HSCR0001807-acnnacioj-2021-02-26-17_13_55 (1)

docx

School

University Of Central Missouri *

*We aren’t endorsed by this school

Course

2665

Subject

Information Systems

Date

Oct 30, 2023

Type

docx

Pages

258

Uploaded by EarlBravery12338

Report
Configuration Review for Accenture Internal Instance: acnnacioj Instance Version: Paris patch3-hotfix2 Date: 2021-02-24 23:25:41 Author: Joe Wilmoth Portfolio: CONFIDENTIAL © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 1 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated. Configuration Review for Platform,Scorecard,Configuration Review for ITSM
Table of Contents Introduction ................................................................................. 8 Executive Summary .............................................................................. 8 Exclusions ........................................................................................... 8 Next Steps ........................................................................................... 8 Instance Health ............................................................................ 9 Health Scorecard ................................................................................. 9 Definitions affecting Instance Health ................................................... 10 Manageability ................................................................................................................................................. 10 Performance ................................................................................................................................................... 13 Security ........................................................................................................................................................... 15 Upgradeability ................................................................................................................................................ 16 User Experience .............................................................................................................................................. 17 Summaries ................................................................................. 19 Automated Findings Summary ............................................................ 19 Automated Inspection ................................................................. 20 Configuration Review for Platform ....................................................... 20 User Experience .............................................................................................................................................. 20 Integrations Findings ...................................................................................................................................... 23 Platform Foundation Findings ......................................................................................................................... 24 HR Case and Knowledge Management Findings ............................................................................................. 28 ACN AMC Findings .......................................................................................................................................... 28 ACN BCTAPP Findings ...................................................................................................................................... 30 ACN WFH Findings .......................................................................................................................................... 31 ACN WPA Findings .......................................................................................................................................... 33 Platform Findings ............................................................................................................................................ 34 AP20 Real Estate Findings ............................................................................................................................... 35 ACN NDDO Findings ........................................................................................................................................ 35 ACN PA Findings .............................................................................................................................................. 36 ACN_MOBILECP Findings ................................................................................................................................ 36 BizInquiry PAV Findings ................................................................................................................................... 36 Acn Dir Findings .............................................................................................................................................. 37 ACN ESA Findings ............................................................................................................................................ 38 ACN Former Employee Findings ...................................................................................................................... 39 ACN GCP Findings ........................................................................................................................................... 39 Asset Management Findings ........................................................................................................................... 40 Manageability ................................................................................................................................................. 41 ACN AMC Findings .......................................................................................................................................... 46 ACN BCTAPP Findings ...................................................................................................................................... 58 Platform Foundation Findings ......................................................................................................................... 60 Service Catalog Findings ................................................................................................................................. 72 Acn Dir Findings .............................................................................................................................................. 73 ACN ESA Findings ............................................................................................................................................ 77 HR Case and Knowledge Management Findings ............................................................................................. 78 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 2 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Asset Management Findings ........................................................................................................................... 78 Case and Knowledge Management Findings ................................................................................................... 80 Platform Findings ............................................................................................................................................ 80 ACN SAC Findings ............................................................................................................................................ 85 ACN Guided Workflow Findings ...................................................................................................................... 86 APIs and Integration Tools Findings ................................................................................................................ 87 AppEngine Findings ........................................................................................................................................ 89 Custom Application Runtime and Execution Findings ..................................................................................... 91 Leave of Absence Findings .............................................................................................................................. 92 ACN MyLearning Findings ............................................................................................................................... 92 ACN WFH Findings .......................................................................................................................................... 95 Agile Development Findings ........................................................................................................................... 97 AIA Datalake Findings ..................................................................................................................................... 97 Ask HR Findings .............................................................................................................................................. 98 BGC Fortify Findings ........................................................................................................................................ 99 AP20 Real Estate Findings ............................................................................................................................. 100 BizInquiry PAV Findings ................................................................................................................................. 101 Data Privacy Findings .................................................................................................................................... 101 EMS Findings ................................................................................................................................................ 102 Reporting Findings ........................................................................................................................................ 