GRC control status not updating

Kristian10
Kilo Contributor

Trying to sort out the workings of GRC controls.

Anyone has any ideas or pointers?

Perhaps I'm doing something horribly wrong here, so any help is appreciated

Overview

I can't seem to get a manual Indicator to update the Control's status.

When setting an Indicator Task to "passed", no update is done on the Control.

Setting the Indicator task to "failed", updates the Control to "Non Compliant".

Updating yet another Indicator Task to "passed" does not change the Control status again.

More detailed description:

For testing purposes, I've created:

  • A Policy with the company as profile type (POL0020008 - Company Happiness)
  • A Policy Statement in this policy (PARTY1 - Everyone should be invited to the Summer party)
  • A Control for this Policy Statement (CTRL0020111 - Everyone should be invited to the Summer party)
  • An Indicator (method type: manual) for this Control (IND0020006 - Check invitation list)
  • Executed the Indicator to create an Indicator Task
  • Set Indicator Task to "passed" and state closed
  • Verified an Indicator Result was created with Passed checked
  • However, the control is still marked with status "-- None --" as shown below

find_real_file.png

  • Executed the same Indicator again
  • Set Indicator Task to "failed" and state closed
  • This time, the Control is updated to "Non Compliant"

find_real_file.png

  • Executed the same indicator yet another time
  • Set indicator task to "passed" and state closed
  • Control is still set to "Non Compliant"

(Running on Istanbul)

1 ACCEPTED SOLUTION

moses5
Kilo Expert

I am on Jakarta and first had to upgrade to patch 8 first. Thanks to @SeanBarret

Here is what I think is happening...

When you fail an indicator Task, it sets the Control to "Non-Compliant" and create an Issue Task. 

The Issue Task needs to be worked on.

The idea is that you need to Remediate or Accept  the reason why its not compliant (in order words fix or accept the issue). If you Remediate and Close the issue, the control will change to compliant. However if you Accept and Close the issue, the control stays at non-compliant.

Hope that helps. 

View solution in original post

7 REPLIES 7

mansiagrawal
ServiceNow Employee
ServiceNow Employee

Hey Kristian,



The "failing" indicator task was closed, it likely created an "issue" for the control. Navigate back to the control and look at the issue related list. You should see an open issue. The issue has to be closed in order for the control's status to be updated.


moses5
Kilo Expert

Hello - Did you ever get this resolved? I have the same issue.

 

Thanks

Hi, this was confirmed as an issue and partly fixed in Kingston patch 2:

Controls are now set as 'Compliant' when an Indicator Task is set to 'Pass'.

 

However, I still can't get Control to change to 'Compliant' once an Indicator Task has set it to 'Non Compliant'.

E.g. if an Indicator Task is set to 'pass' each day for 20 days, but then set to 'failed' just once.

No matter how many 'pass' Indicator Task are executed afterwards, Control is still 'Non Compliant'

 

Support is still helping me 🙂

moses5
Kilo Expert

I am on Jakarta and first had to upgrade to patch 8 first. Thanks to @SeanBarret

Here is what I think is happening...

When you fail an indicator Task, it sets the Control to "Non-Compliant" and create an Issue Task. 

The Issue Task needs to be worked on.

The idea is that you need to Remediate or Accept  the reason why its not compliant (in order words fix or accept the issue). If you Remediate and Close the issue, the control will change to compliant. However if you Accept and Close the issue, the control stays at non-compliant.

Hope that helps.