I can't find a DORM forum, so assuming this is the correct space? Q: What is the script driving the DORM data flow highlighted below? Context:The Register of Information within DORM (Digital Operational Resilience Management) leverages the [core_comp...
Hi Team, Need to know the use of the field "Methodology for status calculation" in the section Risk Appetite status within the Risk Statement form. There option for to select only one Risk Assessment Methodology in this field.1. What is the impact if...
Hi, I am setting up the Compliance Management workspace for the first time on Yokohama and am having errors while navigating the workspace. The type of error I am receiving is 'Part of the query on sn_grc_profile has been ignored because of insuffici...
Hi Team, When I add an entity manually to an entity type which is associated with control objective, generates a control for that entity.Please help me to understand the underlying process. How the control is generated and with the control owner as a...
Hi All, I’m trying to understand the available OOTB table relationships in GRC/IRM and have a couple of questions:How can I identify which entities are directly related to a specific Authority Document?Once I have those entities, what’s the correct w...
Hi, I have a few questions related to IRM Professional and IRM Enterprise. I’m trying to understand what features are included under IRM Professional vs. IRM Enterprise. Currently, I’m exploring Risk Assessment Methodologies (RAM) and the different t...
Any role is needed to take control attestation? I have tried in my PDI without giving any role to a user and he is able to take the attestation in employee center portal. But I am also reading in docs that sn_grc.business_user role is needed.
They seem to have same purpose that is providing evidence for particular control.
I am not able to find any documentation on how to use the new GRC Feature roles - ServiceNow Store app. It's included in standard IRM sku according to my subscription details.
Hi Team, When an indicator task is closed, duplicate indicator results are populated as shown below. Observed that the Business Rule "Indicator task close" is responsible for adding the results once the task is closed. Can you kindly advise on the a...
Dear community, We have noticed in our instance, specifically in the Vendor Management Workspace, a new tab called "Workflow" has been added to all type of records. Does not matter if you open a Due Diligence record or a Third-Party record, this tab...
Can anyone explain what are the impact that we can observe in Risk/risk statement when the issue is created against a Risk/risk statement in all state of issue for example If the issue is created against risk record, what are the changes we can see i...
Hi, Does anybody know how the "Due Date" of an Indicator Task is calculated ?And can we influence this due date ? My use case is that we want to have a due date which should be dependent on the indicator frequency. For example, Indicator frequency = ...
Hi, would anyone who has been using UCF be able to explain the rationale behind their duplicate citations ? in the screenshot below, we have a bunch of citations, imported from UCF, with the same name/description; linked to the same authority documen...
Hi All, Can you suggest questions i might get for GRC: IRM in the interviews and ansers to it.