102 ACN GCP Findings ......................................................................................................................................... 103 Integrations Findings .................................................................................................................................... 104 Mobile Asset Findings ................................................................................................................................... 105 Change Management Findings ..................................................................................................................... 105 Incident Management Findings .................................................................................................................... 106 ACN PA Findings ............................................................................................................................................ 107 Clear Pass Findings ........................................................................................................................................ 108 E2E Findings .................................................................................................................................................. 109 xMatters Actionable IT Alerts Findings .......................................................................................................... 109 ACN_ASB Findings ......................................................................................................................................... 110 ACN Former Employee Findings .................................................................................................................... 111 Ask PM Findings ............................................................................................................................................ 111 ACN Feedback Findings ................................................................................................................................. 112 AEE Ideas Findings ........................................................................................................................................ 112 Knowledge Management Findings ................................................................................................................ 113 Performance ................................................................................................................................................. 114 Case and Knowledge Management Findings ................................................................................................. 117 Change Management Findings ..................................................................................................................... 119 Incident Management Findings .................................................................................................................... 119 Platform Foundation Findings ....................................................................................................................... 120 Acn Dir Findings ............................................................................................................................................ 128 ACN ESA Findings .......................................................................................................................................... 129 ACN Guided Workflow Findings .................................................................................................................... 130 ACN SAC Findings .......................................................................................................................................... 132 Reporting Findings ........................................................................................................................................ 134 Service Portal Designer Findings ................................................................................................................... 134 ACN NDDO Findings ...................................................................................................................................... 135 ACN WPA Findings ........................................................................................................................................ 135 ACN_ASB Findings ......................................................................................................................................... 136 ACN_PCHW_GPRT Findings .......................................................................................................................... 138 AEE Ideas Findings ........................................................................................................................................ 139 APIs and Integration Tools Findings .............................................................................................................. 140 Major Incident Management Findings .......................................................................................................... 144 BGC Fortify Findings ...................................................................................................................................... 145 E2E Findings .................................................................................................................................................. 147 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 3 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Integrations Findings .................................................................................................................................... 147 ACN BCTAPP Findings .................................................................................................................................... 150 ACN Former Employee Findings .................................................................................................................... 151 xMatters Actionable IT Alerts Findings .......................................................................................................... 152 Biz Approval Findings .................................................................................................................................... 152 CDP Findings ................................................................................................................................................. 153 Disability Findings ......................................................................................................................................... 154 Agile Development Findings ......................................................................................................................... 154 ACN AMC Findings ........................................................................................................................................ 155 Leave of Absence Findings ............................................................................................................................ 156 ACN_MOBILECP Findings .............................................................................................................................. 156 Service Catalog Findings ............................................................................................................................... 157 ACN Document Builder Findings ................................................................................................................... 158 Clear Pass Findings ........................................................................................................................................ 158 Environment Config Findings ........................................................................................................................ 159 Security ......................................................................................................................................................... 160 Platform Foundation Findings ....................................................................................................................... 162 Custom Application Runtime and Execution Findings ................................................................................... 170 Asset Management Findings ......................................................................................................................... 170 Fixed Assets Findings .................................................................................................................................... 171 Reporting Findings ........................................................................................................................................ 171 ACN AMC Findings ........................................................................................................................................ 172 ACN BCTAPP Findings .................................................................................................................................... 173 ACN Former Employee Findings .................................................................................................................... 173 ACN Document Builder Findings ................................................................................................................... 174 ACN GCP Findings ......................................................................................................................................... 175 Platform Findings .......................................................................................................................................... 