logo

NJP

CLIP: ServiceNow GRC/IRM: Full Flow - Attestation/Indicator Issues vs Control Test Issues

Import · Oct 11, 2020 · video

update or create control test issue now this is a bit more complex to be honest with you uh control tests when you're looking at issues in grc um you've got kind of two sets of automation that are consistent you've got the attestation process so somebody asks you is this control implemented yes or no if you say no the control attestation fails is an incorrect answer an issue gets created the control goes non-compliant if you then take an attestation again it's going to retake the attestation it's going to pass the attestation and therefore the issue that was created through the use of issue source which is recently introduced or refactored in i think london maybe maybe madrid when you remove that issue source of attestation it's going to close the issue for you okay we just saw one of these methods was called let me mark that green i'm gonna just say the one we're looking at right now so remove remove source okay by removing the source that could close it so when an attestation fails you get the issue when it passes it will close the issue automatically for you so long as that issue is only an attestation issue same with indicators when an indicator fails it will create an issue with the source set as indicator so when an indicator passes as long as no other indicators are failing it's going to automatically close that issue aside from if you've got attestation failing and indicator failing an indicator passing can't make the control compliant if the attestation's failing you can still manually close it and override it that way but then the indicator might keep um keep generating new issues so that's that's no good so those two things kind of honor each other very nicely when we look at control tests from the audit module things get a little bit more complex okay so it's just not a straightforward that's all i'm going to say for now

View original source

https://www.youtube.com/watch?v=qNjDcBpF7HI