Hi all,Due to Control Objective source "NIST 800-53-r4" and "NIST 800-53-r5" I'm noticing 'duplicate' control objectives (with same name, but with different source)ExampleReference: AC-1, Source:NIST 800-53-r4Reference: AC-1, Source:NIST 800-53-r5 Wh...
I have created the two more response to control effectiveness assessment and configured the risk assessment methodology to auto-populate the computed residual risk, then am not getting the override computed score for residual assessment.
Hi all,Was wondering what are best practices when it comes to creating an intake process for end-users to report organization's Cybersecurity risks&issues? I have copuple of options in mind, but I welcome your comments with leading practices:a) Catal...
Hi all,I have some leading pracitices related question(s) on [sn_risk_risk] record lifecycle AFTER it reaches 'Monitor state: 1) What then? How do you ensure continous monitoring? Is it just 'Indicators' or perhaps there are other mechanisms or best...
Hi all,I'm relatively new to the GRC space and would greatly appreciate your advice on the following matter: Is there a scenario where records are created directly (or imported) into the [sn_risk_risk] table without following the 'per book' process, ...
Hi all,I understand the concept of creating 'Entities' through 'Entity Type' and their filters. It's a very cool feature and it also keps entities in sync (usually with the CMDB other tables). While its a cool feature, I have come to realize that it ...
I need help in filling out the Risk Assessment using REST API for Normal existing Change Request. Please navigate me on this.I need assistence on how to achieve this.
Hi All, Basically, my requirement is a prefix check on the form , if the name does not contain the "GDC" prefix, the form should not be saved, preventing the user from changing the prefix. Based on the organization, name prefix will automatically pop...
New in GRC module and was hoping if you can help with a question I have:Do you happen to know the plugin name that installs demo data for Risk Framework, especially for records related to NIST RMF and NIST CSF from the screenshot below.They got auto...
I am trying to create a dashboard report for Risk statement and the name field is not available for Group By tab. However, it is available in Additional Group By, so not able to understand how to get that field in group by field. Also, Want to have t...
Hi all,New in IRM space and I appreciate your help and comments. Was wondering what are best practices when it comes to (classic) risk rollup calculations? IE1) Calculate Risk statement risk scores from its related risk records? 2) Calculate Entity (...
I am trying to create report for Indicator Task records where I want to show Quarter on Quarter basis report with Sum of values provided by assessor/users. However, I am not able to find report type where I can show quarter on quarter basis, If i gro...
Hello,New to IRM space and aware that enabling 'Advanced Risk' property introduces new process in risk assessment utilizing RAM, but before I upgrade I want to 'waste' all options related to 'Standard Risk' 1) Is advanced risk (RAM) the only way to ...
An API is using for login purpose Next thing is to validate if api is valid credendtials API is generating response How to parse the response of specific item and print in logs <?xml version="1.0" encoding="UTF-8" ?> <root> <Authuser>string</Au...
Hello,Our SLA breach notifications use the Event parm 1 contains recipientHow can I add additional users to Event parm 1 contains recipient at the moment the email is only sent to the assigned to person of the ticket. I want to add the manager of the...
| User | Count |
|---|---|
| 4 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