175 Upgradeability .............................................................................................................................................. 177 Asset & Cost Management Findings ............................................................................................................. 180 Case and Knowledge Management Findings ................................................................................................. 182 Contract Management Findings .................................................................................................................... 183 Integrations Findings .................................................................................................................................... 184 Platform Foundation Findings ....................................................................................................................... 184 ACN AMC Findings ........................................................................................................................................ 186 Asset Management Findings ......................................................................................................................... 187 Service Catalog Findings ............................................................................................................................... 190 Software Asset Management Findings .......................................................................................................... 191 BGC Fortify Findings ...................................................................................................................................... 191 Cloud Management Findings ........................................................................................................................ 192 Discovery Findings ........................................................................................................................................ 192 Discovery and Service Mapping Patterns Findings ........................................................................................ 193 Automated Testing Framework Findings ....................................................................................................... 193 Change Management Findings ..................................................................................................................... 194 Incident Management Findings .................................................................................................................... 195 Service Portal Designer Findings ................................................................................................................... 195 Event Management Findings ........................................................................................................................ 196 Scorecard ........................................................................................ 197 User Experience ............................................................................................................................................ 197 Integrations Findings .................................................................................................................................... 200 Platform Foundation Findings ....................................................................................................................... 200 ACN AMC Findings ........................................................................................................................................ 201 ACN BCTAPP Findings .................................................................................................................................... 204 ACN WFH Findings ........................................................................................................................................ 205 ACN WPA Findings ........................................................................................................................................ 205 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 4 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
AP20 Real Estate Findings ............................................................................................................................. 206 Acn Dir Findings ............................................................................................................................................ 206 ACN ESA Findings .......................................................................................................................................... 207 ACN Former Employee Findings .................................................................................................................... 208 ACN GCP Findings ......................................................................................................................................... 209 Knowledge Management Findings ................................................................................................................ 209 Incident Management Findings .................................................................................................................... 210 Manageability ............................................................................................................................................... 212 ACN AMC Findings ........................................................................................................................................ 215 ACN BCTAPP Findings .................................................................................................................................... 220 Platform Foundation Findings ....................................................................................................................... 221 Asset Management Findings ......................................................................................................................... 225 Case and Knowledge Management Findings ................................................................................................. 226 Custom Application Runtime and Execution Findings ................................................................................... 227 ACN MyLearning Findings ............................................................................................................................. 228 ACN WFH Findings ........................................................................................................................................ 228 Incident Management Findings .................................................................................................................... 229 Agile Development Findings ......................................................................................................................... 230 AIA Datalake Findings ................................................................................................................................... 230 Ask HR Findings ............................................................................................................................................ 231 BGC Fortify Findings ...................................................................................................................................... 231 Reporting Findings ........................................................................................................................................ 232 Integrations Findings .................................................................................................................................... 233 Mobile Asset Findings ................................................................................................................................... 234 APIs and Integration Tools Findings .............................................................................................................. 234 ACN NDDO Findings ...................................................................................................................................... 235 ACN WPA Findings ........................................................................................................................................ 236 ACN_ASB Findings ......................................................................................................................................... 236 ACN_MOBILECP Findings .............................................................................................................................. 237 Knowledge Management Findings ................................................................................................................ 237 Acn Dir Findings ............................................................................................................................................ 238 ACN ESA Findings .......................................................................................................................................... 239 ACN Former Employee Findings .................................................................................................................... 239 ACN GCP Findings ......................................................................................................................................... 240 ACN PA Findings ............................................................................................................................................ 240 Change Management Findings ..................................................................................................................... 241 Service Catalog Findings ............................................................................................................................... 