GRC IRMF Lab 3.1 Associate A Control Objective With CTA Databases To Generate Controls
GRC IRMF Lab 3.1 Associate A Control Objective With CTA Databases To Generate Controls
Table of Contents
Objective ...................................................................................................................................................... 1
Scenario ........................................................................................................................................................ 1
Section 1 Associate the control objective ............................................................................................... 2
Section 2 Validate control creation with the control owner ................................................................. 5
Objective
• Associate a control objective to the entity type, CTA Databases
• Validate that controls are automatically generated for each CTA Database entity
Scenario
Aglow Travel Co.’s CTA is a critical business application, and database performance and
availability are essential requirements for the organization. Compliance manager, Colin
Macarthur, needs to associate the control objective, Utilize resource availability management
controls with the entity type, CTA Databases.
Lab Dependency: Other labs are dependent on the completion of this lab, Lab 3.1
Associate a Control Objective with CTA Databases to Generate Controls.
1
© 2022 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered
trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective
companies with which they are associated.
Section 1 Associate the control objective
1. Impersonate Colin Macarthur.
2. Navigate to Workspaces > Compliance Workspace from the Unified Navigation Header.
3. Select the List icon and navigate to Compliance library > Control objectives.
4. Using the column context menu of the Name field, search for Name contains Utilize
resource availability management controls.
5. Open the control objective record by selecting Utilize resource availability management
controls with Source ID 00940.
2
© 2022 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered
trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective
companies with which they are associated.
6. Select the Details related list and select the checkbox for Creates controls automatically
to set it to true.
9. Search for CTA Databases from the Name column context menu and Add it.
3
© 2022 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered
trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective
companies with which they are associated.
Note: Controls will be created for all the entities of Entity Type, CTA Databases, as
you have checked the Creates controls automatically box in step 6.
12. Confirm that 4 controls were generated, one for each of the operational CTA database
entities.
Note: If you do not see the four generated controls, select Reload form.
Disregard the existing control for the entity, Fashion. This is part of the instance
demo data installed with the store applications.
Note: Notice that Davide Abbati is assigned as the owner of these controls. This is
because he is the owner of associated entities for which these controls have been
generated.
4
© 2022 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered
trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective
companies with which they are associated.
Section 2 Validate control creation with the control owner
1. Impersonate Davide Abbati by selecting Impersonate another user from the user menu.
2. Navigate to All > Policy and Compliance > Controls > My Controls.
3. Check to confirm that four controls, scoped with the four CTA databases, have been
assigned to Davide Abbati.
5
© 2022 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered
trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective
companies with which they are associated.