Hi, I understand that the assets for which the compliance has to be checked are configured as Entities. If a control objective is to enforce encryption on database servers, the database servers can be configured as an Entity Type and individual datab...
I made changes to the issue form, and without saving it, I navigated to the policy exception form. After making changes to the policy exception form, I saved the record. Then, I have navigated back to the issue form and tried to save it, but it redir...
Hi, Can someone help me to understand the script/configuration behind the autoclose of issues when all remediation tasks are closed. I know OOTB there is a property "sn_grc.automatically_close_all_issues_when_all_tasks_closed" Which when set to true ...
When we complete the scenario analysis, the results show whether the target business service is in violation or not, but is there anything else we can know as a result of the analysis? (We do not know how actual users utilize the results of the analy...
What is the difference between Operational Resilience's scenarios and scenario analysis? Especially for scenarios, I don't think there is any use case for scenarios, just to tie events together and store them, to be used for some other data or functi...
Hello guys, I wanted to ask you a technical question that I didn't find anywhere, I looked for all the places on how I could do this, documentation and etc.The Module is TPRMWithin the supplier porta/vendor portal:https://nowlearning-nlinst02108862-...
Hi all, can anyone share how to find the 'GRC: taxonomy management' plugin? In https://docs.servicenow.com/bundle/xanadu-governance-risk-compliance/page/product/grc-common/concept/taxonomy-management.html it states the plugin name but I can't find it...
In a standard out-of-the-box ServiceNow instance, the system comes pre-configured to audit certain tables and fields. However, there may be times when you need to turn off auditing for specific tables or fields, or conversely, enable auditing where i...
Hello Experts, We are currently working no 'Risk Management' Application in GRC Universe. When user selects 'Accept' as the Response on the Risk Register, then an "Acceptance Risk Response Task" is generated. This task has a field called "Acceptance ...
Hello, I have a small question. 1. The owner requests reviews for her policy.2. The reviewer reviews the policy.3. Click on the Submit Review button and adds a comment.4. This comment appears in the activity but the button does not disappear. I see t...
Hi Team,Why the font of subject and body of the notification is different here? I am using email script to populate the body and subject.Thanks
In Audit Management, there is a feature that we can customize the Audit Report Template (Bring our own cover page with logos, internal pages to be popualted from audit findings and related tables). Similarly, how can we incorporate the template for ...
Documentation seems to be limited but what does "Submit for Review" do on a Business Impact Analysis. Nothing seems to happen when I click it. My guess is that it's supposed to be a trigger for a notification to the BCM Lead, alerting them to review ...
Hi, everyone.What are the timing and conditions for the following three items in the risk table to have values?・Inherent score[score]・Residual score[residual_score]・Caluculated score[calculated_score] An assessment is made, an evaluation is performed...
In a standard out-of-the-box ServiceNow instance, the system comes pre-configured to audit certain tables and fields. However, there may be times when you need to turn off auditing for specific tables or fields, or conversely, enable auditing where i...