241 Performance ................................................................................................................................................. 243 Case and Knowledge Management Findings ................................................................................................. 245 Change Management Findings ..................................................................................................................... 246 Incident Management Findings .................................................................................................................... 246 Platform Foundation Findings ....................................................................................................................... 247 Reporting Findings ........................................................................................................................................ 250 ACN WPA Findings ........................................................................................................................................ 250 ACN_PCHW_GPRT Findings .......................................................................................................................... 251 APIs and Integration Tools Findings .............................................................................................................. 252 BGC Fortify Findings ...................................................................................................................................... 254 ACN BCTAPP Findings .................................................................................................................................... 254 ACN Former Employee Findings .................................................................................................................... 255 ACN SAC Findings .......................................................................................................................................... 256 AppEngine Findings ...................................................................................................................................... 256 Biz Approval Findings .................................................................................................................................... 257 CDP Findings ................................................................................................................................................. 257 Disability Findings ......................................................................................................................................... 258 ACN AMC Findings ........................................................................................................................................ 258 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 5 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
ACN_ASB Findings ......................................................................................................................................... 259 ACN_MOBILECP Findings .............................................................................................................................. 259 Security ......................................................................................................................................................... 261 Platform Foundation Findings ....................................................................................................................... 261 Platform Findings .......................................................................................................................................... 266 Upgradeability .............................................................................................................................................. 267 Asset & Cost Management Findings ............................................................................................................. 269 Case and Knowledge Management Findings ................................................................................................. 269 Contract Management Findings .................................................................................................................... 270 ACN AMC Findings ........................................................................................................................................ 271 Asset Management Findings ......................................................................................................................... 272 Platform Foundation Findings ....................................................................................................................... 273 Service Catalog Findings ............................................................................................................................... 273 Software Asset Management Findings .......................................................................................................... 274 BGC Fortify Findings ...................................................................................................................................... 275 Cloud Management Findings ........................................................................................................................ 275 Discovery Findings ........................................................................................................................................ 275 Discovery and Service Mapping Patterns Findings ........................................................................................ 276 Automated Testing Framework Findings ....................................................................................................... 276 Change Management Findings ..................................................................................................................... 277 Incident Management Findings .................................................................................................................... 277 Service Portal Designer Findings ................................................................................................................... 278 Configuration Review for ITSM .......................................................... 279 Manageability ............................................................................................................................................... 279 Incident Management Findings .................................................................................................................... 281 Configuration Management Database Findings ............................................................................................ 283 Problem Management Findings .................................................................................................................... 284 Knowledge Management Findings ................................................................................................................ 285 Change Management Findings ..................................................................................................................... 288 ACN AMC Findings ........................................................................................................................................ 290 ACN NDDO Findings ...................................................................................................................................... 291 ACN WPA Findings ........................................................................................................................................ 291 ACN_ASB Findings ......................................................................................................................................... 291 ACN_MOBILECP Findings .............................................................................................................................. 292 Service Catalog Findings ............................................................................................................................... 292 User Experience ............................................................................................................................................ 294 Knowledge Management Findings ................................................................................................................ 294 ACN AMC Findings ........................................................................................................................................ 298 ACN WFH Findings ........................................................................................................................................ 298 AP20 Real Estate Findings ............................................................................................................................. 299 Service Catalog Findings ............................................................................................................................... 300 Discovery Findings ........................................................................................................................................ 301 Agent Workspace Findings ............................................................................................................................ 301 Change Management Findings ..................................................................................................................... 302 Incident Management Findings .................................................................................................................... 302 Platform Foundation Findings ....................................................................................................................... 304 Problem Management Findings .................................................................................................................... 305 Security ......................................................................................................................................................... 306 ACN AMC Findings ........................................................................................................................................ 308 Knowledge Management Findings ................................................................................................................ 309 Upgradeability .............................................................................................................................................. 311 Configuration Management Database Findings ............................................................................................ 311 Performance ................................................................................................................................................. 312 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 6 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
