ServiceNow IRM/GRC and SOX Audits

[mjdeandrea]

Is anyone using GRC Audit Management to conduct SOX audits?  If so, how are you flagging control test failures that are significant deficiencies or weaknesses?  I'm seeing issues and observations but not seeing a way to flag either as a deficiency or weakness.  Thank you in advance for your help. Any insights, thoughts, or guidance is much appreciated.

[Community Alums · Accepted solution]

Hi @mjdeandrea ,

How we are tracking the different flags for the control tests failures by the "Issue Type" Field present in Issue record.

So OOTB you have these options below but you can add more to these :

[Community Alums · Accepted solution]

Hi @mjdeandrea ,

How we are tracking the different flags for the control tests failures by the "Issue Type" Field present in Issue record.

So OOTB you have these options below but you can add more to these :

[mjdeandrea · Accepted solution]

Thank you Sandeep.  Much appreciated.