Endpoints are the assets in scope for CCM.
The list price includes unlimited controls and unlimited frequency for evidence collection for CCM.
Automated evidence collection and controls testing have been challenges for enterprise GRC teams. This app integrates with ComplianceCow for Continuous Controls Monitoring of controls in ServiceNow GRC/IRM platform
-
Synchronize control objectives between ServiceNow and ComplianceCow: Users can create assessments and add control objectives in ServiceNow. This will automatically sync and create assessments in ComplianceCow
-
Execute on-demand or schedule automated evidence collection: The app automatically builds all the configuration required to bring evidence data from ComplianceCow and provide CCM through ServiceNow indicators
-
Keep only the latest evidence data however preserve evidence of past runs through links to ComplianceCow
Fixed
- ComplianceCow roles were not being assigned to ComplianceCow app users during app re-installation. This has been resolved — roles are now correctly assigned on re-install.
New Enhancements
- Compliance posture can now be determined for controls attached to stand-alone entities (i.e., entities not created from a CMDB Configuration Item).
- Evidence name field now supports up to 250 characters.
- Evidence name can now be updated for control objectives that are already in the 'In-Use' state.
GRC: Policy and Compliance Management
Other Requirements:Setting up automation and workflows in ComplianceCow for CCM is outside of the scope of this app. A corresponding instance in ComplianceCow needs to be setup for the customer.
ComplianceCow shall automatically map RULES for controls, however shall go through a review and validation process, before enabling for CCM in ServiceNow. This enablement is done through an API call from ComplianceCow to ServiceNow