HelloAny one of you dears ever meet this kind a scenario: If any CI in the ServiceNow database meets all the criteria defined in the ENTITY FILTER, does that automatically guarantee that a corresponding ENTITY will be created and assigned to the desi...
I'm creating a RAM in Advanced Risk and want to create the following structure - IMPACT (Group factor) containing 2 Group Factors (Confidentiality & Integrity) and 1 Manual Factor (Availability). Each of the C & I Group factors include manual factors...
Hi, Is there a way to load data using transform map, so that we can setup common controls with reliant entities. So, when we load data for reliant entities, they will get added to the common controls in the related list. Is this configurable or can ...
Hi Team, I found the permissions of GRC Business User role here. Now, I wanted to know the permissions assigned to the GRC Business User - Lite role and limitations or restrictions when compared to the Business User role. If anyone has insights, plea...
This is primarily a proof of concept to explore its feasibility.Is it possible for a regulation to have sub-regulations linked to it? For instance, we have Contoso Regulation 600, which is associated with related regulations such as: Contoso Regulat...
Hi, I have 2 factors to calculate Inherent Likelihood in Risk Assessment. I have created manual factors for both and then group factor including both of them. The ask is "User should only be able to use any one of these manual factor, not both.
Hello.This is OOTB Risk Appetite Scale:Inside a see a warning: Warning: This is a Medium Risk file that might get updated again in later releases. Do not alter this file unless necessary.Because of the update and upgrade I would like to DEACTIVATE th...
Hi, I have a business requirement of incorporating the approval workflow of policy exception process for the extension process. Currently, the policy exception extension is available for assigned to person to approve the extension as a click of a bu...
Hi,For Inherent assessment, I have below 3 manual factors. 1 with zero weightage(I just want user input but dont want to consider it in score calculation) and 2 with 100 % weightage. The Qualitative scoring logic is product. Issue: When i take the a...
Hi Team, How to make the Add button(to add mitigating controls) be made available on the Control assessment in workspace which have Calculate based on=Control environment assessment on the RAM configuration? OOB the Add button(to add mitigating contr...
Hello! The control category field here is visible and is mandatorybut when I create controls in our Compliance Workspace, this field is not visible anymore. Where could I possibly check the configs?
Dear experts, I am facing a situation where I want to configure what is shown below in the screenshot for the control assessment tab when adding a control for the risk assessment. How and where can I go and configure to add in more fields from the co...
Dear experts, Currently the system will prompt the user to define the Data Collection Details and the Approvals in metric definition before setting up a new metrics. Is there any way to keep the function of the metric definition but I want to move th...
I would like to have a number of Control Test Definition's configured to run every 3 months, the options we have available are:DailyWeeklyMonthlyPeriodicallyOnceOn Demand To achieve this at the moment we set this to "Periodically" and set the repeat ...
Hi community, I saw that using the Risk Register the "risk" is created in the "sn_risk_risk" table.If you create a risk from SPM (project) the "risk" is created in the risk table.What is the difference? How those tables/processes are related? Thanks,...