Hi Community, I am trying to figure out the difference between usage of 'Risk Assessment Project' vs 'Risk Assessment Scope' in Advanced Risk solution. As far as I have explored, both functionalities look similar to me i.e. 1. Scope the Assessable En...
I am working on testing Parent and Child Control Objectives, but with not much success. I created a Child CO and associated it to a Parent CO. The Parent CO is already associated to the Business Application Entity Type and I can see the Child CO is...
Hello all, I have added a new element definition for a CI class and that is now available under Plan scope section but when I select any CI in that as a primary scope and click on Update Dependencies button nothing is updated.Do I need to make change...
Hi! Maybe someone can give me a simple explanation on what happens to the control after being attested? Where does its impact land on the GRC or which parts of the application is it being used?
Hi All, Please can someone assist, when updating a Risk Statement, a OOB Business Rule - 'Cascade Changes' set the State of all risks to 'draft' I made the changes to the business rule to exclude updating the Risk state 'draft' when the risk.categor...
Hi, I am working on the automated factor to collect the data likelihood data automatically.1.As per our requirement Based on surveys result of particular field it needs to calculate automatically.So I have created a Survey with some string fields and...
Dear experts, I would like to know what is the function for this two fields here under metrics, which are period date and due date offset. Since both of this field is read-only and I would like to know what causing them to populate the date here.
It was observed that, in certain cases, when an entity is deactivated then later reactivated, the wrong "reliant entity" associations (Control-to-Entity records, sn_compliance_m2m_control_entity) are reactivated when the entity is reactivated. In o...
Dear experts, I would like to remove the restraint of only adding the control with the same entity and open up to select all controls regarding the entities when performing a control assessment. Currently when performing control assessment, when we t...
Good afternoon,We have implemented IRM including Audit management and we are wondering what functionality other organizations use for '1st line control testing'. At the start of our implementation we used 'Audit control tests' but a few years back we...
In our risk management framework, we have defined and are using a non-financial risk taxonomy which helps in categorising risk and casual factors. We have based this on the ORX Risk Reference Taxonomy which suits us well. The taxonomy is made of thre...
I am trying to figure how to link the chrome_toolbar icon so that when it is clicked it takes you to a saved report in servicenow.
Hi, I am trying to understand how SN user management calculates the "allocation" of GRC Operator and Lite Operator. I notice in the allocation report the following reasons are given (I dont know if there are any other). Can somebody tell me what they...
In ServiceNow GRC, what happens if we don’t attach an attestation to a control objective? On what basis will the compliance score be calculated in that case?Also, what would be the impact of not linking an attestation, and what are the best practice...
I would like to try a specific use case in ServiceNow GRC module using AI in my PDI. (the use case is to check the policy text entered in the policy record is validated grammertically, re-write the content with proferssional inclusive language, highl...
