Hello Community,I'm looking for guidance on combining advanced risk assessments in ServiceNow, specifically within the IRM module. I am aware that ServiceNow provides the ability to combine control attestations, but I haven't found a straightforward ...
I've been asked to Research TPRM and have been asked by the team to see if there is a way that we can get CVEs noted by Vendors. Does anyone have any information or guidance? For example, this CVE from Microsoft would be somewhere in the Third-Party...
Hi all, We have noticed that some form layouts or form sections are missing for records on the core Company table in a few environments.Interestingly, these sections appear correctly in one of the lower environments( a clone instance), but they are m...
Hello greetings of the day,Problem statement: I am trying to develop a new tab under Vendor Management Workspace in my insatance which is Domain separated We have 2 companies under one MSP under TOP and there is global domain. Query: We are trying to...
Hi all, We are implementing TPRM and assessing vendors at Engagement level.This works as expected and following an IRQ an engagement tier is calculated.What I am missing thereafter is an overall vendor tier based on the underlying engagement tier val...
I need some help - I'm not sure what I'm doing wrong. I'm working on a flow, that after a vendor has returned the Third-party assessment for the engagement, a task is automatically created to review the questionnaire's answers. I'm able to get ever...
We are implementing third-party risk management, and are having issues with variations of a company name being added to the core_company table, and trying to discern which entry should be the actual vendor. Because so many modules feed into the core...
Hi everyone,We have a requirement of creating a parent-child reference type fields in the Assessment metric survey (like : Assignment group and Assigned to works on incident form). Field A (parent) refere to group table and field B (child) refere to ...
Dear Team Hope all is well Iam working for FMCG Organization, as a business solution manager, i want to enhance and ++ my skills either technical or personal to be more fit and aligned with my organization's strategic expand.can you please guide me a...
Hi All, The issues generated during third party risk assessment are not marking controls as non-compliant. I have checked the mapping of metric to control, correct answer and other stuff but couldn't find the resolution. can you help me.
Hello, I am wondering if there is a way to upload a questionnaire into TPRM. I cannot progress to the next step of the TPRM process without the electronic questionnaire being filled out. However, we have just started using this product and had some q...
Hi All, In 3prm process we have an assessment metric having a metric for which the ask to question field is set to "ask question if script returns no default answer" but the script is returning answer still question is being asked. Sometime the scrip...
Hi All, How to edit the below quick action, I would like to rename one of the quick actions. Can anyone please guide me. Thanks in Advance.
Dear Community, We are currently working with a questionnaire template for a risk assessment and are trying to establish dependencies between certain questions.For example:Question 1: What is the likelihood of this risk occurring?Question 2: Did you ...
After installing the GRC: Advanced Audit plugin on my instance, the role Engagement Project Manager is missing. I can't locate it in the role table. I have repaired the installation and previously installed GRC: Audit Management. Does anyone know why...