Hello, I am planning to go with GRC Certification. My prior attempt was failed. What I observe most of the questions are from Conceptual part which I was unclear whether it was right or wrong. Can anyone help with the GRC CIS preparation material/vid...
Hi All, BACKGROUNDWe're trying to create an interactive filter that allows us to filter reports we have for GRC record types (Issues, Controls, Risks etc) based on the organisational structured Entities that those records belong too. Our organisation...
Hi,According to the GRC: CAM model (20.x.x version), we have OSCAL import available from Xanadu 4a version. But, even after the installation of latest plugin, oscal import on workspaces/studio throws an error "Alert level: high.OSCAL Import is not su...
Hello GRC experts, I haven't got a chance to hands on GRC: Entity Based Access. If anyone did, can you please share:1. If we enable Entity Based Access, will it override existing configuration at Confidentiality?2. When should we use Entity Based Acc...
Hey guys, plan module is not automatically pulling the data from BIA. can you please advice what could be the reason. Thanks
Does anyone have some standard documentation on IRM management? I am not a developer but more of admin role such as set up entities, create risk framework etc. I got to the point of creating risk, and risk framework assigned to entity/entity type and...
Hi, On policy exception form, there is a field to select Configuration Item. What relevance this field have in lifecycle of policy exception?
Dear Community, we are facing a typical issue in Risk configuration based on How we can define which are inline with Risk Statement like where to put Processes Owners input output and then metrics ProcessesOwnersInputOutputMetricsRisksOpen JobsSc...
Hello I am working on the GRC implementation (Washington release) for the client. They have below instancesDevTestProduction They are having around 50 policies which they want to be implemented as a part of Policy and Compliance. - Policies- Policy...
We want to popup some custom fields on clicking on Post Comment button.How we can do that?Thanks in advance.
Hi all, We have recently implemented Third-party Risk Management (TPRM) and are looking at possible risk intelligence providers. We have a demo with SecurityScorecard and have installed/configured the SecurityScorecard for Vendor Risk Management int...
Hi Community, I have a requirement to set the re-assessment frquency for Vendor Risk Assessment based on the clouser of previous VRA.Say I have a VRA assessment got closed at 7th Feb 2025 with Risk Rating as 2-High, based on my risk rating I want the...
Hi, We are trying to import multilevel (Parent -child relationship) citations and control objective in serviceNow via UCF integration. However, its only importing Parents unique citations. Kindly provide your suggestion to achieve it.
Hi all, Referencing this video on Operational Resilience and Scenario Analysis, published on Oct 9, 2024. Video showed there is a Importance and Impact Tolerance score card in a Service. I am not able to replicate this in my PDI out-of-box (I am on X...
Hi Team,I am trying to install the GRC (IRM) plugin, but am not able to see the plugin in my personal dev instance. Instead only dependencies plugins are available.
