Does the "Key Control" tickbox do anything?

CI · ‎09-20-2018

Hi

When creating/modifying a a control there is an option to tick a "key control" box indicating that the control is vitality important.

However, when this box is ticked there is no obvious effect on compliance, risk scores, or anything else. Can anyone confirm what knock on effects occur, if any, when a control is made a key control.

Best Regards

CI

Chris Haughney · ‎10-16-2020

I was interested in this too. The only information that I could find was within the SOX GRC Content pack documentation.

It appears that if you list the control as Key Control (i.e. a SOX control) it will be reportable on the SOX Compliance dashboard that is installed as part of the SOX Content pack.

We use it to identify SOX Controls at the Control level. We are also considering adding a SOX Control checkbox at the Control Objective level to quickly identify Control Objectives that are SOX related.

Below is the link to the SOX content pack documentation and a screenshot of the dashboard.

https://docs.servicenow.com/bundle/paris-governance-risk-compliance/page/product/grc-sox-compliance-...

View solution in original post

Manisha Boddu · ‎09-20-2018

Hi,

Hope the below link helps:

https://docs.servicenow.com/bundle/london-servicenow-platform/page/product/compliance/task/t_Definin...

Please mark my answer helpful if it answers your question.

Thanks,

Manisha.

CI · ‎09-21-2018

Hi Manisha

Unfortunately both that explanation, and the documentation only tells me what a Key Control is, and doesn't answer my question of what a Key Control does.

Does a key control have any special business logic applicable to it, does it set the control weight to the maximum possible, does it affect the residual risk ALO in any way, or is its only function to tick a box?

Best Regards

CI

Jan Spurlin · ‎09-25-2018

I have been digging around in the GRC architecture for a while and I have not seen anything that occurs when this is checked - but I also haven't gone looking for it. I will try and do some digging and see if anything pops. My guess is that it is for categorization only - no workflow. I'm pretty sure it is not going to do anything regarding the control weight.

CI · ‎09-26-2018

Hi Jan

If it's just for categorization and marking, and not have any effect on workflow, that would be consistent with the fact I've not observed anything occurring when the key control is selected.

Best Regards

CI