- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-04-2024 02:06 PM
Hi,
I have attached an evidence for a control. I am able to see the record in the Evidence table and Attachment table. From where can this record be viewed/downloaded by the GRC team members?
I am an IT developer and new to ServiceNow..
Thanks in advance,
Krithika
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-06-2024 10:34 PM
Hi @KrithikaV ,
Yes, it's the proof for attestation!!
What exactly a GRC member looks for as additional proof? This is a question for your GRC team members but as per my experience, they can look for any evodence such as an atatchment which shows they are compliant and implemented the control for their respective entity.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-04-2024 08:40 PM
Hi @KrithikaV ,
Once the Attestation Respondent takes the attestation, the Control moves to "Review" state, where your GRC team will come into the picture and they will open the Attestation instance to view the responses and there they can find the evidence which has been attached:
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-05-2024 06:40 AM - edited 09-05-2024 06:41 AM
Hi @Community Alums,
Thank you for the prompt response. So, this whole concept of Evidence is only used as a proof of attestation. I was wondering if an evidence file is required as a proof of monitoring results.
What exactly a GRC member looks for as additional proof/data when he wants to know about why/how the indicator pronounced compliance for the control? While supporting data records alone suffice?
Thanks,
Krithika

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-06-2024 10:34 PM
Hi @KrithikaV ,
Yes, it's the proof for attestation!!
What exactly a GRC member looks for as additional proof? This is a question for your GRC team members but as per my experience, they can look for any evodence such as an atatchment which shows they are compliant and implemented the control for their respective entity.