Hi all,Was wondering what are best practices when it comes to creating an intake process for end-users to report organization's Cybersecurity risks&issues? I have copuple of options in mind, but I welcome your comments with leading practices:a) Catal...
Hi all,I have some leading pracitices related question(s) on [sn_risk_risk] record lifecycle AFTER it reaches 'Monitor state: 1) What then? How do you ensure continous monitoring? Is it just 'Indicators' or perhaps there are other mechanisms or best...
Hi all,I'm relatively new to the GRC space and would greatly appreciate your advice on the following matter: Is there a scenario where records are created directly (or imported) into the [sn_risk_risk] table without following the 'per book' process, ...
Hi all,I understand the concept of creating 'Entities' through 'Entity Type' and their filters. It's a very cool feature and it also keps entities in sync (usually with the CMDB other tables). While its a cool feature, I have come to realize that it ...
I need help in filling out the Risk Assessment using REST API for Normal existing Change Request. Please navigate me on this.I need assistence on how to achieve this.
Hi All, Basically, my requirement is a prefix check on the form , if the name does not contain the "GDC" prefix, the form should not be saved, preventing the user from changing the prefix. Based on the organization, name prefix will automatically pop...
Hello,New to IRM space and aware that enabling 'Advanced Risk' property introduces new process in risk assessment utilizing RAM, but before I upgrade I want to 'waste' all options related to 'Standard Risk' 1) Is advanced risk (RAM) the only way to ...
Hello All, I am exploring Washington release on on PDI, where while accessing compliance workspace i can see double entries in list menu.user - Admin Any suggestion?
Hi, I had a query-"where do the logs for Dynamic translation get saved in ServiceNow instance? We are using "Microsoft Translator" for Dynamic translation. Currently we are using client credentials for connection.
Hi Everyone,We have created one control objective and mapped to the new policy created. We have also created entity type and entity filter. All the entities are reflected in the related list in the entity type record. When I map the entity type to t...
Hello Team,Can anyone provide me the link to ITSM Process Guide for Incident Management, Problem Management, Change Management? Thanks,Sunny
Hi all,A bit new in GRC Risk space.I'm trying to understand how does Risk assessment process affects the Inherent & Residual risk scores, but I'm pretty mych confused: This is what I've tried so far1. Created dummy 'Risk Statement' record (associated...
We are implementing Business Continuity Management (BCM), initially starting with IT Disaster Recovery plans. As part of compliance requirements for our industry, we need to be able to produce the versions of each DR Plan that were in effect during ...
How would you track a Data Retentions/Blocking Concepts in IRM and relate it to CSDM Information Objects ? In our customer's COE, we want to track which data retentions apply for the various data entities we govern in our process streams. For ins...
Hi all,I've received the requirement to include in the Audit Report also a table of content to be automatically inserted with indication of paragraphs and related page where those starts.Anyone knows if there is a way to do so? I found out this API (...