Enhanced reports on citation and authority documents overview pages

[hasthipooji]

1.Enhanced reports on citation and authority documents overview pages to consider the associated citations to controls.

2.Enhanced reports on the Compliance homepage to consider the associated citations to controls.
need to know how and where to check this functionality. Please give me clear guidance over this

[SohamTipnis]

Hi @hasthipooji,

You can refer to this documentation; this will help you with your authority documents and citations as well as other IRM components.

Also, you will be able to find out about the reports generated by the below link.

https://www.servicenow.com/docs/r/store-release-notes/store-grc-rn-mgmt-reporting.html

If you find my answer useful, please mark it as Helpful and Correct ‌😊

Regards,
Soham Tipnis
ServiceNow Developer ||  Technical Consultant
LinkedIn: www.linkedin.com/in/sohamtipnis10

[ShrikantP549033]

Hello @hasthipooji 

STEP 1: Validate the Data Model (Core Foundation)

In ServiceNow IRM / Policy & Compliance, the standard relationships are:

Authority Document -> sn_compliance_authority_document
Citation -> sn_compliance_citation
Control -> sn_compliance_control
Citation to Control mapping -> sn_compliance_m2m_citation_control

What to Check:

Go to: System Definition -> Tables

Validate the following tables exist and are active:

sn_compliance_citation
sn_compliance_control
sn_compliance_m2m_citation_control

Then:

1. Open a Citation record.

2. Check the Related List -> Controls.

3. Confirm that records exist in the sn_compliance_m2m_citation_control table.

If mappings are missing here, reports cannot calculate correctly.

STEP 2: Check Citation Overview Page Reports

Navigate to: All -> Policy and Compliance -> Citations
Open a Citation record.

What to Verify:

Confirm whether the overview report is counting:

• Controls mapped via the M2M table

• Control compliance state

• Or only counting Citations themselves

How to Check Report Logic:

Go to: Reports -> View / Run
Open the report used on the Citation overview page.

Check the following:

• Table used

• Filter conditions

• Dot-walking logic

• Aggregation source

If the report table is sn_compliance_citation but it does not join or reference sn_compliance_m2m_citation_control, then it is not considering associated Controls.

STEP 3: Check Authority Document Overview Page

Navigate to: All -> Policy and Compliance -> Authority Documents
Open an Authority Document record.

Authority reporting should aggregate in this sequence:

Authority Document -> Citations -> Controls -> Control State

Validate the following:

1. Authority Document has Citations.

2. Citations have mapped Controls.

3. Reports reflect total Controls derived via those Citations.

If control counts do not change when adding or removing Controls from Citations, the report is not traversing the relationship correctly.

STEP 4: Check Compliance Homepage (Very Important)

The Compliance homepage typically uses:

• Performance Analytics Indicators

• Dashboard widgets

• Aggregated reports

Navigate to: Performance Analytics -> Indicators

Search for indicators such as:

• Control Compliance Percentage

• Control Count

• Citation Coverage

• Authority Compliance

Check the following:

• Indicator Source

• Data Source query

• Breakdown source

• Table used

If the indicator source is only querying sn_compliance_control without filtering through the Citation relationship, then it is not citation-aware.

STEP 5: Check Performance Analytics Data Collection

Navigate to: Performance Analytics -> Data Collector Jobs

Confirm:

• Data collection jobs are running

• No errors are present

• The correct data source is configured

Sometimes reporting logic is correct, but PA data has not been refreshed.

STEP 6: Backend Validation (Technical Check)

Navigate to: System Definition -> Scripts - Background

Run the following script:

var gr = new GlideAggregate('sn_compliance_m2m_citation_control');
gr.addAggregate('COUNT');
gr.query();
gs.print('Total Citation-Control mappings: ' + gr.getAggregate('COUNT'));

Compare the returned count with what is displayed in reports.

If there is a mismatch, there is likely an issue in the reporting logic.

STEP 7: Controlled Functional Test (Best Validation Method)

Create controlled test data:

1. Create a new Authority Document.

2. Add 1 Citation.

3. Map 3 Controls to that Citation.

4. Check Citation overview page and Compliance homepage reports.

Expected result:
Control count should be 3.

Now remove 1 Control from the Citation.

Expected result:
Control count should reduce to 2.

If the counts do not change, the report is not referencing the Citation-Control M2M mapping.

If my Answer helped, please mark it as correct.

Thank You