Hello - we are looking at some policy management software and was wondering if anyone knows if the ServiceNow Policy and Compliance Managment module could be purchased as a separate subscription or if we need to purchase the Integrated Risk Managemen...
When I attach a file to an Indicator Task (as evidence of compliance), that file can't be accessed from the Indicator Results nor can it be accessed from an Audit Control Test. Am I doing something wrong? I want to be able to attach a file (as evid...
Hi All, I want to make a field editable for a particular role and this field should be read only for admin. How to achieve this? Thanks in advance!
Hi community, I have a requirement to get the count of Citations that are not linked to any control objective as single score in data visualization within compliance workspace.Since, the link between Citations and Control Objective is through a m2m t...
Hi All, How and where can I update/replace the i Icon s shown in the below screen shot be replaced with other image/icon. Thanks,Uma
1. On the Issue Form, I want the Attestation number to be appended to the 'Name' field on the Issue Form page. 2. From the Attestation record, I want to fetch the user's response and include it in the 'Description' field on the Issue Form page. 3. Th...
In GRC, is it possible to apply weights to each risk by factors such as region and business, and then roll up the assessments for the entire group? I believe it is possible to calculate simple risk scores, such as totals and averages, but can more so...
Has anyone used GRC article templates in a customized way?Like, if I have a parent Policy record, and a few children Policy records, then if I want to show the children policies grouped by type as collapsible content on the KB article of the parent P...
What are the use cases for control attestations? I am particularly interested in knowing who the actor is for responding to control attestations. Since control attestations are surveys that collect evidence proving that controls are implemented, I as...
Hi Community, query, is there a way to hide/not show when an edit has been made to something in Service Now, so for this example lets say CMDB, so imagine an entry of a new asset is entered, can someone else come in and edit this entry but not have...
Hi, I am trying to export a completed Vendor risk assessment questionnaire as an excel using the out-of-box export functionality. The questionnaire is getting exported with appropriate questions and their responses. However, the columns 'Internal com...
Can you give us a specific example of how Policy Acknowledgement is used in a real business use case? My understanding is that it is a questionnaire used to confirm policy compliance with each company's employees.(Do you mean whether they are actuall...
Basically I want to try giving only 'sn_grc.business_user_lite' role to anyone and check whether the person is able to access risk portal or not?GRC: Business user - lite application is already installed and I also checked in 'sn_irm_shared_cmn_lice...
Hi All,When I create a policy, take it through its lifecycle, and publish it, the kb article is published and no issues are reported.When I edit the policy and take the policy to its lifecycle once again making small changes to policy text, publish i...
Per ServiceNow Documentation (https://docs.servicenow.com/bundle/washingtondc-governance-risk-compliance/page/product/grc-vendor-risk/concept/tprm-configuring.html) , the list of steps to configure third party risk management "requires" installation ...