As organizations evolve in complexity, so do the risks that surround them. In today's digital landscape, having a centralized, real-time, and intelligent risk management approach isn't optional — it's critical.ServiceNow’s Integrated Risk Management ...
Dear experts, I am facing a problem when defining a risk assessment methodology for my entity. Currently my client wants to have two different risk assessment methodologies for the same entity. As far as I know, currently the risk assessment methodol...
I have a requirement related to Controls, Indicators, and Issues in ServiceNow. Currently, when I open an Indicator and execute it, if the Indicator fails, it automatically creates an Issue. But my requirement is that the Issue should not be created ...
Hello, I am trying to load data on Control to Entity (sn_compliance_m2m_control_entity) using Transform Maps so that the Reliant entities get added to the Common controls. I am not sure how to achieve this. Can anyone help me on this??
HelloAny one of you dears ever meet this kind a scenario: If any CI in the ServiceNow database meets all the criteria defined in the ENTITY FILTER, does that automatically guarantee that a corresponding ENTITY will be created and assigned to the desi...
I'm creating a RAM in Advanced Risk and want to create the following structure - IMPACT (Group factor) containing 2 Group Factors (Confidentiality & Integrity) and 1 Manual Factor (Availability). Each of the C & I Group factors include manual factors...
Hi, Is there a way to load data using transform map, so that we can setup common controls with reliant entities. So, when we load data for reliant entities, they will get added to the common controls in the related list. Is this configurable or can ...
Hi Team, I found the permissions of GRC Business User role here. Now, I wanted to know the permissions assigned to the GRC Business User - Lite role and limitations or restrictions when compared to the Business User role. If anyone has insights, plea...
This is primarily a proof of concept to explore its feasibility.Is it possible for a regulation to have sub-regulations linked to it? For instance, we have Contoso Regulation 600, which is associated with related regulations such as: Contoso Regulat...
Hi, I have 2 factors to calculate Inherent Likelihood in Risk Assessment. I have created manual factors for both and then group factor including both of them. The ask is "User should only be able to use any one of these manual factor, not both.
Hello.This is OOTB Risk Appetite Scale:Inside a see a warning: Warning: This is a Medium Risk file that might get updated again in later releases. Do not alter this file unless necessary.Because of the update and upgrade I would like to DEACTIVATE th...
Hi, I have a business requirement of incorporating the approval workflow of policy exception process for the extension process. Currently, the policy exception extension is available for assigned to person to approve the extension as a click of a bu...
Hi,For Inherent assessment, I have below 3 manual factors. 1 with zero weightage(I just want user input but dont want to consider it in score calculation) and 2 with 100 % weightage. The Qualitative scoring logic is product. Issue: When i take the a...
Hi Team, How to make the Add button(to add mitigating controls) be made available on the Control assessment in workspace which have Calculate based on=Control environment assessment on the RAM configuration? OOB the Add button(to add mitigating contr...
Hello! The control category field here is visible and is mandatorybut when I create controls in our Compliance Workspace, this field is not visible anymore. Where could I possibly check the configs?
