Hi Experts, I'm stuck in a scenario to understand how the control generation/updating happens when item gets scoped with ane entity. Scenario facing:We have recently migrated/manually created controls for entities and retired them manually. We also h...
Hi All,This is Advanced Risk Assessment screenshot.Here how Qualitative scoring is calculated. Thanks in Advance.
Hi All, Please let me know has anyone implemented the Firewall Audit and Reporting Integration solution with Palo Alto Networks firewalls. Any supporting documents or links will be helpful. Thanks in advance.
Dear experts, I am trying to make a script include to call in a reference qualifier to show only the users with the same department with the user field in the sys_user_delegate form. But currently the return value is null for the sys_id. May I know w...
I want to know alike Classic Risk there is Risk Criteria Table.For ARA where Risk Calculation is done.According to the Inherent Risk Value Given. Where can we customize it?Thanks in Advance.
Dear experts, I am facing a problem where currently if I did not tick the value_certified box for metric data task, it will abort the action but it wont force a refresh rule to refresh the page, so user have to refresh the page manually to go back to...
Dear experts, I am facing a problem where my clients want to be able to define the Metric Properties, Method, Schedule, Data Classification and Approval at the Metrics Level, rather than the Metric Definition Level which the system is practicing cur...
We have an issue setting up GRC:Metrics where we have a Manual Metric Definition that requires Metric Data Tasks to be completed across multiple divisions of the company by different users. The data owner field on the individual metrics is inherited ...
Hi @sandeepdutt @Ankur Bawiskar ,Can someone help. Since i am new to IRM.I want to understand the difference between and with few examples of IT Risk Department Perspective based on banking sector.1.Control objective and control(name and description)...
If a customer says that at the end an alert will be a part of a source document, why do I need two different types of alerts, (Reg Alert vs Source Document) what should one say? And why do we need a source document table for import, we can directly a...
Using the NIST controls, on Washington. Some controls have 'fill in the blanks' like this one;Maintain and review visitor access records using [Assignment: organization-defined automated mechanisms].I change the Control objective to say:Maintain and ...
A policy exception was tied to and approved to a control while it was in draft mode. When we went live with the control and tried to move it into attest, the attestation respondent received the email to attest to their control, but they got an error ...
What is the difference between [Control and Control objective] and [Risk and Risk statement]With an example for each, in the IT Risk department for Banking sector.Could anyone help me with above question?Thank you for the support in advance.
Dear experts, I have created a script include which is DelegationUtil, which helps to check is the user a delegate of the owner. And I want to create a module list view for them, and this is how defined the URL arguments but currently is not working....
Hi, I'm doing variants of Audit Workspace Homepage for different user groups. In variant settings I can define audience for variant, but I can't see my user groups here. Why I'm only seeing 78 groups what I can define for variant? I have 1131 user gr...
