QuestionQ207

Risk Implementation Approach

A relationship between a registered risk and a control is automatically created when the control objective and risk statement share which attribute?

  • A Control
  • B Owner
  • C Entity Type
  • D Risk
Explanation

ServiceNow IRM/GRC uses the entity type as the common scope for control objectives and risk statements. When both are associated with the same entity type, the system generates controls and registered risks for the same entities and automatically creates the corresponding risk-control relationship.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!