Hi All, I have a requirement that ..In the risk register form ,there are three groups for approval and depending upon the calculated score ,the form have to go for approval Ex: If the calculated score is 'Low' only one group have to approve, and if...
To further explain, if a policy is created and approved and in the body of the policy text is a link, once the policy is published and the knowledge article is created, then added to the GRC knowledge base, is there a way for the link to still be acc...
Hi All,I have a requirement to add multiple assessor on same assessment in Advanced Risk assessment. Is it possible.I have tried to add multiple assessor in through Risk Assessment scope. But when I went to give the assessment, the assessor automatic...
My PDI instance is in offline state for a while and not coming online .Even after multiple refresh the instance is offline .Can someone help ?email : santanupoddar125@gmail.com
The moment i create a risk the scores are getting set as "1 - informational", despite of any state and no scores for inherent/likelihood. The moment I do change the impact and likelihood and bring it back to none then the read only scores are also se...
How can one use ServiceNow Advance Risk to best capture the impact of a risk? A risk may have multiple consequences.
Hi all,I understand that 'Standard' vs 'Common Control' feature is now available in Compliance module where in "Compliance Workspace" you can select a control and then click on "Convert to common" (or "Convert to standard") UI Action and "Function" f...
Can you explain briefly about the ServiceNow License ?
Please, how do I roll back from a canceled audit plan I did by mistake and return it to a draft state? Is it allowed?
Hi FolksCan any one tell me which is the script / flow responsible for the auto execution of indicators in GRC?Reason for asking this question is I'm trying to debug why few indicators belonging to the same indicator template in system are not execut...
Hi all,Due to Control Objective source "NIST 800-53-r4" and "NIST 800-53-r5" I'm noticing 'duplicate' control objectives (with same name, but with different source)ExampleReference: AC-1, Source:NIST 800-53-r4Reference: AC-1, Source:NIST 800-53-r5 Wh...
I have created the two more response to control effectiveness assessment and configured the risk assessment methodology to auto-populate the computed residual risk, then am not getting the override computed score for residual assessment.
Hi all,Was wondering what are best practices when it comes to creating an intake process for end-users to report organization's Cybersecurity risks&issues? I have copuple of options in mind, but I welcome your comments with leading practices:a) Catal...
