How to report on downstream risks/controls for an entity?

[SnowedIn]

Hi there,

I have Classic Risk installed and have configured the upstream/downstream entity hierarchy for an organisation. Example of hierarchy is: Group -> Division -> System, where the assessment of risks/controls are completed at a System level.

When I go onto the entity record for a Group or Division I can see the downstream risks/controls for the Systems that sit underneath in the related lists (which is good, that is what we want).

However, what I would like to do is report on this, have it on a dashboard.

I can't seem to find how to report on all downstream risks/controls for an entity - i.e. selecting a Group entity and having the report show all the risks/controls that have been assessed for all Systems that are downstream of that particular Group. I can see the information is there on the entity record in the related lists (and that downstream related list uses an OOTB script include to display the downstream risks/controls).

I have seen similar questions asked here but no answers, anyone been able to do this?

I currently am using an interactive filter that allows the user to select the Entity on the dashboard and then multiple reports update to show the risks/controls,etc for that entity. My goal is to utilise the same thing, select ANY entity and it will show all downstream risks/controls - but first I need to figure out how to find the data.

Thanks!

[Community Alums]

Hi @SnowedIn ,

Unfortunately, it wouldn't show you the downstream risks/controls!!

For example if you are reporting on the table " ", and use the below report, it doesn't show the related risks/controls however, if you just want to show the downstream/upstream entities related to a particular entity, it would show up:

[Patrick Fedigan]

Hello,

To get a specific list of calculated objects in a report, we can use a dynamic Javascript filter in the report following steps in a KB support article linked below and the query conditions in the specific "Downstream" relationship as referenced in the screenshot.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0746219

Let me know if more context is needed,

[SnowedIn]

Hi Patrick,

Thanks very much for this. I did see this relationship code and thought I might be able to use it with the dynamic filters.

My only problem with that is how to input the entity record to that (sorry if that doesn't make sense).

What I mean is at the moment I have an interactive filter that just points at the Entity table. The user can select an entity and the existing reports following the interactive filter (so they show data for that entity).

What could I do to give the user the option to choose which entity they want to see all the downstream risks and controls for? I.e. What is being passed as 'current' in the code snippet you posted.

Let me know if you need more info, appreciate the help!

[Patrick Fedigan]

Hey, 'current' in the code snippet is the reference to the risk object/table we are querying from. The query part itself is the list of sys_ids of 'profiles' or entities. 'profileIN' is syntax used to lookup the needed records, 'profile' is the column name of the entity on a risk record.