GRC-policy and compliance

[kummara _siva]

Hi all,

I want to know how the policy control is changing from non-compliant to complaint.

when the policy exception is approved.

what is happening in the approve ui action in policy expectation table and how it is changing the status of impact control to complaint.

Also, Can I stop the changing of status field in impact controls even it is approved.

Thank in advanced.

[Anushree Randad]

Hi @kummara _siva ,

Currently, when exception is approved, status of the impacted controls will change to compliant only for the period of exception approval validity. Once that valid to date is passed, then the controls will go back to their original status. The reason for doing it is because, exception provides temporary relief for complying with the controls and during that time, you don't want to highlight controls as non-compliant if they have exception against it.

Curious to understand your requirements here.

Thanks,

Anushree,

Senior Manager, Product Management, IRM

ServiceNow

[kummara _siva]

Thank you for reply,

But even for that particular period also i want it to be compliant only. where I need to change that.

Thanks in Advance.