Best way to add security-related questions to CHG form without adding custom fields

Aaron Struphar · ‎05-27-2025

Hello, we have a business requirement to add 5 security-related questions to the CHG form, similar to the 'Planning' tab but they would like a new tab called 'Security' that would house these 5 questions. Obviously, this would be very easy to do while going with the custom field route - add a new section and 5 new fields. However, we have already added quite a few custom fields and we are trying to avoid adding more. Any thoughts on how this can be achieved without adding custom fields?

Robert H · ‎05-27-2025

Hello @Aaron Struphar ,

Thanks for the update.

Due to these additional facts there is no way around creating these questions as custom fields on the Change Request table.

Since you need to report on the security questions it would be difficult using the assessment, since it will store the answers in a different table from the other Change Request attributes.

And you are correct: since you already have an assessment with the same conditions it is not possible to have another one. The system would use one of the two randomly when clicking the Risk Assessment link.

Regards,

Robert

View solution in original post

Dr Atul G- LNG · ‎05-27-2025

Hi @Aaron Struphar

Yes, customizing is one way. Alternatively, you can add them as Risk Assessment questions. I understand their answers can be text-based, or you can create a task in Change and assign a team to get that populated. These are all workarounds.

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/atul_grover_lng [ Connect for 1-1 Session]

****************************************************************************************************************

Aaron Struphar · ‎05-27-2025

Hello, thank you for your reply. I had also thought about this approach and tried it out, however, we are already using a risk assessment that is available in the New, Assess, and Authorize states of a CHG and they want this to be a separate form/questionnaire from the current risk assessment. My understanding is that I could have the current risk assessment be available in the New state, and the new assessment available in the Assess state and have it work that way, but I would have to get their approval for this approach.

Robert H · ‎05-27-2025

Hello @Aaron Struphar ,

If you don't require these security questions in reports or business logic then you could add them to the Change Risk Assessment (install plugin "com.snc.change_management.risk_assessment" if needed).

It's like a survey on the Change Request form where you can add your security questions:

Multiple users can take that assessment, and their answers can be accessed through a Related List on the Change Request, but it takes a few clicks.

Regards,

Robert

Aaron Struphar · ‎05-27-2025

Hello Robert, thank you for your reply. I forgot to mention that this new requirement will need to be reportable as well as available/mandatory only in the New, Assess, and Authorize states, which is how our current risk assessment is configured. It is my understanding that I can only have one assessment trigger at a time and since these 2 assessments will have matching/identical conditions, it won't be possible to trigger 2 separate assessments at the same time.