Encryption at rest and transit for ServiceNow
How does encryption work within SN. Is data encrypted at rest if so how and how about in transit?
Forum Posts
Add sort button is not working as expected in sys_ux_list
HI I'm working on a requirement where I need to set a default descending sort order for a specific column in a UX List (sys_ux_list)When I try to add the sort option for the list, it redirects me to create a new record. Has anyone else faced this iss...
Resolved! Risk Assessment Project vs Risk Assessment Scope
Hi Community, I am trying to figure out the difference between usage of 'Risk Assessment Project' vs 'Risk Assessment Scope' in Advanced Risk solution. As far as I have explored, both functionalities look similar to me i.e. 1. Scope the Assessable En...
Resolved! Parent and Child Control Objectives
I am working on testing Parent and Child Control Objectives, but with not much success. I created a Child CO and associated it to a Parent CO. The Parent CO is already associated to the Business Application Entity Type and I can see the Child CO is...
Operational Risk Management (ORM)
Hi Community, I can see ORM is being offered separately under 'IRM Professional' license, however there is no separate plugin available for ORM. Trying to understand if there are any additional capabilities / applications being offered in the name o...
BCM Plan update dependencies button issue
Hello all, I have added a new element definition for a CI class and that is now available under Plan scope section but when I select any CI in that as a primary scope and click on Update Dependencies button nothing is updated.Do I need to make change...
Impact of Control Attestation in the Control Lifecycle
Hi! Maybe someone can give me a simple explanation on what happens to the control after being attested? Where does its impact land on the GRC or which parts of the application is it being used?
GRC - Risk Statement - Cascade Changes - Risk State - 'draft'
Hi All, Please can someone assist, when updating a Risk Statement, a OOB Business Rule - 'Cascade Changes' set the State of all risks to 'draft' I made the changes to the business rule to exclude updating the Risk state 'draft' when the risk.categor...
Automated factor
Hi, I am working on the automated factor to collect the data likelihood data automatically.1.As per our requirement Based on surveys result of particular field it needs to calculate automatically.So I have created a Survey with some string fields and...
Can't approve questionnaire responses impersonating as operational risk manager on GRC IRMF
Hi, I am working on Lab 7.1 of GRC IRM Fundamentals on Demand training module.After submmiting questionnare response by Risk analyst, I am not able to see approve button once I impersonate as operational risk manager. I am attaching the lab instruct...
What is the function of this two fields under metric? Period date and due date offset
Dear experts, I would like to know what is the function for this two fields here under metrics, which are period date and due date offset. Since both of this field is read-only and I would like to know what causing them to populate the date here.
Incorrect "Reliant Entity" Activation
It was observed that, in certain cases, when an entity is deactivated then later reactivated, the wrong "reliant entity" associations (Control-to-Entity records, sn_compliance_m2m_control_entity) are reactivated when the entity is reactivated. In o...
Resolved! How do i remove the OOTB filter under control assessment when performing a risk assessment?
Dear experts, I would like to remove the restraint of only adding the control with the same entity and open up to select all controls regarding the entities when performing a control assessment. Currently when performing control assessment, when we t...
Resolved! 1st line control testing
Good afternoon,We have implemented IRM including Audit management and we are wondering what functionality other organizations use for '1st line control testing'. At the start of our implementation we used 'Audit control tests' but a few years back we...
Implementing a 3-class 2-tier risk taxonomy i ServiceNow - how?
In our risk management framework, we have defined and are using a non-financial risk taxonomy which helps in categorising risk and casual factors. We have based this on the ORX Risk Reference Taxonomy which suits us well. The taxonomy is made of thre...
