Requirement - To assess asset riskCIA using Confidentiality, Integrity, and Availability (CIA).
- Checked ServiceNow out-of-the-box functionality for CIA-related fields.
- Identified CIA impact fields on the Business Process (cmdb_ci_business_process) table under Business Continuity Management (BCM).
- Verified no suitable OOB CIA fields are available on Asset or CI tables.
- Next step: If no OOB solution exists, I will have to proceed with restoring custom CIA fields on Asset
But instead of customising can we do this with GRC module ?
If yes then what is the process?
And is it feasible?
