Smart Assessment Engine: How to send combined control attestation per Entity

[WasimM]

Hi, 

We are trying to use SAE for control attestation but When we launch control attestations, the Smart Assessment Engine generates one assessment task per control. 

In our scenario, a single control owner has 20 applications (entities), and each application has 30 applicable controls. Means 600 individual assessment tasks. This is not practical.

We want to combine controls per application so that the control owner receives one assessment per application (i.e., ~20 assessments total), with all applicable controls presented as questions/sections inside that single application-level assessment.

Can you support us how to achieve the combined assessment scenario instead of generating 100's of task?

[Hemanth M1]

Hi @WasimM ,

You can do it by using the Combine feature for individual assessment (not sure on your combined assessment, you can check once)  Control owners can select, combine, and complete the assessment, below is the reference, but there is a caveat - these assessments should be from the same template. I think in your case that's true because it uses same control assessment template across these controls.

And also would like to know how did you combine smart assessment instance? per application  

https://www.servicenow.com/docs/bundle/xanadu-governance-risk-compliance/page/product/assessment-eng... 

Hope this helps!

[WasimM]

Thanks @Hemanth M1 

Right that capability is working OOB for control owners to combine the assessment for controls that has same template. However, it's not practical for a control owner who received 600 tasks to combine them per entity(application) and perform attestation. 

I wanted to understand how can the GRC team triggers combined assessment to the control owners.

[Vinod54]

Hello @WasimM ,

Requirement: I assume you want to have 20 separate assessments with 30 different possible questionnaire templates. 

Smart assessment allows one template per smart assessment instance record. So in that case you have to create 20 * 30 templates. That's how current system is designed. 

Workaround: Create one assessment template with 30 sections. Use the show/hide functionality and based on the applicable control hide 29 sections. So that you can use one template for 30 of the applicable controls. 

Solution: Create 30 separate section for each control. Additionally create a question, the function of the question is to identify which applicable control( If required use Automate response to perform server side scripting to identify the applicable control). Then use the Conditional Visibility to show / hide the sections. 

For more details on Automate Response and Conditional visibility, refer What are the automation or scripting options available in Smart Assessment Engine? 

Submit Combined Assessment :  A feature more focused on how we can copy a set of answer provided from one instance to another instance of the same template. It has nothing to do with combining multiple assessment templates / sections / questions. 

Feel free to reach me for more information and select helpful if my answer helps you. 

Thanks, 

Vinod Kumar M




 

[WasimM]

Hi @Vinod54 

I'm using same template for all the control objectives and by default they generate single assessment per control. The end users have ability to select tasks and combine them in a single form. However, We have a requirement to send a combined/grouped assessment to end user in a single form.