How is Control Issue automatically created ?

User179407 · ‎06-12-2020

Hello,

OOB, there is an Attestation 'GRC Attestation' which has as question 'Is the control implemented?', if the user answers NO to this question, the control state is changed to non-complaint and an issue is automatically created.

Q1: how is the control state changed and how is the issue record created OOB?

Q2: I have created another Attestation and attached it to the control, I want to set the state of Control to non-complaint based on answers in this new attestation, how do I configure it ?

Thanks,

Suraj Chauhan

Ashutosh Munot1 · ‎06-12-2020

Hi,

This is handle by Business rule:

Update item when assessment complete on asmt_assessment_instance table.

This called the Script include:

GRCAssessmentUtils ->GRCAssessmentUtilsBase then in there we have a function called as _evaluateControl where this logic is handled.

This Script include is OOB and can't be changed, so you can override the function in this GRCAssessmentUtils.

So what you can do is create attestation and see the value to -1 for the question which will lead to create issue for the control.

I hope this helps you.

Please mark answer as correct and helpful.

Thanks,
Ashutosh

View solution in original post

Ramin Khalilzad · ‎06-12-2020

Suraj,

To answer your first question, OOB the state of the Issue record is changed using the state drop-down list. If you want to manage this differently, you need to add appropriate UI actions.

In respect to your second question, follow this link to create a new attestation. https://docs.servicenow.com/bundle/london-governance-risk-compliance/page/product/grc-policy-and-compliance/task/create-attestation-using-attestation-designer.html

To mark the control as non-compliant, when you add a question (choice, boolean, score, or multiple selection) set the value for the correct answer accordingly. If the response to the question is not the same as the correct answer, once the assessment is submitted, the control will automatically flagged as non-compliant and the issue is created.

If this answers your question, please flag it as such.

Lawrence29 · ‎08-14-2023

What are the instances that Issue will be automatically created? i wanted to turn off automatic issue creation. Thanks!