How to add multiple manual factors for Control Assessment in Advanced Risk Assessment
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-21-2023 04:03 AM
Hi Friends,
We are trying to set up the Advanced Risk Assessment where the customer wants to assess each control on 2 factors say Design and Operating Effectiveness.
But current OOB ServiceNow solution only provide ability to assess entire control environment using multiple factors and not for individual control. For individual control, the system has the ability to map just one manual factor.
Any one please suggest that how we can achieve mapping multiple manual factor for each control to assess.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-22-2023 12:45 AM
Hi @PrakashRam ,
That's by design and OOTB.
So you are assessing the effectiveness of the "Individual" control not the environment itself, so you can select only one manual factor to measure the same.
Now, as an workaround to suit your requirement, you can create another RAM with "Group factors" which has multiple "manual factors".
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-26-2023 03:41 AM
Hi Sandeep,
Thanks for your response.
If I understand it correctly, you are asking me to create another RAM only with Control Assessment where I will tag another factor say operating effectiveness? If thats the case, how you can tag both RAM into one single risk?
Kindly clarify me if I am wrong. I will post you the configuration which I did.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎09-26-2023 07:13 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-01-2023 07:10 AM - edited ‎10-01-2023 07:10 AM
Finally I got this working. The actual solution is that you have to create group factors contains say Design and Operating Effectiveness and you need to tag that to the Control Assessment by selecting "Individual Assessment of Controls" option .
Thanks for your suggestions.