ,I have a requirement where my client doesn't want to show the Assigned to names in the Activity log. Like, if an Assigned To comments, the update gets captured in the Activity log with below details : Here, the above view is when I am logged in a...
Is there way to use Windows Kerberos Login and ServiceNow Discovery?Currently ServiceNow Discovery uses NTLM as the method.Current Version: Helsinki
I have a question from Audit to find out who may have accessed an attachment. Is that something I can do?
Hello,How can I encyrpt glide.db.properties file on the application nodes? I don't want database password to be seen as clear text. Best Regards,í–zgür
For my application , I want to get the list of ACLs created in my system , along with the role mapping. How can I get this information? Is there any API available to fetch the list of ACLs ? Thanks in advance
If I make the citation a different type (oe even a policy), is that just a string value and really has no value as a control in GRC?
