Impact of Control Attestation in the Control Lifecycle
Hi! Maybe someone can give me a simple explanation on what happens to the control after being attested? Where does its impact land on the GRC or which parts of the application is it being used?
Forum Posts
Resolved! GRC - Risk Statement - Cascade Changes - Risk State - 'draft'
Hi All, Please can someone assist, when updating a Risk Statement, a OOB Business Rule - 'Cascade Changes' set the State of all risks to 'draft' I made the changes to the business rule to exclude updating the Risk state 'draft' when the risk.categor...
Automated factor
Hi, I am working on the automated factor to collect the data likelihood data automatically.1.As per our requirement Based on surveys result of particular field it needs to calculate automatically.So I have created a Survey with some string fields and...
What is the function of this two fields under metric? Period date and due date offset
Dear experts, I would like to know what is the function for this two fields here under metrics, which are period date and due date offset. Since both of this field is read-only and I would like to know what causing them to populate the date here.
Incorrect "Reliant Entity" Activation
It was observed that, in certain cases, when an entity is deactivated then later reactivated, the wrong "reliant entity" associations (Control-to-Entity records, sn_compliance_m2m_control_entity) are reactivated when the entity is reactivated. In o...
Resolved! How do i remove the OOTB filter under control assessment when performing a risk assessment?
Dear experts, I would like to remove the restraint of only adding the control with the same entity and open up to select all controls regarding the entities when performing a control assessment. Currently when performing control assessment, when we t...
Resolved! 1st line control testing
Good afternoon,We have implemented IRM including Audit management and we are wondering what functionality other organizations use for '1st line control testing'. At the start of our implementation we used 'Audit control tests' but a few years back we...
Implementing a 3-class 2-tier risk taxonomy i ServiceNow - how?
In our risk management framework, we have defined and are using a non-financial risk taxonomy which helps in categorising risk and casual factors. We have based this on the ORX Risk Reference Taxonomy which suits us well. The taxonomy is made of thre...
Set chrome toolbar icons to take you to a report
I am trying to figure how to link the chrome_toolbar icon so that when it is clicked it takes you to a saved report in servicenow.
IRM/ GRC - subscription "allocation" calculation
Hi, I am trying to understand how SN user management calculates the "allocation" of GRC Operator and Lite Operator. I notice in the allocation report the following reasons are given (I dont know if there are any other). Can somebody tell me what they...
Resolved! In ServiceNow GRC, if we don’t attach an attestation to a control, how is the compliance calculate
In ServiceNow GRC, what happens if we don’t attach an attestation to a control objective? On what basis will the compliance score be calculated in that case?Also, what would be the impact of not linking an attestation, and what are the best practice...
How can i try an AI feature in ServiceNow GRC in our PDI
I would like to try a specific use case in ServiceNow GRC module using AI in my PDI. (the use case is to check the policy text entered in the policy record is validated grammertically, re-write the content with proferssional inclusive language, highl...
How to add one more approval workflow to my current RCSA workflow?
Dear experts, I would like to inquire about how to add one approval workflow task before the business user submit the risk for risk assessment. Initially what my client wants is when the business user creates a risk, rather than straight away send t...
GRC Module Issue after plugin install
Hello Everyone, After installing the required plugin on my pdi, i am unable to see the grc modules on my pdi instance, I am able to see the grc policy, risk application scope, but unable to find modules please find the below details, attached screens...
Export button on Engagement form
Hello, I have to create an export UI action on engagement form. When I click on it, it will export the excel view of the test plans report which has the current details of the associated test plans to that engagement. How can I achieve this??