If an entity class is assigned via Entity Filter or manually when creating Ad-hoc entity...if entity class rules are created later in the project, can we somehow Bulk update the entity classes based on defined entity class rules? My observations: 1. ...
Hi community, as far as I could see, Entity Classes can (or better must!) be assigned by the Entity Type.So what do I do with Entity Class rules? Doc says it determines the class of any new object in a table, so why is assigning a Class via filter ma...
Is it possible to manually enroll an entity into a specific entity TYPE and, based on identifying the entity as that TYPE, to automatically trigger Issue Creation?
Hi ,How to set up entity hierachy for the entities and entity type in GRC Servicenow. ThanksArun
Hi Team, When I click on Add button for mitigating controls to add, I can see the list of controls applied on the entity on which we assess the risk. I wanted to understand where the control list filter condition is configured in ServiceNow. It woul...
This requirement is to be proactive in getting ready for the IRS Assessment. Here is the URL Address for the SCSEMs that are produced by the IRS. I have also attached an example from the page. Computer security compliance references and related to...
I'm not able to select newly created auditable units in an engagement scope. Even after I activate them and risk assess them, they are not available for selection. On a side note, I imagine scoping in the auditable unit will bring in all of the entit...
Dear experts, I would like to have a target tier of Green, Amber and Red thresholds in the Risk Indicator. But currently the target is just one fields but I wish to have three fields of green, amber and red. And the result is just passed or failed. S...
Hello all: I've been struggling with how to properly categorize risk by the Risk Framework in the GRC Risk Application. I've taken the GRC Fundamentals class and the examples of Risk Framework categories were: 1. Physical and Environmental Threats ...
Hi, We have a requirement wherein based on the Type of the Plan and the role of the user logging in the Audit plan form layout in the Audit Workspace - fields, field values etc. should be different. I am wondering how I do this especially in the work...
Hi everyone,Summary (what's broken): On an Engagement record in Audit Workspace — when I set the duration, the planned end date jumps to a wrong year. Example:Fieldwork planned start is set as: 2025-12-10 10:11:25I set the Days (duration) to 10 days ...
Hello Everyone,I have recently started exploring about Smart Assessment Engine. I would like to know is it possible to apply formula based scoring logic at SAE template?Any suggestions welcome here,Thank you.
Hi Team, Greetings! As part of the current IRM implementation, we are required to design and configure specific logic within the RAM to support Risk Assessment , I would like to gain a detailed understanding of how scoring calculations work in Servic...
Hey all! As the title summarizes, I am trying to understand why CIS v8 citations are implemented like this OOTB. In the current instances I am working with, the CIS v8 authority document is already provided OOTB. We want to use its Control Objectives...
Hi CommunityThe behaviour I have observed is that when a Policy is published it only take the directly linked control objectives. Is there a way to also publish the child control objectives on the directly linked once within the Policy?