The moment i create a risk the scores are getting set as "1 - informational", despite of any state and no scores for inherent/likelihood. The moment I do change the impact and likelihood and bring it back to none then the read only scores are also se...
How can one use ServiceNow Advance Risk to best capture the impact of a risk? A risk may have multiple consequences.
Hi all,I understand that 'Standard' vs 'Common Control' feature is now available in Compliance module where in "Compliance Workspace" you can select a control and then click on "Convert to common" (or "Convert to standard") UI Action and "Function" f...
Please, how do I roll back from a canceled audit plan I did by mistake and return it to a draft state? Is it allowed?
Hi FolksCan any one tell me which is the script / flow responsible for the auto execution of indicators in GRC?Reason for asking this question is I'm trying to debug why few indicators belonging to the same indicator template in system are not execut...
Hi all,Due to Control Objective source "NIST 800-53-r4" and "NIST 800-53-r5" I'm noticing 'duplicate' control objectives (with same name, but with different source)ExampleReference: AC-1, Source:NIST 800-53-r4Reference: AC-1, Source:NIST 800-53-r5 Wh...
I have created the two more response to control effectiveness assessment and configured the risk assessment methodology to auto-populate the computed residual risk, then am not getting the override computed score for residual assessment.
Hi all,Was wondering what are best practices when it comes to creating an intake process for end-users to report organization's Cybersecurity risks&issues? I have copuple of options in mind, but I welcome your comments with leading practices:a) Catal...
Hi all,I have some leading pracitices related question(s) on [sn_risk_risk] record lifecycle AFTER it reaches 'Monitor state: 1) What then? How do you ensure continous monitoring? Is it just 'Indicators' or perhaps there are other mechanisms or best...
Hi all,I'm relatively new to the GRC space and would greatly appreciate your advice on the following matter: Is there a scenario where records are created directly (or imported) into the [sn_risk_risk] table without following the 'per book' process, ...
Hi all,I understand the concept of creating 'Entities' through 'Entity Type' and their filters. It's a very cool feature and it also keps entities in sync (usually with the CMDB other tables). While its a cool feature, I have come to realize that it ...
I need help in filling out the Risk Assessment using REST API for Normal existing Change Request. Please navigate me on this.I need assistence on how to achieve this.
Hi All, Basically, my requirement is a prefix check on the form , if the name does not contain the "GDC" prefix, the form should not be saved, preventing the user from changing the prefix. Based on the organization, name prefix will automatically pop...
