Policy Acknowledgement

Tommy Morris · ‎12-04-2018

I am looking for a way to have employees "Acknowledge" a policy in GRC. I was thinking of simply using the "Useful" UI Macro but due I was informed that the verbiage had to state "I have read and acknowledged this policy" then the Yes / No buttons could be used.

I found the UI Macro is named kb_article_helpful so I was thinking of making a copy and modifying the verbiage. Then the question is how to call that macro if the article belongs to the GRC KB.

Jan Spurlin · ‎02-14-2020

@Annabel and @Richard Taylor are both correct. When the Orlando version of ServiceNow is released (March 2020), Policy Acknowledgement functionality will be included. I don't see any videos on it yet - but the Product Docs for Orlando may be useful. Here is a link:

https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-policy-and-co...

The short answer on details are the following:

On the Policy record you will be able to set up an Acknowledgement - who is the audience, where is the reference material located and how do you want people to respond.
Then there is a new section in the app nav called Policy Acknowledgement.
A campaign is set up that leverages the info on the Policy record.The campaigns have start/stop dates and track the statistics. When the campaign starts, individual acknowledgement records are generated for everyone in the audience. These are easily visible from the Employee Self Service portal - there is a new GRC option - it looks like this:

Hope this helps.

Jan

View solution in original post

Jan Spurlin · ‎12-04-2018

This response is outdated as of functionality to be released with the ServiceNow Orlando version in March 2020.

Have you tried using the kb_use table? That tracks all articles and who views them. You might need to create a database view to cross-ref with just the articles that you are interested in tracking. this table is not in the navigator in the baseline.

Tommy Morris · ‎12-04-2018

The employee must mark that they Acknowledge for the company to pass audits. Just viewing is not acknowledging it.

jing3 · ‎12-04-2018

This is the case require to assign a control to all employee, and ask the employee to attest (acknowledge) they had review/accept the policy. Steps could be the following, create a new policy statement "an employee must review/accept company data use policy", set the attestation to "grc attestation", then create a profile type with filter type "all active " employee table, then assign this new policy to this profile type. Each employee will get this control assigned to them and they must attest to it. You can further set up the test period etc..

that would be my approach.

Annabel1 · ‎02-10-2020

Question as most of the responses on this topic are dated. Couldn't this now be accomplished by using the Policy Acknowledgement module? I am trying to find some video tutorials on this but haven't had any luck. Thank you