(function() {
// Query the Control Objective table
var prefix = 'Annual self-assessment - ';
var html = '<p><span style="font-size: 10pt;"><strong>Instructions for Annual Self-Assessment</strong></span></p>\
<p>Welcome to the annual self-assessment. Please follow these instructions carefully to ensure your compliance status is accurately reported.</p>\
<p> </p>\
<p><strong>Assessment Fields</strong></p>\
<p><strong>Result:</strong></p>\
<p>In this field, answer the question: <em>Are you compliant with the description/statement above?</em> Choose one of the following options:</p>\
<p> </p>\
<p><strong>• Compliant:</strong> Fully compliant with the description above.</p>\
<p><strong>• Non-Compliant:</strong> Requirements from the description are not fully implemented.</p>\
<p> • Note: This response will create an issue for your entity. If an issue on the same underlying control already exists, your answer will be linked to the existing issue. The control will be marked as Non-Compliant.</p>\
<p><strong>• Not Applicable: </strong>Requirements do not apply to your site.</p>\
<p> • Note: You must specify why in the close notes.</p>\
<p> </p>\
<p><strong>Close Notes:</strong></p>\
<p>Provide comments on your response. This is mandatory if you select ‘Not Applicable.’</p>\
<p> </p>\
<p><strong>Previous Assessments</strong></p>\
<p>If you completed the self-assessment last year, your last year’s result and close notes are attached at the top of this form for your reference.</p>\
<p> </p>\
<p>In the <strong>Name</strong>, you may find:</p>\
<p>• Reference to the IT/OT Policy</p>\
<p>• Control Category (Cat C / Cat B / Cat A): This indicates whether the control is basic (C) or advanced (B, A). </p>\
<p> </p>\
<p><strong>Context</strong></p>\
<p>As part of the Information Security Assessment Process, you are required to complete a self-assessment. This serves as a basis for the IT & OT Assessment performed by auditors at your plant. In years without an on-site assessment, or for Category C plants, this self-assessment indicates your compliance status.</p>\
<p> </p>\
<p>Your accurate and timely completion of this self-assessment helps keeping Information in Mondi safe.</p>';
var controlObjectiveGR = new GlideRecord('sn_compliance_policy_statement');
controlObjectiveGR.query();
while (controlObjectiveGR.next()) {
// Create a new Indicator Template record
var indicatorTemplateGR = new GlideRecord('sn_grc_indicator_template');
indicatorTemplateGR.initialize();
indicatorTemplateGR.setValue('name', prefix + controlObjectiveGR.getValue('name'));
indicatorTemplateGR.setValue('short_description', controlObjectiveGR.getValue('description'));
indicatorTemplateGR.setValue('instructions', html);
indicatorTemplateGR.setValue('collection_frequency', 'annually');
indicatorTemplateGR.setValue('first_run_date', '2024-08-01');
indicatorTemplateGR.setValue('next_run_time', '2025-01-01');
var indicatorTemplateSysId = indicatorTemplateGR.insert();
// Create a record in the m2m table to link the Control Objective and the Indicator Template
if (indicatorTemplateSysId) {
var m2mGR = new GlideRecord('sn_grc_m2m_ind_temp_cont');
m2mGR.initialize();
m2mGR.setValue('content', controlObjectiveGR.getUniqueValue());
m2mGR.setValue('indicator_template', indicatorTemplateSysId);
m2mGR.insert();
}
}
})();
