Hello!I've recently been asked to review how the approval is being generated for Policy Exception Extensions (and potentially change it). I know that it goes to the person in the "assigned_to" field on the Policy Exception, but what I can't find is w...
Hi Everyone!In order to migrate legacy attestation to Smart Assessment, we have an OOTB Workflow - Generate smart assessments for control. This workflow is not getting triggered on updating the state of control to Attest. It's throwing an error - "Ta...
I have a user who is attempting to complete their BIA. In one of their BIA's, there are no vendors to add in the dependency assessment for that particular BIA. However, the Complete button is grayed out, and they are unable to submit the BIA since ...
I am trying to edit list of entities which should show up when clicked on 'Risk assessment' in Regulatory Alert record in compliance workspace. Could anyone help me on how to do it, please ?I am unable find the event which declarative action 'Risk As...
Hi Folks,I need help with reordering of the related list in Business Continuity Workspace(BCM) -> Plan.I have tried updating related list on sn_bcp_plan under workspace view and reordering workspace view rules but it haven't helped.Problem is when I ...
Hello,I am working on BCM and integrating Servicenow with Everbridge using OOB connector. However, Only Basic Auth is supported and I have noticed the same limitation with other connectors too. Is there any possibility to configure Oauth for the conn...
What Happens to a Policy on the Valid to Date? Is it moved back to Draft state for revision/approval or its retired?
Hi,From the ServiceNow documentation, I see that control attestation is to just confirm that the control is in place.However, it seems to me at times that control attestations are made to perform the same functionality of continuous controls monito...
got the following error when using OSCAL import standard SSP. Alert level: Critical.Profile JSON contains a 'href' tag with a URI reference UUID pointing to a Catalog that cannot be found in the specified Catalog/Catalog Overlay. got exact same ...
Does anyone know how these four fields for sn_grc_profile table are being filled? max_calculated_ale, min_calculated_ale, avg_calculated_ale and sum_calculated_ale. I found a script include that seems to do it but upon further analyzation and followi...
Hi Dears, For a client who uses strategic planning, (3 - 5) years strategic plan, at which they do risk assessments on the processes of the organization, then do the priority assessment which is based on several factors. from theses assessments they ...
By managing the control attestations I want to monitor one control which is related to different entity classes. For example entity class Business Processes (cmdb_ci_business_process) and entity class Business Unit (business_unit). The objective is t...
Hi all, I know VRM is now replaced by TPRM, but I need some information about licensing.I am not looking for prices, just the structure. Indeed I know that TPRM works with "transaction", what about VRM? It still uses this approach or it follows same ...
Hi everyone, do you know how I can set as read only an specific documentation section for a bcp. I have 2 sections in this expample and I want to have the 'test text' as read only:
Hi All, We’re currently working on an Audit Management implementation and have a use case where the client wants to control the visibility of engagement records based on the engagement type.For example, if the engagement type is Market Audit, only us...
