Mapping ServiceNow features/properties to NIST 800-53B controls
Hi, Does anyone know if there is a document which maps ServiceNow features/properties to the NIST 800-53B control set? Thanks,Declan
Forum Posts
Resolved! Ungroup a grouped attestation
I have created a grouped attestation with same response. Now, I need to change it to different response type. How can i change the existing group atttestation? OR is there a way that we can ungroup the attestation and the create a fresh a grouped att...
How to setup Evidence request feature in GRC Audit management
I need to setup an Evidence request feature in GRC Audit management.
Resolved! Dynamically change reference qualifier of reference dropdown field based on another field selection
Scope: GRC: Policy and Compliance ManagementTable: Policy [sn_compliance_policy]Field: Type [type] The Type field is an inherited reference dropdown field from the Parent table "Document" [sn_grc_document]. It references "GRC Choices" [sn_grc_choice...
can we change the scheduler for a risk assessment methodology
can we change the scheduler for a risk assessment methodology, as in business days instead of calendar one's?like the overdue days, we just mention the number and it works based on calendar days . can we update to business days
Resolved! Looking for document request template recommendations (Third-party Risk Management)
There are many documents that need to be requested from each vendor. To enable this, document request templates need to be designed. I am familiar with the fact that there is a specific question structure that needs to be followed when designing docu...
How does Coalesce True work with use source script
Hi Team,I am using coalesce true on this field which has source script, if sys_id matches with target table reference field sys_id it should Update it, which is not happening. can you help me in this?
Resolved! Indicator Task Result - new choice and GRC Issue creation
Hello community,I have a requirement from a customer to create a new choice for the Result field on the Indicator Task table.I created a new choice on the sys_choice table so now I have these three choices (they also wanted to change the label):And m...
Compliance Score of Entity A Required to Track Compliance Score of All Downstream Controls
Hi Everyone, Let's consider a scenario where we have a parent entity A with child entities B and C. Let's also consider that we have 5 controls for each of these entities. If I open up the record for entity A, my understanding is that the compliance ...
Residual risk score calculation with non-compliant controls
Where in the configuration does the residual risk calculation take into account any non-compliant controls? My assumption is that the residual risk score should automatically be lowered if there is an associated non-compliant control.
Need some information on Risk and Compliance score roll ups and hierarchies
Hi all, I have a few queries regarding entity hierarchies and risk and compliance score roll ups. Could anyone please answer them? Thanks in advance.Question 1:Is there a way to have multiple entity class hierarchies on the same instance?For example,...
how to write condition if u_current_ram is not empty then only return sys_id
Hi Team,I don't want to return or run this script current RAM from excel sheet or staging table is empty answer = (function transformEntry(source) { // Add your code here if(source.u_current_ram != ""){ var retRam = new GlideRecord("sn_ris...
Resolved! Workspace Configure Tab
Hello Team,Could you please let me know that how can we add our custom/new icon on the workspace and redirect it to other page. Thank youPrajwal
Resolved! ARA(GRC: Advanced Risk) Workspace UI Action Configuration
Hey everyone, I'm currently using the ARA workspace and trying to locate where specific buttons are defined. I'm particularly interested in the buttons like 'Move to Residual Assessment','Move to Control Assessment' and 'Move to Inherent Assessment.'...
Citation Level Attestation
Client wants to do Citation level attestation. From the below approaches, what would be the best in terms of saving development efforts and any other suggestions ?1. Approach 1 : Citation Form (draft > attest > review > active > retired)Create a proc...
