Resolved! What Happens to a Policy on the Valid to Date? Is it moved back to Draft state for revision/approval or its retired?
What Happens to a Policy on the Valid to Date? Is it moved back to Draft state for revision/approval or its retired?
Forum Posts
OSCAL import error
got the following error when using OSCAL import standard SSP. Alert level: Critical.Profile JSON contains a 'href' tag with a URI reference UUID pointing to a Catalog that cannot be found in the specified Catalog/Catalog Overlay. got exact same ...
IRM Advanced Risk max, min, avg nad sum_calculated_ale
Does anyone know how these four fields for sn_grc_profile table are being filled? max_calculated_ale, min_calculated_ale, avg_calculated_ale and sum_calculated_ale. I found a script include that seems to do it but upon further analyzation and followi...
IRM How can I link/ relate one control to multiple entiies in different entity classes
By managing the control attestations I want to monitor one control which is related to different entity classes. For example entity class Business Processes (cmdb_ci_business_process) and entity class Business Unit (business_unit). The objective is t...
Vendor Risk Management - Licensing
Hi all, I know VRM is now replaced by TPRM, but I need some information about licensing.I am not looking for prices, just the structure. Indeed I know that TPRM works with "transaction", what about VRM? It still uses this approach or it follows same ...
Make documentation read only when working on the business continuity plan
Hi everyone, do you know how I can set as read only an specific documentation section for a bcp. I have 2 sections in this expample and I want to have the 'test text' as read only:
Audit Engagement visibility based on Engagement Type
Hi All, We’re currently working on an Audit Management implementation and have a use case where the client wants to control the visibility of engagement records based on the engagement type.For example, if the engagement type is Market Audit, only us...
Control Effectiveness Options
Hi, Due to a business requirement, we would like to add Partially Effective as one of the options for Design/Operation Effectiveness field in a Control Test. The current options that we have configured are Effective & Ineffective. What are the impact...
Control status is not changing from Non-Compliant to Compliant
Hi Everyone, We have a control that is Non-Compliant although there are no open issues and indicator tasks are compliant. What is the reason on this and how can we change it back to compliant?
BCM: Can Recovery/Event Tasks be assigned to users who do not have the sn_bcm.recovery_team_member ?
Dear Community,I am facing a situation where the organization, for which we are implementing BCM, cannot define in advance all the users that will get event tasks from an exercise or a crises event. As they said 'it could be anyone ' that needs to d...
Smart assessment error message
Hi,So I have created a Smart assessment template from assessment workspace with multiple sections and questions with scoring.I want to create error message on the assessment while the user is answering the assessment before submitting the assessment....
How to make “Short Description” field editable for Policy Owners on Published Knowledge Articles
Hi all,I have a requirement from stakeholders where Policy Owners should be able to edit Knowledge Articles even after they are published specifically to correct any typos or spelling errors in the title (Short Description) of the article. We are wo...
How to connect TPRM with Controls
Hello community, I'm trying to figure out how does the integration between TPRM and Control objective/control works. I was able to set up a metric (question) -> link it to CO -> I see link in assessment metrics on CO->I've linked the entity (Vendor) ...
Context and Context record fields on Evidence Request
Hey are - we are testing Zurich in preparation for our upgrade. I noticed two new fields when I am requesting Evidence through the Audit Workspace. The fields are Conext and Context Record. I see that context provides a list of tables that I can se...
policy exception guidelines
Hi, This is not a technical question, but more user training, Background:My client is implementing policy and policy exceptions, and wants assistance on how to provide guidelines to the organization, on when a policy exception is reasonable and when ...
