Hey all- my GRC team is publishing their Policy & Compliance documents into multiple categories under the GRC Knowledge Base. They have some categories that are suitable for public consumption (snc_internal) and others that need restricting for grc ...
I found a few practice exams online, but the provided answers are very questionable.Some basic answers that seem straight forward, but they have select the wrong answer. That makes me question the integrity of the other questions that I am trying to ...
Hi community,Hope that if you're reading this, you're doing well. I'm doing a Regulatory Change Management implementation and I'm thinking about using Smart Assessments instead of Risk Assessments because my client doesn't really have a Risk Assessme...
Hi,Anyone currently using Business Continuity Management module in their organization? i would like to ask some questions regarding the functionalities and usage, especially if you are in North America Thanks
I want to add the Implementation Statement to the SSP, but can't seem to figure out how to do that.Any help would be greatly appreciated.
We have been trying to add basic CI information to Business Plans: Owner for Applications, IP address for servers, and so on. ServiceNow insists it can be done. Has anyone been able to show this level of detail in the BCM module?
Once Respondent says yes in attestation, control become compliant and then move to review state. Is it possible that control status will become compliant only after reviewer approves it and move it to monitor state ?
Hello everyone, I’m having an issue when trying to display data in a Data Visualization. I’m building one from the cmdb_rel_ci table, and when I try to show any data from the parent field related to cmdb_ci_business_app, the data shows up as null or ...
I can't find a DORM forum, so assuming this is the correct space? Q: What is the script driving the DORM data flow highlighted below? Context:The Register of Information within DORM (Digital Operational Resilience Management) leverages the [core_comp...
Hi Team, Need to know the use of the field "Methodology for status calculation" in the section Risk Appetite status within the Risk Statement form. There option for to select only one Risk Assessment Methodology in this field.1. What is the impact if...
Hi, I am setting up the Compliance Management workspace for the first time on Yokohama and am having errors while navigating the workspace. The type of error I am receiving is 'Part of the query on sn_grc_profile has been ignored because of insuffici...
Hi Team, When I add an entity manually to an entity type which is associated with control objective, generates a control for that entity.Please help me to understand the underlying process. How the control is generated and with the control owner as a...
Hi All, I’m trying to understand the available OOTB table relationships in GRC/IRM and have a couple of questions:How can I identify which entities are directly related to a specific Authority Document?Once I have those entities, what’s the correct w...
Hi, I have a few questions related to IRM Professional and IRM Enterprise. I’m trying to understand what features are included under IRM Professional vs. IRM Enterprise. Currently, I’m exploring Risk Assessment Methodologies (RAM) and the different t...
Any role is needed to take control attestation? I have tried in my PDI without giving any role to a user and he is able to take the attestation in employee center portal. But I am also reading in docs that sn_grc.business_user role is needed.
