NIST Questionnaire
Has anyone implemented a NIST questionnaire in ServiceNow?
Forum Posts
Manually completing a vendor engagement assessment
We have instances where vendors are refusing (due to their policies) to login and access the portal to complete the vendor engagement assessment. In these instances, we send the assessment questionnaire to them in an excel document and have them comp...
Set Control status from an assessment response
Hello,I would like to know, how a control, which belongs to a control objective related to an assessment metric, gets set to compliant or non-compliant. I know that I have to relate the control objective with the assessment metric. And when the asses...
Third Party Risk Management Password Resets for Vendor
We seem to have a number of vendors who need their passwords reset when trying to access our vendor portal for completion vendor risk assessments. All of the documentation we have read says that you must have admin privileges to reset these passwords...
Changing the default third-party tiering scale
Hi, I have started implementing TPRM for a client of ours and one of the discussion areas we are running into is the number of third-party tiering scales. OOTB and default we seem to have five levels yet the client is used to working with only three;...
Company(core_company) field is not saving on the Entity Form.
Hi,I have added Company(core_company) field on the Entity form using form layout.when i select the company and save, it is not saving the company. why?Just FYI...on risk form, i have the same field which will be autopopulated from entity table. So, a...
Resolved! Vendor accouts and associations with vendor companies.
We have a new business need to have vendor contact accounts set up to match up with vendor company records. As of right now our plan to accomplish this is to create user accounts using a catalog item and flow. These newly created accounts will be ina...
How to implement control language for unscored answer for question in vendor assessment
We would like to be able to see which questions have been flagged as incorrect, and include the weighting of the incorrect answers and create an ability to include the control language that is being assessed, as well as the treatment plan to address ...
Supply chain contracts
SN version: Utah. I'm reporting on Supply chain contracts, I need to know what date a contract went from Draft to Active. Start and End don't work because a contract may have started retroactively before it was actually created and approved. I've ...
Resolved! New vendors first time login attempt to SVDP portal & getting access denied error
Access Denied error/problem: Primary contact assigned to vendor > welcome email sent to contact’s email with a username, temporary password, and a link to the /svdp login page > vendor contact uses credentials for local account to login (we have succ...
Resolved! How to parse name value pairs action output in flow
Hi All,I have defined an action which is giving name value pairs in output. I am using this action in flow. How can I parse the name value pairs output from action so that I can use those values in flow?
TPRM - Question Bank and Questionnaire Improvement
What are some best practices for TPRM - Question Bank and Questionnaire Improvement Test Case Availability: Are there existing test cases for the TPRM Question Bank and Questionnaire Processes?Best Practices: What are tips for improving maturity of t...
Automatically pdf download when click on ui action button on the incident
hi my requirement is when click on generatepdf button on incident form then pdf download automatically and content in the pdf is only incident number of the current record.
Were to add SLA in Workflow
HI Everyone can someone help me with were exactly i need to SLA in workflow in which stage above attached screen shot Thanks in Advance
Allow Assessor to edit questionnair for third party contacts?
Hello Experts,Just wondering how to allow assessor to edit questionnair for third party contacts.This is the release note :https://docs.servicenow.com/bundle/store-release-notes/page/release-notes/store/governance-risk-compliance/store-grc-rn-sig-que...
