We're reclaiming inactive PDIs to keep them available for active builders. Learn what's changing, who's affected, and how to protect your work. Read More
I am new to Servicenow TPRM module, Can somebody suggest me a good course/video that would help me to quickly gather useful info on TPRM module and let me know what is the flow of TPRM module and also give good examples of use cases
I have a scheduled Flow in ServiceNow that generates Smart Assessments for control records.Current setup:Trigger: ScheduledLookup Records: Table = Control TableLook Up records Filter:state != retired (Retired value = retired)Primary control owner (fi...
Under one Evidence request can we have multiple Evidence collection details with same control. There is an OOB BR - Validate duplicate evidence for field which is restricting it, what is the purpose of this BR. If we make changes in that BR to have m...
Hello community ,Recently i started learning GRC Module so i want some guidence about GRC implementation practically , what are its good practice , what kind of question that might ask GRC , Some real world example and scenarios to understand GRC ,...
Hello, I have just completed BCM training courses and related micro-cert in Now Learning. The path was very helpful in understanding the concept of BCM and the practical tasks of implementation of it on the platform. I was also tasked to look into Op...
Hi everyone,We are using a ServiceNow group/learning instance to simulate a real-world GRC environment (different roles like admin, risk analyst, auditor, approver, etc.). MFA is enforced, and we understand it cannot be disabled.Issue: We want to avo...
I want control owners (entity owners) to have visibility to controls they are owner of. I have granted they sn_grc_business_user_lite role. But now they have visibility to all the controls in the system. What is the best approach to limit their visib...
Hi, We are trying to use SAE for control attestation but When we launch control attestations, the Smart Assessment Engine generates one assessment task per control. In our scenario, a single control owner has 20 applications (entities), and each app...
Hi All,How can i implement Risk mitigation strategies and Risk metrices ? How can monitor the risk metrics?What steps need to follow ? How can we propose Risk mitigation approach ?Any suggestion will be highly appreciate .
Hi All,what all information need to know in deeply for risk frameworks (ISO 31000, NIST, COSO) and compliance standards (SOX, GDPR, PCI-DSS, HIPAA) for GRC Project ?Please assist.
Hi All,Can anyone help me for Audit Management business use cases ? How to identify trends, issues from the data and opportunities for improvement. for those ?Please assist.
Our controls are derived from our policies and standards, I'd like to be able to build these with Hyperlinks to the related 'Policy' associated KB article. The logic here is for the control data to be pulled into a smart assessment during the attesta...
I created a Control Attestation Template using Smart Assessments. Initially, I was able to create attestations without any issues. However, after accidentally physically deleting the Control Attestation Template, attestations with the newly created C...
I have created an approver group for GRC Digital Resilience Incident Reporting (DRIR) application with roles of "sn_dri_inc_rptg.digital_resilience_incident_user" and "sn_oper_res.user". The approvers need to have Read only access to the DRIR case,...
Hello Team,We would like to understand how collaboration is expected to be achieved in Classic Control Attestations within ServiceNow GRC/IRM. Specifically, we would like your guidance on:* Whether Classic Attestations natively support collaborative ...