Maintaining entity relationships in IRM

[Kass3m]

How are the relationships between entities maintained in IRM?

Do you import them or build them directly in Servicenow as needed without another source system

[Community Alums]

Hi @Kass3m ,

what I would do is use CMDB tables for my Entities.

Entity Types are created using the Entity filter where I would use the filter and conditions from the source table in CMDB to get my entities.

its just not CMDB tables , let’s say if you want to use user table then you would use sys_user, for location cmn_ location and so on.

For Entity Class I would again use it for categorisation , for example Business Applications, Locations, Departments, etc .

so the hierarchy would be Entity Class > Entity Type> Entities.

[ab_2511]

Hi @Kass3m ,

Relationships between Entities in GRC: Workbench must be manually established. These relationships have distinct purposes and are not the same as CI relationships.

As an example, because the SN_HRSD_PROD app contains employee personal information, you have established controls.
The same data that may have been cloned and relocated to SN_HRSD_DEV (non-PROD env) or preserved for testing purposes. To protect employee data, the same Controls (i. e. Downstream Controls) should be applied on Non PROD env as well.

To ensure overall compliance of the SN_HRSD_PROD app (entity) for specified Control Objectives, the controls applicable on PROD and Non PROD should be effective and compliant.

Downstream Controls can be found on the entity form in the "Downstream Controls" Related List. Downstream Controls may not impact Compliance score of Upstream Entity.

The above scenario can also be easily accomplished using "Common Controls" functionality.

Regards,

Aakash