I have an issue where there are two UI views created (Example A & B) in sys_ui_view for two different projects in same instance for sn_audit_advanced_plan and sn_audit_engagement tables form view with custom roles created for users under those projec...
For the sn_grc_issue table, I created a new form view and added several reference fields that are also available in the main form view. However, when I try to use the reference lookup from these fields in the new view, I am unable to search for recor...
Hi,We are unable to map the "Not Applicable" response option to the Not Applicable control state when using Smart Assessments.Currently, if I configure "Yes" as the preferred answer, the control status can only become Compliant or Non-Compliant. My a...
The policy exception has an out-of-box (OOB) flow that gets triggered when the duration reaches 80%. At that point, the exception is automatically getting closed.May I know why it is getting closed?
Hey Everyone, I wanted to know that there are two "Risk" tables that I have gone through:1. "sn_risk_risk"2. "risk"And I wanted to know what the difference between them?
It is my understanding that entities can be related to a Configuration Item (CI), such as a Service, Application, individual Server, etc (basically anything in the CMDB) In Nigels case the CI is the Pegasus Service Offering, and the Risk Statement is...
Hi Community, As an alternative to the my other question of using custom workspaces as a solution;We would like to seek inputs/advice on using page variants as an alternative option when adding a new BU to share the GRC workspace under the same inst...
Hi, Within Privacy Management, is it possible to have multiple concurrent privacy impact assessments against an entity/service? Or is it limited to one PIA? Thanks.
Hi all, I am scratching my head with link/relations between BCM and IRM.I am comfortable to setting up both sides (BCM and IRM) and a silos, but and I am wondering what's the relation of utilization between two modules? Example: In IRM you setup: ent...
After clicking 'Take Assessment' in AI Control Tower, the Start button is not displayed and the page shows 'Thanks for completing the Assessment' even though the assessment has not been started.
Hi Community,We are looking to build a custom GRC/Risk Workspace for specific user personas on an on-prem ServiceNow instance (version: Zurich), without modifying OOB records or disrupting upgrade paths.The goal is to create a parallel Experience th...
Why do we have Control testing done via audit engagements/ test plans in ServiceNow and not independently via Controls application. Why should 3rd line (Audit) be involved in control testing at all? Appreciate your thoughts/ inputs on this.
Hello GRC experts, How do Entity-Based Access, Confidentiality Records, and User Hierarchy interact to determine a user's final visibility and edit permissions for Risk and Compliance data?
Hi all,I'm looking at the OOTB integration described in KB0860382 and I'd like to clarify which resource management solution it's built on. Does this integration work only with the legacy Resource Plan solution, or does it already support the newer R...
Hello.This is OOTB Risk Appetite Scale:Inside a see a warning: Warning: This is a Medium Risk file that might get updated again in later releases. Do not alter this file unless necessary.Because of the update and upgrade I would like to DEACTIVATE th...
