Page Comparison

Overview

After ServiceNow and ZenGRC are connected, you can select the Jira option when setting up an auditcan create and manage audits inside ZenGRC while requests for audit information show up in visual task boards inside ServiceNow. This documentation shows where outlines that option residesprocess.

Step 1: Adding Basic Audit Information

To create a ServiceNow audit, complete the following steps:

1. In the left-hand navigation, click Audits. The Audits page displays.Click Create New and select the type of audit.
   Select Managed in ServiceNow (beta).
   

   Tip
   title TIP
   Once Next is clicked, you can no longer change where the audit is managed.

Step 2 and Step 3 - ServiceNow Audit Creation

1. , click New | Audit.
   
   Image Added
   
   

2. Complete the fields. If you prefer to have all controls available for selection in Step 2, then leave the Related Program field empty.

3. Select ServiceNow, in the Managed in drop-down. The audit will be represented as a guided visual task board in ServiceNow, with each request shown as a task.

4. To access comments and attachments added by ServiceNow users from within ZenGRC, click the Synchronize comments and Synchronize attachments toggles. In most cases, customers will want to enable both toggles. However, they default to disabled in case there are privacy or security concerns around bringing this information into certain audits. Note that if the toggles are enabled at any point during the audit, comments and attachments submitted prior to enabling the toggles will become accessible within ZenGRC.
   
   Image Added
   
   

5. Click Save.
   
   

   Info
   title NOTE
   For complete instructions on this step, please see Step 1: Adding Basic Audit Information.

   
   

Step 2: Defining the Scope

Step 2 in audit creation is the same for ServiceNow and regular audits.

Step 3:

Setting up

Audit Requests - ServiceNow

The template for setting up audit requests in a ServiceNow audit needs to be altered prior to import.

Whether you downloaded the template in Step 3 or in the Downloadable Reports module, complete the following before import:

Image Removed

majority of Step 3 follows the general instructions for importing requests into any ZenGRC audit. The differences are described below.

1. The requests CSV import template for ServiceNow-managed audits differs from the CSV import template for ZenGRC-managed audits, so be certain to use the ServiceNow-specific CSV import template when importing ServiceNow requests. When an audit is designated as a ServeiNow audit, the CSV template provided in Step 3: Setting up Audit Requests will be tailored to ServiceNow.
2. The template supports the following user assignments for requests:
   • ServiceNow individual users can populate the Assigned To column.
   • ServiceNow groups can populate the Assignment Group column.
   • Use these users and groups together or separately on requests. If used together, be certain the user exists in the group assignment, as ZenGRC does not validate these combinations.
     
   • ServiceNow users and assignment groups need to exist in ServiceNow, but they do not need to exist in ZenGRC.
     
     Image Added
     
     
3. Import the CSV as normal.
4. Click Import Data.
5. In our CSV example, requests are mapped to controls in the Mapped Controls column, which allows you to skip the mapping done after import. If this column is blank, you will need to map controls at this point.
6. Click Next.
   
   

Step 4 and 5

Step 4 and 5 in audit creation are the same for ServiceNow and regular audits.