where can we find the configuration of left navigation list of workspce?
Hi,we are working on Risk workspace; we want to check where can we find the configuration of left navigation menu list. Regards,Arbaz
Forum Posts
Mapping Risk Appetite Scales with Residual Risk Rating Scales
Can anyone tell me how exactly qualitative appetite status is calculated? My risk appetite scales are default open/tolerant, flexible, moderate, cautious, and averse. My residual risk rating scales are very low, low, moderate, high, and very-high. Ho...
SNOW GRC - Redlining & Reviewing policies
Hello Community, could someone advice how does redlining & reviewing works when integrating M365, is it mirroring the Word capabilities on redlining & review is it displayed in Policy text field or just in Open in Word option ? Couldn't find any pres...
Grouping of control attestation in workspace - combine UI action is hiden
Hi,Our customer is implementing Policy and Compliance Management and has a use case for grouping control attestations in the workspace in order to complete them in bulk. We followed the article “Grouping assessments for control attestations”, however...
Resolved! Smart assessment questions showing as Skipped for conditionally visible questions
I have configured the smart assessment template and there are several conditionally visible questions on my assessment form. One issue i noticed is, these conditional questions are shown as Skipped ( as shown in the screenshot) when the conditions ar...
How VTA scoring works in VRM/TPRM
Hi everyone,I wanted to know how VTA scoring works in VRM/TPRM. The OOTB questionnaire metric type 'Basic' has different questions and choices. Based upon the user selection the score gets calculated. I wanted to know if there is any script, BR for f...
Resolved! Clarification on Usage of Category vs. Type Fields on Control Objectives
What is the difference between the Category and Type fields on the Control Objective record, and when should each be used? The client is looking to clearly delineate control objectives across different domains (for example, IT, Enterprise, Privacy, e...
Risk Assessment project GRID VIEW is not working
I created a Risk Assessment Project and attempted to complete the assessment using the Grid view. However, after selecting Grid view and clicking Open assessment, the page displays the message “The page you are looking for could not be found.”The sam...
Control Testing via Audit Engagement
Why do we have Control testing done via audit engagements/ test plans in ServiceNow and not independently via Controls application. Why should 3rd line (Audit) be involved in control testing at all? Appreciate your thoughts/ inputs on this.
Enabling multiple RAM for one entity class
Hi Experts,I am facing an issue while configuring Risk Assessment Methodologies (RAMs).Currently, for an Entity Class (e.g., Department), only one RAM can be configured because it is set as the Primary methodology. Due to this configuration, the RAM ...
Risk workspace
Under risk workspace, if I open risk event then there is a related list tab "Risk" .there is a declarative action "Add" .If I click on add to add risk then what are the risks available to select as per OOB functionality.
Resolved! What is Smart Assessment Engine, how it is different from Classic Assessment ?
OverviewThe Smart Assessment Engine (SAE) is ServiceNow’s next-gen framework for conducting intelligent, scalable, and automated assessments across modules like GRC, IRM, TPRM, and more. It replaces the classic assessment model with a more flexible, ...
Resolved! Download assessment questions
Please see the attached image. I want to download Assessment question in Excel sheet. Trying to find the data in asmt_metric, asmt_metric_category and other related tables but dont see the data or questions. Please help.
How am I notified that I need to review a Policy (Policy & Compliance app)?
Hi, everyone: When I am assigned as a reviewer for a policy document, how am I notified that the document is ready for me to start reviewing it? Or, from the Policy manager's perspective, if I select multiple people from my organization as reviewers...
Recovery Tier based on adjusted RTO
Hi All, I got below requirements for BCM module , I see the recovery tier logic is inside of BIAScoringUtilBase script include."The formula for Recovery Tier calculation should be adjusted to incorporate Adjusted RTO field value. The new logic shoul...