We are planning to implement our own Risk Matrix as shown in picture, but in Risk criteria table "Maximum value" are required fields. As we use qualitative and do not care about currency values, how do we configure Risk Criteria to work for our matri...
Hello.I'm fresh in GRC and do not understand this. Can anyone kinldy please explain to me a relation.(1)What is the relation between: Controls created in "sn_compliance_control"I understand it has a lifecycle:And can be compliant and not: Person open...
For all questions in RTO and RPO assessments in the "Assessments" tab of a BIA (sn_bia_analysis) in workspace view, the text box currently titled "Additional note (Optional)" should be renamed to "Justification"
Hi,I wanted one help to know that, I want to generate new issues for the controls even if there is already one issue opened in the system for the same control. Now OOTB feature works as if there is already one existing issue in the control and the is...
I generate word document out of the record with a custom button in record. I am looking around to add a feature to embed attachments in record to the word document I generate, so that the document will have all the attachments embedded too instead of...
I am trying to create a DR plan, and when I select the target application as the primary scope, I am getting WAY more CMDB relationships than what I want or need as related assets. Is there any way to restrict the related assets to first level CMDB ...
I have a new requirement to add a new table and also filter out some data from an existing table under Asset type column which is present under Scope tab of the plan in BCM Workspace. I checked the app route and screen collections but could not find ...
HelloAny one got some nice explanation how does Automated Factors work - practical ?All trainings are only about manual. I'm running my tail to understand this.Customer is asking:If we have an automated factor on a RAM and the factor looks at changes...
Hi All, Im trying to get the choice values of factors which is in Risk assessment form. These factor choice values are stored in risk factor response table. Based on factor response choice values, we need to show error message in Risk assessment for...
I would like to know about the use cases of Framework Profiling in NICST CSF accelerator. 1. How you will be creating targets, orient targets, create activity, create gap analysis, create action plan2. Any workflow explaining which activity to be do...
Hi all, If you know about patch upgrade(Practical) Washington DC can anyone share the doc/video.
Are there any good free resources to help me understand the policy life cycle in ServiceNow GRC Washington D.C.? I'm trying to get a better understanding of the workflow and configuration options that are available out of the box.
Hi All, I have a clients' requirement for integrating Surveys and Regulatory Change Management, The use case is, a Survey should be sent out based on the schedule job and the answers from the Survey to me captured in the Regulatory Alerts. Can any on...
Hi, We are implementing the NIST CSF Use Case Accelerator and would like to delete the policies that are out of scope from the instance as they are not needed for the customer. I have tried various options, such as deleting records, removing rel...
Hi Can someone provide an example on what you include in Audit Engagement Scope. Right now we're modifying that instead of adding entities we're adding control objectives instead.
