Dear Team,I have a requirement to modify the Request Assessment popup in the risk module. Currently, when a user clicks Assess on a risk record, a popup is displayed where they can select assessors, approvers, and specify the number of days to overdu...
I would like to know the entire Privacy Management workflow. As per my understanding is that initial screening assessment can be created followed up by the PIA assessment?, but once I move my processing activities to "discover" state, it automaticall...
Is GDPR DPIA Use case Accelerator is Deprecated for future implementation?If not deprecated, then how can we use it for Implementation of Privacy Management
In sn_grc_issue form there is control/risk variable as reference field. The ask is to filter the data irrespective of the Data and IT governance group members to view their respective frameworks details . The framework is listed from the risk stateme...
Does anyone have experience migrating GRC modules from APM to EA for your source of business applications that you can share tips or best practices?
When someone clicks on 'Assess' button on Risk record from Risk Workspace , system opens up a Glide Model . Could somebody help on figuring that configuration out.Note : This is related to Risk Workspace and not the classic risk form.
What is the most defensible architecture in ServiceNow IRM when a single enterprise control is intended to mitigate multiple risks across multiple entities, but the control's actual effectiveness is materially different depending on the entity, proce...
Hi,I had few questions as below-1) we need to update the factors in RAM, what approach we need to take whether we need to go for new RAM or update the existing? if so what is the Impact for existing and what is the feasible approach and why?2) I need...
Hi Community,In Risk Workspace → Risk Assessment, the OOB Advanced Risk Assessment component displays Qualitative Weight and Qualitative Score under the factor details.I need to hide these two fields only for a specific Risk Assessment Methodology, w...
Does Control Owners and testers need to have different roles?My understanding is that below are the responsibilities of each. What roles needs to be assigned to control owner and control tester and will they differ?Control OwnerResponsible for ensuri...
Does ServiceNow provides DPIA plugins ?
Dear Team, I'm using Advanced risk assessment for performing enterprise risk assessments. Once assessment is submitted it goes for approval. On the approval page we have 2 options 'Approve' and 'Reject' declarative actions. If I click on approve belo...
I have a requirement as below: How do I make the scoring from Quantitative Scoring to Qualitative Scoring I. ScopeA. Business NeedThere is a need to have a functioning risk register in ServiceNow. This is part of t...
Hi everyone,I'm working with Assessment Templates in ServiceNow (Third-Party Risk Assessment) and noticed the following options in the template menu:Create a CopyCreate New VersionCould someone help clarify:What is the functional difference between C...
Hello!Scenario: I have 2 VIT's on the same CI. I request a policy exception from 'VIT A' and a Policy Exception record is created and impacted control is populated automatically because there is an Entity linked to the CI. After this, if I raise a Po...
