I have a control for which we have done a control test via an Engagement. We do not wish to do an Attestation. Is there a way to move the control from "Draft" to "Monitor" without triggering an Attestation?
Hello GRC Forum and fellow GRC implementers!In a recent implementation we came across this problem with Privacy Management product's OOB data structure and process model, which, I think, weakens its suitability for privacy management in accordance wi...
Hi All,I have a requirement where I need to add few addtional fields to capture some information in the below screenshot. I want to add few more text fields similar to reviewers comments. Please help.
Hello everyone,How can I ensure/account for configuration compliance in ServiceNow when implementing the CIS benchmark with Qualys?My goal is to achieve Level 1 on servers with ServiceNow compliance dashboards to monitor.Can I use the VR implementati...
Hello,I am investigating a customer request relating to how best to handle changes to a completely authorized package. Forexample, if the Categorization needs to change, do I really need to go back one step at a time until I get back to Categorize? ...
Dear GRC Community Can Smart Assessment templates (i.e. questions, answer choices, guidance text etc.) be localized to other languages? Looking at sn_smart_asmt_question, it seems that there is no way to enter content in different languages. Are we m...
Hi,Requirement:- I want to do a factor validation in ARA. I've configured confidentiality, Integrity based on 100%, 50%. The factor score chosen in confidentiality 50% should not be greater than 100% score. Please can someone suggest how to do a fact...
ServiceNow Tool for Audit: Your Step-by-Step Guide to Audit Excellence If you're managing audits, compliance, or risk in your organization, you know how overwhelming it can get. Audit deadlines stack up, emails and spreadsheets pile on, and nothing s...
Why ServiceNow GRC is Transforming Risk and Compliance Management Managing risk and compliance in today's complex organizations can feel overwhelming. Many teams juggle mountains of spreadsheets, emails, and manual checklists just to keep up. But wha...
I have two control objectives that are linked together in a parent/child relationship. I would like to keep both control objective records, but unlink them so that they no longer have a relationship. I tried removing by changing the Parent field in ...
Hi All,Apologies if this post is in the incorrect forum, I could not locate 'GRC' Hi All!We are starting our journey with the very exciting Operational Resilience Application and have come quite a long way in getting it to "see" our CMDB Business Ser...
Dear Experts, I would like to understand how would an Engagement, the status changed from Onboarding to Active? Or how will the engagement become Active? When after requesting a due diligent request and the request has been closed. It still remain as...
Hi Community, We want to add multiple vendors for a vendor contact. If we make that vendor field as of type list on vendor contact, then its creating issues on vendor portal, its not showing any vendors, assessments and other fields on the vendor por...
We're at the start of our journey with IRM and I wanted to find out if anyone has created good examples of the key user journey maps for each persona that I could look at to start our thinking around how can structure our existing process?
We recently started mapping policies to control objectives. I noticed that once you publish a policy you can no longer map controls/control objects to that policy and furthermore once the control objective is mapped to a policy you can no longer upda...