Policy Expire/Renew and Attestations

[Gene Manuel3]

Can someone explain what happens after a policy expires? Do you need to create a new Policy or can you update the expiration date?

What happens to the Controls that have attestations? Do they all get reset?

We have a policy that states that Service Catalog items have be reviewed and validated every year. Ideally what we would like to see is the controls "re-attested" after the policy expires but it's not clear now to renew the policy or send out attentions again for controls that have an attestation from the previous year.

[priyajames1]

Hi Phil, Sure . I tested the functionality out in the newyork and it turns out that controls get retired when an associated policy is retired along with the related policy statements being turned to inactive . Feel free to test it . Sure we can customize ServiceNow to bring back a policy from retired to draft/attest but according to me I believe that may not be best practice because of all The other relational elements attached to it . Feel free to help me here with your thoughts . Thanks !

[Phil Swann]

Thanks Priya, just tested on NY and can see that connection now.

Going to test in London and see if my memory fails me , thanks for info...

However, the practice of bring a Policy back... is not customisation, see Back to draft on Policy...

The customisation I am referring to, is WHO can do this, as its quite possible the Reviewer moves on and the Policy record is stuck with them! 

[Phil Swann]

London results... Policy retired, Policy statement still active...

Control still active

I was only looking at this recently and thought it was odd , so real nice catch that this is taken care of in New York! Just need to understand exactly where the change is 🙂 

Thanks again