Group Factors in Advance Risk Assessment

shanker1
Giga Guru

Hi All,

 

I've a requirement to create an assessment with the below set up,

Confidentiality for regulatory

Confidentiality for Finance

Confidentiality for safety

 

Integrity for regulatory

Inventory for finance

Inventory for safety 

The same as above for availability.

 

I've created 1 group factor for confidentiality, 1 for Integrity and 1 for availability.

Outcome I require is, Max of Confidentiality, Max of Integrity, Max of Availability and Max of all 3

I've configured all the above under inherent assessment type. What i get is max of everything.

 

Can anyone please suggest, if i could max of C, max of I, max of A and max of all CIA ratings through factors?

 

Regds,

Shanker

1 ACCEPTED SOLUTION

shanker1
Giga Guru

I was able to achieve the above requirement by creating manual factors without transform qualitative criteria for Confidentiality, Integrity and Availability.

Then map those manual to group and here transform qualitative criteria is checked and configuring those options

Map the group to inherent. 

This way i was able to get individual scoring as well as consolidated scoring.

View solution in original post

2 REPLIES 2

ThineshT
ServiceNow Employee
ServiceNow Employee

To achieve this you have to add all the factors under one single group factor and have maximum as configuration for the factor.

shanker1
Giga Guru

I was able to achieve the above requirement by creating manual factors without transform qualitative criteria for Confidentiality, Integrity and Availability.

Then map those manual to group and here transform qualitative criteria is checked and configuring those options

Map the group to inherent. 

This way i was able to get individual scoring as well as consolidated scoring.