Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.
Versions
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store
Close

Create a GRC indicator template

Compliance or risk managers create indicator templates from which many indicators can be created.

Before you begin

Role required:
  • compliance_admin or compliance_manager
  • risk_admin or risk_manager
  • audit_admin or audit_manager

Procedure

  1. Navigate to one of the following locations:
    • Policy and Compliance > Indicators > Indicator Templates.
    • Risk > Indicators > Indicator Templates.
    • Audit > Indicators > Indicator Templates.
  2. Select New.
  3. Fill in the fields on the form, as appropriate.
    Table 1. Indicator template
    Field Description
    Name Name of the indicator.
    Active Check box that determines whether the indicator template is active.
    Content The related policy or risk statement.
    Schedule
    Collection frequency Select the collection frequency for indicator results. Indicator tasks and results are generated automatically based on the indicator schedule.
    Next run time Read-only field that is automatically populated with the next collection time for indicator results.
    Method
    Type Results can be gathered manually using task assignment or automatically using basic filter conditions, Performance Analytics, or a script.
    • Manual
    • Basic
    • PA Indicator
    • Script
    Short Description If Type is Manual, this field is present. Brief description of the issue.
    Instructions If Type is Manual, this field is present. Instructions for the collection of indicator results.
    Value Mandatory If Type is Manual, this field is present.
    Passed/Failed If Type is Basic, this field is present. Indicator passes or fails.
    PA Threshold If Type is PA Indicator, this field is present. The associated PA Threshold.
    Script If Type is Script, this field is present. Script that obtains the desired system information.
    Supporting Data
    Collect Supporting Data Check to gather supporting evidence from other applications.
    Table The supporting data table.
    Supporting Data Fields The fields from the supporting data table to be considered.
    Criteria Select filter conditions.
    Use reference field Select to use the reference field.
    Reference field

    Creates a join between the supporting data table and the profile's applies to table.

    For example, if the profile table is cmdb_ci_computer and the supporting data table is incident, you could have a supporting data query named incident with critical priority. In this example, each indicator execution returns all critical incidents.

    Now suppose you are interested in finding critical incidents linked to the profile CEO’s laptop. You already have an indicator on a control related to this profile.

    In this case:
    1. Select the reference field Configuration item from the incident table.
    2. The supporting data query becomes: All critical incidents, where the configuration item = CEO’s laptop.

    In this manner, the indicator is specific to the profile of the control it is attached to.

    Note: This reference field is useful only when the supporting data table has a reference to the profile’s table.
    Sample size

    Limits the number of records retrieved from the supporting data table.

    For example, a basic indicator could query a large table, returning thousands of records with each indicator execution. You do not need to save all of them; just a sample of those records are enough.

    So, if you enter a sample size of 100, only 100 records are saved, even if the query returns thousands.

  4. Click Submit.