AppEngine Findings ...................................................................................................................................... 312 Service Catalog Findings ............................................................................................................................... 312 Appendices ............................................................................... 316 All Statistical Definition Results ........................................................ 316 All Automated Definition Results ....................................................... 318 Explanation of terms ........................................................................ 329 Portfolio ........................................................................................................................................................ 329 Products ........................................................................................................................................................ 329 Category ........................................................................................................................................................ 329 Insights .......................................................................................................................................................... 329 Definition ...................................................................................................................................................... 330 Finding .......................................................................................................................................................... 330 Statistic ......................................................................................................................................................... 330 Ratings .......................................................................................................................................................... 330 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 7 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Introduction Executive Summary This document contains an actionable list of findings and recommendations from the ServiceNow Configuration Review. The review's purpose is to determine the status of the instance and provide suggested next steps. The focal point of the review is the technical side of Accenture Internal implementation focusing on the design and configuration of the platform and applications. Overall, Actionable findings were found during the Healthscan, and are summarized on the Instance Health page below. There are several key areas where improvements can be made. Details of those improvements can be found in this report along with recommendations for remediation of the issues found. Baseline (or "out of box") objects may appear in this report. These indicate objects that were modified by Accenture Internal (or consultants working with Accenture Internal ). In effect, you now "own" these objects since they will not be updated in future ServiceNow upgrades. Exclusions Everything outside of the defined scope was excluded. This includes reviews of design, process effectiveness, strategy, governance and testing, as is any infrastructure recommendations. Next Steps 1: Accenture Internal to review findings in this document *Each finding contains either a recommendation or link to documentation for best practices. *This information can be shared with your development team or partners to review. *Alternatively, contact your account executive about purchasing ServiceNow Remote Administration hours. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 8 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Instance Health Health Scorecard The scores below give an indication as to the health of your instance. Certain key definitions have been identified to give a summary for each category. Each of the categories is scored from 0-100%, where 100% means the instance is aligned to the best practices. A low score indicates that the instance is not aligned to best practices. Overall Score 59% Manageability This relates to the management of configuration and data. These best practices help you spend less time on administrative activities. 43% Performance An instance that feels fast and is responsive to the user provides a better user experience and helps maximize efficiency. 46% Security This category highlights items that you should consider for a more secure system. 92% Upgradeability ServiceNow recommends that you upgrade frequently. This category includes any impediments that may affect a successful upgrade. 75% User Experience Certain configuration and customization choices negatively impact a user's experience with the ServiceNow applications, making the system more frustrating to use. 55% © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 9 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definitions affecting Instance Health The tables below show how the definitions affect the scores on the instance. The category and overall score tells you how much the definition affects the overall category percentage and the overall score percentage. If all the findings associated to that definition are resolved, the score will increase by that percentage. The insights section provides additional context on how such definitions are impacting the category. Definition that do not impact Instance Health will not appear in this section. Manageability Definition Rating Short description Results Category Score Overall Score HSD0002015 Recommend Update Sets should be named uniquely 307 1.01% 0.32% HSD0001646 Discuss Workflow(s) should not be checked out for an extended time 3 0.20% 0.06% HSD0002029 Recommend Populate Knowledge Base articles fully 85 1.01% 0.32% HSD0001066 Recommend Groups with no users 225 1.01% 0.32% HSD0001378 Discuss Reports not run for 3 months 37220 1.01% 0.32% HSD0001449 Discuss Minimise the number of errors per day 243347 3.02% 0.97% HSD0001338 Act Business Rules should not be defined on the Global table (Global Business Rule) 3 1.21% 0.39% HSD0001549 Discuss Number of changes in last 30 days 142498 1.01% 0.32% HSD0001191 Discuss Report shared with a group which has no users 1122 1.01% 0.32% HSD0001398 Act Script Includes with duplicate names 6 2.41% 0.77% HSD0001594 Discuss Enable and use Application Administration in scoped applications 83 1.01% 0.32% HSD0001888 Recommend Every Knowledge Base should have at least one Category defined. 57 1.01% 0.32% HSD0002692 Discuss Restrict reporting on non domain separated tables to limit cross contamination 65 1.01% 0.32% HSD0002825 Recommend glide.import.error_message.generic 1 1.01% 0.32% © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 10 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Definition Rating Short description Results Category Score Overall Score is not enabled. HSD0001106 Discuss Applications should use Source Control 84 2.01% 0.64% HSD0001071 Recommend Custom Tables in global scope 353 2.01% 0.64% HSD0003083 Act Scripted REST resource without enabled security 7 0.35% 0.11% HSD0001153 Recommend Hard coded instance URL 24 2.01% 0.64% HSD0001306 Discuss Debug properties should be disabled in production 4 0.40% 0.13% HSD0001214 Discuss Report assigned to a non-existent group/user 92 2.01% 0.64% HSD0001467 Recommend Duplicate foundation/core data found. 5 1.01% 0.32% HSD0001278 Recommend Before Business Rules should not update() or insert() records on other tables 273 1.01% 0.32% HSD0002688 Recommend New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. 