Entity/Profile - Answer-Records that aggregate GRC information related to a specific item
Authority Document - Answer-Regulations, that companies comply with - have citations
Citations - Answer-Requirements cited by an Authority Document
Policy - Answer-Internal practice that to ensure complianc...
ServiceNow GRC -Risk and Compliance CIS Entity/Profile - Answer -Records that aggregate GRC information related to a specific item Authority Document - Answer -Regulations, that companies comply with - have citations Citations - Answer -Requirements cited by an Authority Document Policy - Answer -Internal practice that to ensure compliance and reduce risk exposure Control Objective - Answer -Details that a process follows within a Policy Unified Compliance Framework (UCF) - Answer -Compliance database serving as a single point of management over hundreds of complex IT compliance requirements from around the world Control - Answer -The actual activities performed by an organization for compliance Issue - Answer -A GRC task to document Control and Risk Issues and track the response to remediate or accept the issue Indicator - Answer -A metric used to collect data to monitor Controls and Risks, and collect audit evidence Risk Framework - Answer -A formalized process for managing Risk on an explicit basis Risk Statement - Answer -A defined consequence that can occur if a threat exploits a vulnerability Risk Register - Answer -A list of potential and known risks Risk - Answer -Any threat or vulnerability that could adversely affect an organization's business objectives. Risk Criteria - Answer -Quantitative or Qualitative values against which level of Risk is evaluated Residual Score - Answer -The score of the Risk after any response is implemented Inherent Likelihood - Answer -the likelihood of the identified Risk occurring before any response strategy is implemented Inherent Risk - Answer -The level of risk before any actions and Controls are in place Calculated Score - Answer -Real time score between inherent and residual risk Inherent Score - Answer -The score of the risk before any response strategy is implemented Qualitative Impact - Answer -Impact x likelihood Quantitative Impact - Answer -Single Loss Expectancy (SLE) x Annualized Rate of Occurrence (ARO) = Annualized Loss Expectancy (ALE) Residual Likelihood - Answer -The likelihood of the identified Risk occurring after any response strategy is implemented Residual Risk - Answer -Risk after Controls are in place Policy and Compliance Roles - Answer --Compliance Developer (sn_compliance.developer) -Compliance Admin (sn_compliance.admin) -Compliance Manager (sn_compliance.manager) -Compliance User (sn_compliance.user)
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller PatrickKaylian. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $7.99. You're not tied to anything after your purchase.
