Issues creation from entity types
Is it possible to manually enroll an entity into a specific entity TYPE and, based on identifying the entity as that TYPE, to automatically trigger Issue Creation?
Forum Posts
How to Set up entity hierarchy
Hi ,How to set up entity hierachy for the entities and entity type in GRC Servicenow. ThanksArun
Resolved! Understand the configuration of control list filter condition on control assessment
Hi Team, When I click on Add button for mitigating controls to add, I can see the list of controls applied on the entity on which we assess the risk. I wanted to understand where the control list filter condition is configured in ServiceNow. It woul...
Where to Import IRS SCSEM Data in GRC/IRM Module
This requirement is to be proactive in getting ready for the IRS Assessment. Here is the URL Address for the SCSEMs that are produced by the IRS. I have also attached an example from the page. Computer security compliance references and related to...
Scoping Auditable Units
I'm not able to select newly created auditable units in an engagement scope. Even after I activate them and risk assess them, they are not available for selection. On a side note, I imagine scoping in the auditable unit will bring in all of the entit...
How do I configure Green, Ember and Red thresholds in Risk indicators?
Dear experts, I would like to have a target tier of Green, Amber and Red thresholds in the Risk Indicator. But currently the target is just one fields but I wish to have three fields of green, amber and red. And the result is just passed or failed. S...
Resolved! Is there a common list of Risk Frameworks that logically categorize common IT Risk Statements?
Hello all: I've been struggling with how to properly categorize risk by the Risk Framework in the GRC Risk Application. I've taken the GRC Fundamentals class and the examples of Risk Framework categories were: 1. Physical and Environmental Threats ...
Audit Workspace - Different form views for Plans, Engagements
Hi, We have a requirement wherein based on the Type of the Plan and the role of the user logging in the Audit plan form layout in the Audit Workspace - fields, field values etc. should be different. I am wondering how I do this especially in the work...
Audit Engagement — end_date / Fieldwork planned end jumps wrong year in Workspace
Hi everyone,Summary (what's broken): On an Engagement record in Audit Workspace — when I set the duration, the planned end date jumps to a wrong year. Example:Fieldwork planned start is set as: 2025-12-10 10:11:25I set the Days (duration) to 10 days ...
Can we apply formula scoring logic at SAE template?
Hello Everyone,I have recently started exploring about Smart Assessment Engine. I would like to know is it possible to apply formula based scoring logic at SAE template?Any suggestions welcome here,Thank you.
IRM | I want to understand how the Risk Assessment scoring logic works OOTB in ServiceNow
Hi Team, Greetings! As part of the current IRM implementation, we are required to design and configure specific logic within the RAM to support Risk Assessment , I would like to gain a detailed understanding of how scoring calculations work in Servic...
CIS v8 citations are children of Control Objectives instead of a Citation
Hey all! As the title summarizes, I am trying to understand why CIS v8 citations are implemented like this OOTB. In the current instances I am working with, the CIS v8 authority document is already provided OOTB. We want to use its Control Objectives...
Child control objectives published within a Policy
Hi CommunityThe behaviour I have observed is that when a Policy is published it only take the directly linked control objectives. Is there a way to also publish the child control objectives on the directly linked once within the Policy?
Regulatory Change Management - Thomson Reuters/CUBE
I have a question regarding Regulatory Change Management with the Thomson Reuters Regulatory Intelligence (TRRI):As I started to look into which product would need to be purchased from Thomson Reuters to support the integration, I noticed that CUBE a...
Pause the Risk Assessment Scheduler
Hi Team, Once the Risk assessment scheduler is created and completed (which means assessments are initiated). Is there a way to pause the Risk Assessment scheduler so that timeline to complete the assessments will also freeze. Thanks,Susmitha