44 1.01% 0.32% HSD0001016 Discuss Lots of active tasks more than a month old 112 1.01% 0.32% HSD0001212 Discuss Lines of custom code 1296969 5.03% 1.61% HSD0001349 Discuss Catalog Items should have at least a Name and a Short description 243 1.01% 0.32% HSD0001164 Recommend Use state, not Incident State or Problem State 3 1.21% 0.39% HSD0001193 Discuss Use the condition field in Business Rules 528 1.01% 0.32% HSD0001392 Recommend Scripts should not use the eval() method 13 6.54% 2.09% HSD0001600 Discuss Transform Script that run onBefore should not update() or insert() records on another table 129 1.01% 0.32% HSD0001924 Discuss Use Notification Categories 3841 1.01% 0.32% HSD0001095 Act Clone target should not be enabled in production 1 0.40% 0.13% © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 11 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Definition Rating Short description Results Category Score Overall Score HSD0001020 Discuss List Report without any columns selected 539 1.01% 0.32% HSD0001015 Act Reports should typically not be made public 1095 2.01% 0.64% HSD0001312 Recommend Client-side code should not contain the console.log() debugging method 920 1.01% 0.32% HSD0001187 Discuss Minimize logging in production 1336 2.01% 0.64% HSD0001391 Discuss Number of users with the admin role 100 2.01% 0.64% HSD0001202 Discuss Report assigned to a user which is not active 1 0.10% 0.03% HSD0001275 Recommend Scripts should not contain hard- coded IDs 1955 2.01% 0.64% HSD0001551 Discuss Number of Workflows 62 0.24% 0.08% Insights Reporting enables users to extract data from the ServiceNow instance. This needs to be done securely, to ensure data is not shared inappropriately. For example, there are 1095 reports that are available without a login. Not following process best practices will mean standard maintenance tasks take longer. Records that are no longer used obfuscate the current, in use reports and tasks. Excessive logging and use of debug properties can hurt performance. The system will spend time writing and evaluating debug information rather than responding to the user. Minimize the use of debugging in production. Following the best practices for platform and applications will help to keep the system easy to maintain. For example, errors should be dealt with promptly, user access reviewed, and outdated scripts removed. Otherwise, this results in routine activities taking longer than necessary. Writing code to be readable and to produce obvious results is important for easy maintenance. Certain techniques can make debugging errors harder, or cause issues in the first place. Ensure applications are configured securely to have appropriate data separation between users. These may be product specific. ServiceNow provides robust capabilities to make the system your own. However, custom functionality requires maintenance. Having large numbers of custom scripts, workflows and other items can increase upgrade times due to the testing required whilst increasing © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 12 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
maintenance costs. ServiceNow baseline functionality may be able to replace custom functionality. Many ServiceNow applications rely upon the population of data items to facilitate the processes. Ensuring that the data is appropriately set will mean the applications are more easily managed and used. For example, naming of objects should be consistent and correct, and fields should be populated with the appropriate data. Performance Definition Rating Short description Results Category Score Overall Score HSD0002068 Act current.update() in script workflow activity 60 3.77% 0.64% HSD0001124 Discuss Index Suggestions for Slow Queries should be reviewed 1 0.75% 0.13% HSD0001347 Discuss Client-side code should not use GlideRecord 178 7.55% 1.29% HSD0001268 Recommend Fields used to coalesce in a Table Transform Maps should be indexed 38 3.77% 0.64% HSD0001358 Recommend Server-side code should not use GlideRecord.getRowCount() to count records 613 3.77% 0.64% HSD0001632 Recommend Long running (slow) scripts 659 3.77% 0.64% HSD0001554 Act JDBC Data Sources should have the "Use last run datetime" option checked 250 1.89% 0.32% HSD0001627 Recommend Do not query audit log in your custom integrations and code. 2 0.75% 0.13% HSD0001022 Recommend Excessive Client Scripts 6 4.53% 0.77% HSD0001085 Recommend LDAP Server definition should limit attributes retrieved 2 0.75% 0.13% HSD0001546 Discuss Table Transform Maps generally do not need "Run business rules" enabled 74 3.77% 0.64% HSD0001490 Recommend Business rules firing outbound SOAP/REST should be async 3 0.57% 0.10% HSD0001623 Act Read ACLs (Security rules) should not have GlideRecord/GlideAggregate in 63 3.77% 0.64% © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 13 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Definition Rating Short description Results Category Score Overall Score script HSD0001049 Recommend Avoid Global UI Scripts 14 7.04% 1.20% HSD0001452 Discuss GlideRecord in calculated fields 15 7.55% 1.29% Insights The platform self-monitors certain scripts and can identify items that are consuming excessive resources. These items should be minimized. ServiceNow provides robust capabilities to make the system your own. However, custom functionality requires maintenance. Having large numbers of custom scripts, workflows and other items can increase upgrade times due to the testing required whilst increasing maintenance costs. ServiceNow baseline functionality may be able to replace custom functionality. Custom scripts and other types of configuration are frequently the cause of performance issues. Certain techniques will cause the instance and browser to perform unnecessary work, becoming frustrating for the user. There are frequently alternative mechanisms, but in some cases, the performance impact must be weighed against the functionality gained. Excessive logging and use of debug properties can hurt performance. The system will spend time writing and evaluating debug information rather than responding to the user. Minimize the use of debugging in production. Imports and integrations frequently cause the instance to process significant amounts of data. Unless this this is done efficiently, the instance can spend excessive resources on these activities, and consequently less on serving interactive user requests. Review your integrations to ensure best practices are being followed. Security Definition Rating Short description Results Category Score Overall Score HSD0001635 Discuss Disable Embedded HTML Code property 1 0.75% 0.05% HSD0002959 Recommend Disable SQL error messages 1 0.52% 0.03% HSD0003331 Discuss SNC Access Control plugin allows 1 0.75% 0.05% © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 14 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Definition Rating Short description Results Category Score Overall Score customers to control access by ServiceNow Customer Support HSD0004448 Recommend Allow Entity Validation with Whitelisting 1 0.52% 0.03% HSD0004442 Act Disable Entity Expansion 1 1.87% 0.12% HSD0003041 Recommend Convert Inbound Email HTML 1 0.52% 0.03% HSD0001639 Discuss Enable IP Range Based Authentication 1 0.75% 0.05% HSD0004060 Recommend Only allow acceptable file extensions to be uploaded during file attachment 1 0.52% 0.03% HSD0003030 Recommend Enable Privacy on Client-Callable Script Includes 1 0.52% 0.03% HSD0001557 Recommend Enforce strong passwords 1 0.52% 0.03% HSD0003385 Recommend Restrict Emails by Domain 1 0.52% 0.03% HSD0001354 Recommend Upload MIME Type Restriction should be enabled 1 0.52% 0.03% Insights ServiceNow recommends that secure platform properties are set according to the Security Hardening guide. Refer to the Security section of the product documentation. Reporting enables users to extract data from the ServiceNow instance. This needs to be done securely, to ensure data is not shared inappropriately. ServiceNow recommends that the Security Hardening guide is followed, and appropriate plugins and settings should be configured. Refer to the Security section of the product documentation. Upgradeability Definition Rating Short description Results Category Score Overall Score HSD0001666 Recommend Differs from baseline: UI Macros and 3 0.56% 0.19% © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 15 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Rating Short description Results Category Score Overall Score UI Pages HSD0001665 Recommend Differs from baseline: Client Scripts (and UI Scripts) 6 1.12% 0.39% HSD0001664 Recommend Differs from baseline: Script Includes 35 6.54% 2.25% HSD0001404 Act Scripts should not directly call Java packages 71 9.35% 3.22% HSD0001662 Recommend Differs from baseline: Business Rules 28 2.62% 0.90% HSD0001761 Recommend Differs from baseline: UI actions 10 0.93% 0.32% HSD0001142 Act Client-side code should not use DOM manipulation technique 428 3.74% 1.29% Insights Items that are modified away from the baseline will not be modified on upgrades. In the last upgrade, there were 0 objects not upgraded (skipped) because they were detected as modified. ServiceNow recommends that modified baseline items are reviewed before the upgrade, and scriptable items are most important of those. HealthScan has detected 82 scriptable items that have been modified in the instance. There are certain best practices that should be followed to minimize the amount of effort needed to maintain and develop on the ServiceNow platform. These include activating certain plugins, using optional features, or otherwise taking advantage of certain functionality. Scripts that use deprecated or inadvisable techniques may not work, or may be inappropriate after an upgrade. HealthScan has detected 499 scripts where the functionality it supported should be tested after an upgrade. Longer term, consider if these scripts should be rewritten or the functionality removed after an upgrade. User Experience Definition Rating Short description Results Category Score Overall Score HSD0002128 Act Same field twice on one form 126 1.97% 0.20% HSD0002813 Recommend Activity Formatter placement 289 3.13% 0.32% © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 16 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Definition Rating Short description Results Category Score Overall Score HSD0002509 Recommend Incident Activity Log 1 3.13% 0.32% HSD0002463 Recommend Create actionable feedback task when an article is marked as not helpful should be enabled 1 3.13% 0.32% HSD0001265 Discuss Auto-complete to match text in the columns listed in the ref_ac_columns attribute should be enabled. 1 3.13% 0.32% HSD0001344 Discuss Minimize the number of options in a choice field 176 6.25% 0.64% HSD0002020 Discuss Long module titles 409 3.13% 0.32% HSD0002508 Discuss Remove '5-Planning' from Incident Priority 1 3.13% 0.32% HSD0001207 Recommend Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. 