Create Issue record when control attestation questions is selected as not applicable

sibayanchak
Tera Contributor

During control attestation, I want issues created when a Control is "Not Applicable" in servicenow. I know OOTB it is via Business Rule and OOTB script include that creates issue record, when the question answer is selected "No" and it sets non compliant.

1 ACCEPTED SOLUTION

Thanks for the clarification.
Based on your information:

  • Search for the "GRCAssessmentUtils" Script Include 
    and the "GRCAssessmentUtilsBase" Script Include.
  • You can overwrite or extend the corresponding functions of the "GRCAssessmentUtilsBase" Script in the "GRCAssessmentUtils" Script.
  • Please note, that you should never change the "...Base" Script!
  • A few of the functions you are looking for:
    • _createAttestationIssue
    • _evaluateControl: (somewhere around line 1177 coud be interesting for you)
 


Another way that might be easier and also work fine, is to create a

new Attestation Template and define a Choice Field with "Yes" "no" "not appliccable" where you define ony "Yes" as correct answer.

Would be great if you mark the answer as helpful and correct if I could help you out.

Please mark answers (not only mine) as helpful if they were
and "accepted solutions"This motivates others to take part, post solutions and find answers. Thanks! - Mat

View solution in original post

10 REPLIES 10

Matthias Ferstl
Kilo Guru

Hey @sibayanchak 

for what reason? 
Im asking because there are several mechanisms behind attestations, indicator tasks, related issues and 
so on.

Depending on your intention the answer can vary.

Please mark answers (not only mine) as helpful if they were
and "accepted solutions"This motivates others to take part, post solutions and find answers. Thanks! - Mat

I want to create an issue record once the value of the question - answer is selected as "not applicable"

I got that, but for what reason?
Informing someone?
Setting the control "not compliant" (a thing that happens if you create speciffic issues!)?

An "Issue" is not a simple record in GRC but brings a lot of things with it.
So what is your intention behind it?

Please mark answers (not only mine) as helpful if they were
and "accepted solutions"This motivates others to take part, post solutions and find answers. Thanks! - Mat

It will be basically the same purpose as "no" which sets compliance as "non compliant", we would also like to implement the same for "not applicable" answer and create an issue for review.