How do you build a Cyber Governance Dashboard that provides actionable insights to a CISO, how to define a robust set of KPIs (Key Performance Indicators) and KRIs (Key Risk Indicators) across compliance, performance, and control effectiveness.
Hi Community, We have a requirement where the client wants to perform Assurance activity before creating an Engagement.We are looking if there's an OOB relationship between Auditable Unit, Risk and Control. Thanks,Bhanu
I am looking for an exhaustive list of ServiceNow's Third-Party Risk Management (TPRM) capabilities including integration capabilities.
Is there a straightforward way of setting up an exception report for days count that excludes weekends and public holidays? I've locally advised that it'd require development effort but it seems like such a basic feature? Example: risk events that w...
Hello there, Is there a SNow definition of 'Not Tested' control result option? Trying to differentiate between 'Not Tested' and 'Ineffective'. Many thanks
My client has the IRM Professional License. Everything works fine in the development env, however in the production env, the Risk event module is completely missing. 1) The relevant Risk event tables exists in the sys_db_object but not the applicatio...
Hi, I am creating a quarterly audit plan (plan owner), but allowing different audit managers adding their engagements to the audit plan. By doing so, can i access and view all the engagement details (engagement results) created under the same audit...
Does anyone have an exhaustive list of Content packs or Accelerators that are available for maintianing the Authority Documents and Citations up to date (e.g. GRC: Compliance UCF, GRC: SOX Content Pack)
Hi everyone,I'm working with the Control Objective table in ServiceNow, and in the Score section of the form, I'm seeing an error message: Unparseable number: "Infinity" I want to hide this error message from the form UI only — it doesn't need to be ...
Hello,Would like to have your feedback and best practice on how you handle :- Control Design and Control Effectiveness Control Test by 2nd Line of Defense- Independent Control testing by 2Lod Several options seems to be used by customers and I wonder...
Once a risk is assessed, I want to create a response task automatically when selecting a risk response such as Mitigate or Accept. Currently, the user must create the task manually. Is there a property or configuration flag that enables this or do I ...
On the Risk Workspace the drop-down list for the Risk Assessment Methodology is showing 4 options for me; however, we have 8 published RAMs active in the instance. My understanding was that all published RAMs should be available for selection on the ...
Dear experts, I have created a valid until field to run a scheduled job to deactivate certain metrics but somehow my script is not working, please advise.(function executeRule(current, gsr) { var today = new GlideDate(); today.setDisplayValue...
Since the Resource field from MS Project does not transfer over to Project. Is there a way to use a custom field get this information into servicenow?
I'm currently exploring AI Risk Management and would love to hear your insights on what it actually entails and how it can be effectively utilized. If you have any helpful resources—such as documentation, videos, or tutorials—that can guide me in con...
