Hi,For Inherent assessment, I have below 3 manual factors. 1 with zero weightage(I just want user input but dont want to consider it in score calculation) and 2 with 100 % weightage. The Qualitative scoring logic is product. Issue: When i take the a...
Hi Team, How to make the Add button(to add mitigating controls) be made available on the Control assessment in workspace which have Calculate based on=Control environment assessment on the RAM configuration? OOB the Add button(to add mitigating contr...
Hello! The control category field here is visible and is mandatorybut when I create controls in our Compliance Workspace, this field is not visible anymore. Where could I possibly check the configs?
Dear experts, I am facing a situation where I want to configure what is shown below in the screenshot for the control assessment tab when adding a control for the risk assessment. How and where can I go and configure to add in more fields from the co...
Dear experts, Currently the system will prompt the user to define the Data Collection Details and the Approvals in metric definition before setting up a new metrics. Is there any way to keep the function of the metric definition but I want to move th...
I would like to have a number of Control Test Definition's configured to run every 3 months, the options we have available are:DailyWeeklyMonthlyPeriodicallyOnceOn Demand To achieve this at the moment we set this to "Periodically" and set the repeat ...
Hi community, I saw that using the Risk Register the "risk" is created in the "sn_risk_risk" table.If you create a risk from SPM (project) the "risk" is created in the risk table.What is the difference? How those tables/processes are related? Thanks,...
Dear experts, I would like to have two entity fields in the same risk event form, where I created a relationship between upstream and downstream entities. Since reference field cannot set up a dependent value in the dictionary, how can I make the dep...
Is there a way to filter entities by entity type when adding entities to Audit Engagement?
Hi, After an attestation respondent completes the control attestation, is it possible to set up email notifications to be sent to the user that requested the attestation respondent to complete the attestation? Or an email that notifies that the speci...
I created a Risk and completed the Assessment but the Risk is not changing the state and all the fields were grayed out.
Hello all, is there a document that describes the implementation sequence for Third Party Risk Management, something that details the roadmap and offerings. Similar to Recommended Implementation SequenceANDhttps://learning.servicenow.com/nowcreate/en...
My organization prefers using the workspace functionality of ServiceNow and we are unable to figure out how to view the responses of our third-party risk assessments from our vendors in the workspace view. Below is how you can view it in the native U...
Dear Community,recently I had a case where the business organization is such that one company provides IT applications to multiple consuming companies, who then provide their own set of services to their own end users. Those consuming companies are t...
Good morning,Let's have a discussion! After an Authorization Package has completed the RMF Process and is in the Monitor Step, what are your ideas to make changes to earlier steps. It seems that the OOTB method is to back up through each step until ...
