As part of our Third-Party Risk assessments we do a full SOC2 Type2 Report review. As part of that review we are required (by our upper management) to obtain attestations from vendor contract owners that any Complementary User Entity Controls (CUECs)...
My company is investigating whether to enable smart assessments at the beginning of a new implementation for IRM/TPRM. We are looking for any customers or implementation partners that have done this, opinions on doing one or the other, pitfalls and r...
We are working on Audit Workspace where we have changed the "Description" field type from "String" to "HTML". In workspace the "Description" field value is displaying with HTML tags. Is there any way to display the content without any tags.
As we are starting our journey to convert classic attestations to new attestations using the Smart Assessment engine we found ourselves at a decision point on how we migrate the templates between the environments. Background: we cannot build the temp...
Hi,I have an issue.The svdp portal which is present in TPRM module, I want to hide the submit button for all other users except for the ones whom the assessment is assigned to.How can I do this?From where can I make the changes in submit button of sv...
I'm not able to select newly created auditable units in an engagement scope. Even after I activate them and risk assess them, they are not available for selection. On a side note, I imagine scoping in the auditable unit will bring in all of the entit...
For the user in risk workspace rcsa delta report it is showing only group by option but not the filter option to select
Hi,I have requirement. I am creating 2 questions in GRC attestation1. Control Design (Choice field of 1, 2,3)2. Control Performance(Choice field of 1, 2,3)There is one more field "Control Score". Now Control Score will populate response by the condi...
There will be reliant entities and reliant entity types related list in audit workspace whenever control is common control.Upon clicking New on Related List , Entity Creation Record Page is not opening in the workspace , Upon clicking on Reliant Enti...
In Residual assessment we need to write a script that uses impact and likelihood values, but we get aggegrated inherent score as variable how can i fetch the value (or factor value) for each impact or likelihood in residual assessment to get that in ...
There is a requirement to configure heatmap for advanced risk to add to dashboard. I am relatively new to GRC module. I saw this ServiceNow doc - https://www.servicenow.com/docs/bundle/xanadu-governance-risk-compliance/page/product/grc-risk/task/conf...
Currently we are checking the feasibility of integrating ServiceNow with Microsoft SharePoint for policy authoring. As per the ServiceNow docs, for the integration the 'Microsoft OneDrive spoke 2.3.1' needs to be installed. Link to the doc: https://d...
Hi,As stated in the subject, I configured some Smart Assessment questionnaires and added some automated answers to all of them. I think the issue lies within the automated answer behaviour, since they count as "answered question" and I imagine that t...
Hi everyone, Does anybody know if there is a way for the test data in DemoHub to somehow be adapted to the time frame in which your demo will take place? For instance, if you are presenting SPM to a client in March 2026, to have for example Planning ...
While configuring the RAM, for inherent assessment I chose product as the criteria, where inherent score=impact*likelihood. Now for residual assessment, I want to use the formula, 'residual score=calculated inherent score*control effectiveness'. But...
