Role-Based Access and Permissions

Access to SOX dashboards and reports is controlled through specific GRC roles, ensuring users see and manage information appropriate to their responsibilities:

• Policy and Compliance Management: Compliance Reader, Compliance Manager, and Compliance Admin roles provide read or edit access to SOX Compliance, Risk, and Process dashboards.
• Risk Management: Risk Reader, Risk Manager, and Risk Admin roles grant varying read and edit permissions over SOX Risk and Compliance Dashboards and processes.
• Audit Management: Audit User and Audit Admin roles allow reading or editing of SOX Compliance, Risk, and Audit Dashboards and processes.

SOX Compliance Dashboard

Accessible via SOX > SOX Compliance Dashboard, this dashboard offers an overview of SOX controls, attestations, and control issues, including:

• Compliance Overview: Displays key controls, controls by profile and type, control compliance status, failed controls, control exceptions.
• Attestation Overview: Tracks attestation status such as pending, past due, by profile, and individual attestations.
• Issue Overview: Shows issues categorized by due periods (past due, pending, upcoming), by profile, owner, closure rate, and policy.

SOX Risk Dashboard

Located at SOX > SOX Risk Dashboard, this dashboard summarizes risks, assessments, and risk-related issues across SOX processes:

• Risk Overview: Visualizes risk levels (very high to very low), risks by profile, response, compliance, and risk heatmaps (inherent and residual).
• Assessment Overview: Provides status of risk assessments including pending, past due, by profile, and personal assessments.
• Issue Overview: Monitors open risk issues with categorization by due dates, profile, owner, closure rate, and related policies.

SOX Audit Dashboard

Found at SOX > SOX Audit Dashboard, this dashboard focuses on audit progress and issue tracking:

• Audit Overview: Tracks audit tasks by due dates, aiding audit managers in monitoring ongoing audits.
• Issue Overview: Displays audit issues by due date, profile, owner, and entity to help audit teams manage pending issues effectively.

Benefits for ServiceNow Customers

ServiceNow customers leveraging the SOX Content Pack can expect streamlined visibility into SOX compliance status, risk posture, and audit progress through role-specific dashboards. This setup enhances collaboration across compliance, risk, and audit teams, facilitates timely issue resolution, and supports informed decision-making to maintain SOX regulatory requirements efficiently.