73 2.28% 0.24% HSD0001372 Recommend Too many fields on a form 399 15.63% 1.61% Insights Certain products have application specific best practices that will make using and interacting with them easier. The following products should be reviewed to ensure they follow user experience best practices: Knowledge Management, Incident Management ServiceNow has several properties and options that control how the interface is presented and used. Aligning to recommendations will make interacting with the system easier. This includes using the latest user interface. The platform self-monitors certain scripts and can identify items that are consuming excessive resources. These items should be minimized. Asking people to fill out large, complex forms is frustrating and impacts the user experience. There are 399 tables with more than 50 fields on them. If appropriate, consider changing forms (perhaps using machine learning to provide defaults) to help streamline. There are 176 choice fields with more than 10 options. Choosing the right option becomes frustrating if there are too many choices. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 17 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Summaries The tables below give a summation of the number of findings. They are broken down by category and rating . Automated findings have been found via the HealthScan automated scanning technology. As such, there may be extenuating circumstances, or be driven by business requirements. Please note that the detailed results of automated findings may references multiple source objects (e.g. Business Rules), we have limited the publication of such source object references to a maximum of 5 entries, thereby keeping the report to a manageable size. A detailed CSV export of all findings with references to all affected objects is available on request. ServiceNow recommends that findings rated as act are aligned with best practice or otherwise justified. Recommend findings may need review since there may be more mitigating circumstances, while discuss findings should be aligned if possible. More information is in the appendix . Automated Findings Summary Category Act Recommend Discuss Manageability 2514 29227 30799 Performance 806 4635 634 Security 917 2691 7 Upgradeability 499 404 1363 User Experience 1005 1628 750 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 18 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Automated Inspection Configuration Review for Platform User Experience Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 1 5 4 ACN BCTAPP 2 Acn Dir 1 4 2 ACN ESA 1 2 1 ACN Former Employee 1 3 1 ACN GCP 1 6 2 ACN Guided Workflow 1 ACN MyLearning 1 3 ACN NDDO 1 4 1 ACN PA 1 5 4 ACN SAC 1 3 ACN WFH 4 20 8 ACN WPA 1 11 4 ACN_ASB 2 12 5 ACN_CBMS 1 2 1 ACN_MOBILECP 1 4 3 ACN_PCHW_GPRT 1 4 AEE Ideas 2 6 14 AIA Datalake 1 AP20 Real Estate 1 7 1 Ask HR 2 Ask PM 1 2 Asset & Cost Management 1 Asset Management 2 20 Audit Tax App 1 2 1 Automated Testing Framework 1 BGC Fortify 2 7 14 Biz Approval 1 3 1 BizInquiry PAV 2 Business Support Request 7 7 Case and Knowledge Management 3 5 Cash Appl 1 4 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 19 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
CDP 1 13 12 Change Management 1 Clear Pass 2 6 1 Client Tax Matters 1 7 10 Client Whitelist 1 3 Complaint Management Tool 1 3 Configuration Management Database 4 26 5 CRS 1 4 Data Privacy 3 12 8 Delegation 1 2 Disability 1 4 15 E2E 3 EAM Asset Import 1 3 Ecosystem Supplier Management Support 2 1 Employee Data Change 2 1 EMS 1 4 2 Enterprise Insight 1 5 4 Fac Compliance 2 11 4 Facilities Service Management 1 Fixed Assets 2 4 1 Fixed Assets Change 1 4 1 Flexi Work 1 Full and Final Exit 1 2 Holiday Payout 5 1 Hours That Help 1 2 HR Case and Knowledge Management 1 Idea Innovation 1 4 2 Incident Management 3 1 Integrations 1 1 Leave of Absence 2 1 LOC 1 Major Incident Management 2 8 MS Forms 1 4 MS Teams Recording Enablement 1 5 3 Notifications 6 PAM Password Rotataion 2 1 Payroll 7 10 Payroll Uploads 2 2 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 20 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
PIP Probation 2 6 1 Platform 162 Platform Foundation 914 951 521 Procurement 1 Request Supplementary Pay 2 RTO Pulse Survey 1 Sales and Quality 4 6 Salesforce Integration 1 1 Service Catalog 7 17 Service Level Management 1 Service Portal Designer 1 Source To Pay 8 11 15 Time Card Management 2 4 Tracker App 1 TRIPP 1 TSEF 1 VA Adoption Insights 1 WS Admin 2 Integrations Findings Categorization Details Definition: HSD0001011: Slow loading forms in the last 30 Days Rating: Discuss Description: For the last 30 days table related forms that by average take longer than 500 milliseconds (0.5 secs) to load, excluding network and other time. Slow loading forms are frustrating to the user. Recommendation: Slow loading forms may occur if there are a lot of fields, scripts, database lookups, ACLs, UI Policies, Business Rules etc. Optimize client side logic and form behaviour. Review transactions in System Diagnostics > Stats > Slow Transactions, and System Logs > Transactions (All user). Documentation Click here for more details Table / Object Details Table [saml2_update1_properties]: 1053 ms Look on instance Categorization Details Definition: HSD0004819: Journal fields in export records Rating: Recommend Description: Property Name: glide.export.force_ui_list_behavior Journal fields such as worknotes and comments in the export record can cause the exported file to be big and is not needed in most of the cases. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 21 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Add this property and set the value to true to not include Journal fields in the export. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.export.force_ui_list_behavior Look on instance Platform Foundation Findings Categorization Details Definition: HSD0001011: Slow loading forms in the last 30 Days Rating: Discuss Description: For the last 30 days table related forms that by average take longer than 500 milliseconds (0.5 secs) to load, excluding network and other time. Slow loading forms are frustrating to the user. Recommendation: Slow loading forms may occur if there are a lot of fields, scripts, database lookups, ACLs, UI Policies, Business Rules etc. Optimize client side logic and form behaviour. Review transactions in System Diagnostics > Stats > Slow Transactions, and System Logs > Transactions (All user). Documentation Click here for more details Table / Object Details Table [sys_script]: 1377 ms Look on instance Categorization Details Definition: HSD0002687: Weekday schedules should have holiday includes Rating: Recommend Description: Generally, schedules that run only during the week should ideally have exclusions for local holidays. Recommendation: Ensure that when setting up schedules for business hours you consider excluding local holidays. Documentation Click here for more details Object: cmn_schedule_span cmn_schedule_span cmn_schedule_span cmn_schedule_span Categorization Details Definition: HSD0005687: Too many fields and/or large fields can cause database storage issues Rating: Recommend Description: Too many fields and/or large fields on task table or table extended from task can cause issues when row size on underlying MySQL database reaches its maximum allowable limit resulting no more fields can be added on task or table extended from task table. Recommendation: Please review fields on tables identified through this finding to reduce number of large © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 22 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
string and html fields. Alternatively for fields having maximum size defined between 85 to 255 consider increasing field size to 256 or more, this in turn will change internal data type of field and save space on database. Please contact ServiceNow HI Support if you need any further assistance. Documentation Click here for more details Table / Object Details Table [sys_db_object]: Please review fields on table(s) x_amspi_fac_compli_checkpoints_philippines,x_amspi_acn_amc_2_amc_task,x_amspi_acn _amc_2_amc_request,x_amspi_ap20_real_disposition,x_amspi_cdp_task,task,x_amspi_e2e _request Look on instance Categorization Details Definition: HSD0001302: Application navigator application menu with only one module. Rating: Discuss Description: Application menu items with only one module are often created automatically when creating a new table/application. Consider grouping into another Application menu. Recommendation: Consider grouping into a consolidated application menu, removing the module if it is not needed, or adding some more useful modules to the application menu. Documentation Click here for more details Table / Object Details Application Menu [sys_app_application]: Approval Rules Look on instance Application Menu [sys_app_application]: CSV Report Look on instance Application Menu [sys_app_application]: AIR Database Look on instance Categorization Details Definition: HSD0002813: Activity Formatter placement Rating: Recommend Description: Put the Activity Formatter placement in a section for a consistent user experience Recommendation: The Activity Formatter should not be part of the title section and instead be moved to a dedicated section. This will provide a consistent user experience and prevent forms from becoming overly long. Documentation Click here for more details Table / Object Details Section Element [x_amspi_time_exp_task]: Activity Formatter placement Look on instance Section Element [x_amspi_cwhite_workstn_ mgnmt]: Activity Formatter placement Look on instance Section Element Activity Formatter placement © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 23 