Understand the configuration of control list filter condition on control assessment

Majji Koteswar1
Tera Expert

Hi Team,

 

When I click on Add button for mitigating controls to add, I can see the list of controls applied on the entity on which we assess the risk.

 

MajjiKoteswar1_0-1778772979304.png

 

I wanted to understand where the control list filter condition is configured in ServiceNow.

 

It would be appreciated if someone can share the exact filter and where it is configured.

 

Thanks,

Majji

1 ACCEPTED SOLUTION

MeghanaAySo
ServiceNow Employee

Hi @Majji Koteswar1 ,

 

On click of the "Add" button a client script is triggered - "Add Controls". 

sys_ux_client_script_1a922c9543113110ec6250d556b8f263

 

This is the client script that opens the MRA route, and in the client script, the filter query is defined through the extension point implementation "AssessmentInstanceAddControlsFilter", which actually builds the query.  

MeghanaAySo_0-1778826302031.png

The script include  AssessmentInstanceAddControlsFilter (sys_script_include_4642b38553322010bad1ddeeff7b1207), defines this implementation specifically the getFilterQuery() method.

MeghanaAySo_1-1778826608655.png

 

It shows controls that have the same entity as the one being assessed, that are not in retired state and are not already added as controls to the risk assessment.

 

Thank you,

Meghana

View solution in original post

1 REPLY 1

MeghanaAySo
ServiceNow Employee

Hi @Majji Koteswar1 ,

 

On click of the "Add" button a client script is triggered - "Add Controls". 

sys_ux_client_script_1a922c9543113110ec6250d556b8f263

 

This is the client script that opens the MRA route, and in the client script, the filter query is defined through the extension point implementation "AssessmentInstanceAddControlsFilter", which actually builds the query.  

MeghanaAySo_0-1778826302031.png

The script include  AssessmentInstanceAddControlsFilter (sys_script_include_4642b38553322010bad1ddeeff7b1207), defines this implementation specifically the getFilterQuery() method.

MeghanaAySo_1-1778826608655.png

 

It shows controls that have the same entity as the one being assessed, that are not in retired state and are not already added as controls to the risk assessment.

 

Thank you,

Meghana