Vendor Risk Assessment - Get Questions for a Set of Risk Statements on a Single Attestation

[David Brown]

Hi Folks,

I’m wondering if anyone knows if it’s possible to have the questions for a set of risks placed on a single attestation.

We have 23 risk statements and each of these statements is a component of risk that applies to each vendor. Our vendors will be assessed by the same contact, so it would be preferable to have the risks for all 23 risk statements on a single attestation for a vendor. We do know about the attestation grouping feature, and we will use that regardless. However, if there is a way to get a group of attestation questions (for more than one risk statement) on a single attestation that would be ideal.

[ab_2511]

Hi @David Brown ,

It appears that the OOB functionality currently in place cannot fulfill your requirement.

By default, assessments are grouped by the metric type template. You can group the assessments by Category, Entity, or Control objective. If the selected assessments have a common category, entity, or control objective then they're grouped accordingly based on your selection. However, if the assessments selected don't have any of the common criteria by which they can be grouped, then the assessments aren’t grouped.

Ref - https://docs.servicenow.com/bundle/vancouver-governance-risk-compliance/page/product/grc-workspace-c...

Regards,

Aakash

[Hema Padala]

 Hi David,

Your requirement is not avaialble in OOTB as mentioned by @ab_2511 . Hence, you can use Group By feature

Here in this scenario, you mentioned only one contact is handling all the attestations so I would suggest below process you might already aware.

Ask the person to follow below process who is responsible for completing attestations.

1. Navigate to All -> My Attestations.
2. Select all the required attestations to group.
3. Click on "Actions on Selected rows" at the top right hand side corner.

4. Choose "Group Assessments" option.
5. A pop up will be displayed. Select "Response Type" as required.

6. You can leave "Additional criteria" blank if you don't have any common criteria.
7. Click on Group.

Then, a single attestation will be generated for all those attestations.

You can find the single attestation under "My Grouped Attestation" module.

Please mark correct if my response is helpful.

Thanks,

Hema