GRC Attestations - Response Output

[k_montgomery]

We have been trying to figure out how to export or display Control Attestations for some time, and cannot figure it out.

Currently, we have to go into an authority document, or policy statement we want to view all attestation responses for and we have to click into EACH control, then attestation tab, and review the responses.  We see the responses in the Attestation tab of the Control are in a "String Value" after we modified our view, but we would like to be able to produce exports or reports that have all responses since Controls roll up to a Policy Statement, and the Attestations make up the compliance percentage of the policy statement/authority doc.

Any help would be appreciated! 

[Jan Spurlin]

The Control Attestations are built on the Survey application that is part of the ServiceNow platform.

You need to be looking at the assessment instance tables.  For what you are trying to do you are probably going to need to use a Database View where you combine multiple tables into a single virtual table.

[SeanBarrett]

To add to what Jan mentioned, it would also be worth lookin at metric results (under the assessments application menu), and be sure to change the evaluation type to 'attestation'.  This will give you a running list of all responses to attestation questions.  From there you can group by the question itself, or the category, etc.  In order to report by control, that's where you'd likely have to use some sort of db view.

Add this to your instance URL:  /asmt_metric_result_list.do?sysparm_query=metric.metric_type.evaluation_method%3Dattestation_v2&sysparm_list_mode=grid

Sean

[k_montgomery]

Thank you both.  Testing out the DB views will take us some time, and we have to engage the Platform Admins.  I will mark your responses helpful!