Hi everyone,I’m curious to know if your organization is currently utilizing Governance, Risk, and Compliance (GRC) indicators within ServiceNow. If so, how are these indicators being applied in your workflows?Specifically, I’m interested in understa...
Hi Community,I’m working on IRM GRC and have a question regarding Smart Assessments in the Compliance/Audit workspace.Currently, my Smart Assessment is triggering as expected, and the assessor can view and respond to the assessment from the list view...
Hi all, (and Jan ) ,Any suggestions for the following post publication of a RAM that is to replace existing? I'm adding a factor / text question to the group factor of the inherent assessment section of a Risk Assessment Methodology(RAM).The RAM has...
Getting smart assessment generation error. Assessments appear to be generating, but questions are not all there, and it seems to fail at some point. Risk Identification Configuration and error in screenshots. Anyone else encountered this issue? Curre...
Hello Community! We have an existing process where we can order external ressources via a catalog item. Now we want to add risk assessment to this process.I already havean attestation which the requester has to answer after committing the requesta ri...
I'm looking into possibilities for enabling real-time review of 'Policy' records. This should prevent any changes to the Policy state and 'Valid To' date, ensuring that each policy remains accurate, up to date, and is reviewed on a regular basis with...
We are about to begin a Business Continuity Management (BCM) implementation for one of our clients. Below is a summary of their key requirements:The client would like to create a Business Impact Analysis (BIA) for a specific department.Within this BI...
Hi, I have created a new questionnaire and while attaching it to External Risk Assessment am getting below error.
Hi,From the ServiceNow documentation, I see that control attestation is to just confirm that the control is in place.However, it seems to me at times that control attestations are made to perform the same functionality of continuous controls monito...
Trying to sort out the workings of GRC controls.Anyone has any ideas or pointers?Perhaps I'm doing something horribly wrong here, so any help is appreciated OverviewI can't seem to get a manual Indicator to update the Control's status.When setting an...
Hello, OOB, there is an Attestation 'GRC Attestation' which has as question 'Is the control implemented?', if the user answers NO to this question, the control state is changed to non-complaint and an issue is automatically created. Q1: how is the co...
I need to perform a task to create three risk records with single entity and three RAM's should be added to each risk record to perform assessment.Any solution ?Thanks,
My team is new to the GRC module. We have created an issue that is very specific to a one control, which we applied. What is the benefit of attaching an authority document? Our authority document is a compliance framework that we need to ensure co...
In Zurich - in IRM - I am looking for the role SN_GRC.Issue_Manager and its not there.What this means is that in an Issue record when trying to add an Issue Manager Group, I cannot add any because the role for issue manager is MIA. Can anyone else pl...
Hello! I have been getting stuck with an access use case. We leverage a MSP and they have a compliance team that requires read only access to issues that were identified by MSP employees. We have been adding the MSP employees to the watch list and pr...
