It was observed that, in certain cases, when an entity is deactivated then later reactivated, the wrong "reliant entity" associations (Control-to-Entity records, sn_compliance_m2m_control_entity) are reactivated when the entity is reactivated. In o...
Dear experts, I would like to remove the restraint of only adding the control with the same entity and open up to select all controls regarding the entities when performing a control assessment. Currently when performing control assessment, when we t...
Good afternoon,We have implemented IRM including Audit management and we are wondering what functionality other organizations use for '1st line control testing'. At the start of our implementation we used 'Audit control tests' but a few years back we...
In our risk management framework, we have defined and are using a non-financial risk taxonomy which helps in categorising risk and casual factors. We have based this on the ORX Risk Reference Taxonomy which suits us well. The taxonomy is made of thre...
I am trying to figure how to link the chrome_toolbar icon so that when it is clicked it takes you to a saved report in servicenow.
Hi, I am trying to understand how SN user management calculates the "allocation" of GRC Operator and Lite Operator. I notice in the allocation report the following reasons are given (I dont know if there are any other). Can somebody tell me what they...
In ServiceNow GRC, what happens if we don’t attach an attestation to a control objective? On what basis will the compliance score be calculated in that case?Also, what would be the impact of not linking an attestation, and what are the best practice...
I would like to try a specific use case in ServiceNow GRC module using AI in my PDI. (the use case is to check the policy text entered in the policy record is validated grammertically, re-write the content with proferssional inclusive language, highl...
Dear experts, I would like to inquire about how to add one approval workflow task before the business user submit the risk for risk assessment. Initially what my client wants is when the business user creates a risk, rather than straight away send t...
Hello Everyone, After installing the required plugin on my pdi, i am unable to see the grc modules on my pdi instance, I am able to see the grc policy, risk application scope, but unable to find modules please find the below details, attached screens...
Hello, I have to create an export UI action on engagement form. When I click on it, it will export the excel view of the test plans report which has the current details of the associated test plans to that engagement. How can I achieve this??
Hi, I want the records from related lists [Downstream risks and Downstream controls] on Entity form[sn_grc_profile] for a particular entity class to be removed without getting them deleted. How can I achieve this without creating buttons on related l...
I want to trigger an email notification weekly to assigned person if there is any pending task in the Bin which comes from the table "sn_grc_task ", created the scheduled job while executing able to see the logs thats triggering the job and event b...
I have a requirement that required scripting for getting impact and likelihood scores so we can utilize them in residual assessment.score = 2 * Likelihood - Impact;
How to create a report that identify Incidents that were created as a P4 and then changed to P3?