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[x_amspi_acn_asb_project_d efinition]: Look on instance Section Element [x_amspi_acn_mobile_updat e_mobile_compliance_publi shing]: Activity Formatter placement Look on instance Categorization Details Definition: HSD0002582: Child group does not contain all parent roles Rating: Act Description: If a group has a parent, the child group inherits the roles of the parent group. This group did not inherit all the parent roles and any members of this group would not be granted the intended access. Recommendation: Review this group to understand why the roles have not been inherited from the parent group. This could happen when the Business Rules did not execute. Another potential cause could be a clone where the Group Role [sys_group_has_role] table has been excluded. This could also occur when the roles have been deleted directly from the Group Role [sys_group_has_role] table. Removing the parent from this group, saving, and then adding the parent back should resolve this issue. Documentation Click here for more details Table / Object Details Group [sys_user_group]: CMT_LeadershipApprover Look on instance Group [sys_user_group]: Personnel_Administration_fulfiller41 Look on instance Group [sys_user_group]: Health CIO in the New Look on instance Group [sys_user_group]: Accenture Federal Services_PageOwner Look on instance Categorization Details Definition: HSD0002606: Process Flow placement Rating: Discuss Description: Correct Process Flow placement for a consistent user experience Recommendation: Process flow should be at the top of the form and span both columns Documentation Click here for more details Table / Object Details x_amspi_acn_asb_structure_ setup: Process Flow placement Look on instance x_amspi_acn_esa_request: Process Flow placement Look on instance x_amspi_acn_esa_task: Process Flow placement © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 24 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance HR Case and Knowledge Management Findings Categorization Details Definition: HSD0002683: Approvers listed are no longer active Rating: Act Description: If you have a record in the approval table whose approvers are no longer active, the case would be stuck in awaiting approval Recommendation: Update the approval record to have a valid and active user to process the approval. You may need to review the underlying workflow too for the approval logic. Documentation Click here for more details Table / Object Details sysapproval_approver: 3334 pending for approval by inactive approver Look on instance ACN AMC Findings Categorization Details Definition: HSD0001207: Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. Rating: Recommend Description: If more there is a disparity of more than 5 fields (e.g., left has 1, right has 7), we should consider making the form more balanced. This might also indicate some client-side rules are hiding some of these fields if the whitespace is not apparent. Recommendation: Make sure the form is balanced and there is not excessive whitespace on one side or the other. Documentation Click here for more details Table / Object Details Table [sys_ui_element]: x_amspi_acn_amc_2_amc_task table has a discrepency of 8 elements.. x_amspi_acn_amc_2_amc_task.do?sys_id=-1&sysparm_view= - x_amspi_acn_amc_2_amc_task.do?sys_id=-1&sysp Look on instance Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: sf_x_amspi_acn_amc_task. not_visible on form 2 times in one or more sections. Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 25 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001344: Minimize the number of options in a choice field Rating: Discuss Description: Having many options in a choice field often results in a poor user experience. Recommendation: Check if all the options are really required. Try to reduce to less than 15. Consolidate the options down or pick another field type. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Time Needed (GMT) Look on instance Categorization Details Definition: HSD0001372: Too many fields on a form Rating: Recommend Description: Too many fields on forms impact the service experience and leave users frustrated. Performance and ease of management is also impacted. Recommendation: Try to reduce the complexity of the given form to fewer than 30 fields. Use views or calculate fields automatically. Documentation Click here for more details Table / Object Details Form [sf_x_amspi_acn_amc_task]: 32 Look on instance Form [x_amspi_acn_amc_2_amc_t ask]: 69 Look on instance Form [sf_x_amspi_acn_amc_reque st]: 31 Look on instance Form [x_amspi_acn_amc_2_amc_r equest]: 33 Look on instance Categorization Details Definition: HSD0002020: Long module titles Rating: Discuss Description: Sometimes customers can use long titles for modules, which end up getting truncated and an ellipsis (...) added to it. When this happens, users do not see the full title and feel compelled to click it so they can see what that module is doing. Even more so, this can impact user experience when there are many similarly named modules. Recommendation: Long module titles will be truncated in the UI or they may overlap with the edit/favorite icons. Consider shortening the titles, making them unique. Or, if there are many with a © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 26 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
similar name, consider collating them under a separator and renaming them. Documentation Click here for more details Table / Object Details : Estimated Time to Complete Fullfillment Look on instance : For my Sales Pursuit/key project deliverable, I need assistance with… Look on instance : Estimated Time to Complete Fullfillment s Look on instance ACN BCTAPP Findings Categorization Details Definition: HSD0001207: Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. Rating: Recommend Description: If more there is a disparity of more than 5 fields (e.g., left has 1, right has 7), we should consider making the form more balanced. This might also indicate some client-side rules are hiding some of these fields if the whitespace is not apparent. Recommendation: Make sure the form is balanced and there is not excessive whitespace on one side or the other. Documentation Click here for more details Table / Object Details Table [sys_ui_element]: x_amspi_acn_bctapp_travel_approval table has a discrepency of 5 elements.. x_amspi_acn_bctapp_travel_approval.do?sys_id=-1&sysparm_view= Look on instance Categorization Details Definition: HSD0001372: Too many fields on a form Rating: Recommend Description: Too many fields on forms impact the service experience and leave users frustrated. Performance and ease of management is also impacted. Recommendation: Try to reduce the complexity of the given form to fewer than 30 fields. Use views or calculate fields automatically. Documentation Click here for more details Table / Object Details Form [x_amspi_acn_bctapp_travel _approval]: 56 Look on instance ACN WFH Findings Categorization Details Definition: HSD0001207: Form layout whitespace: make sure layout split does not have large empty © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 27 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
areas because only one side contains fields. Rating: Recommend Description: If more there is a disparity of more than 5 fields (e.g., left has 1, right has 7), we should consider making the form more balanced. This might also indicate some client-side rules are hiding some of these fields if the whitespace is not apparent. Recommendation: Make sure the form is balanced and there is not excessive whitespace on one side or the other. Documentation Click here for more details Table / Object Details Table [sys_ui_element]: x_amspi_acn_wfh_ph_request table has a discrepency of 5 elements.. x_amspi_acn_wfh_ph_request.do?sys_id=-1&sysparm_view= Look on instance Categorization Details Definition: HSD0001344: Minimize the number of options in a choice field Rating: Discuss Description: Having many options in a choice field often results in a poor user experience. Recommendation: Check if all the options are really required. Try to reduce to less than 15. Consolidate the options down or pick another field type. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: IG Look on instance Dictionary Entry [sys_dictionary]: IG Look on instance Categorization Details Definition: HSD0002830: Notifications with recipients who are not active Rating: Recommend Description: Notifications will not be sent to inactive users. Therefore notifications may not be sent when they would be expected to. Recommendation: Replace inactive recipients or set notifications to be sent to groups that are being maintained with only active users Documentation Click here for more details Table / Object Details Notification [sysevent_email_action]: WFH SLA Breached - 3rd Reminder Look on instance Notification [sysevent_email_action]: WFH Service Desk- 3rd Day Reminder Look on instance Notification [sysevent_email_action]: WFH Service Desk- 3rd Day Reminder - AO Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 28 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Notification [sysevent_email_action]: WFH Final Rem- Service Desk Look on instance ACN WPA Findings Categorization Details Definition: HSD0001207: Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. Rating: Recommend Description: If more there is a disparity of more than 5 fields (e.g., left has 1, right has 7), we should consider making the form more balanced. This might also indicate some client-side rules are hiding some of these fields if the whitespace is not apparent. Recommendation: Make sure the form is balanced and there is not excessive whitespace on one side or the other. Documentation Click here for more details Table / Object Details Table [sys_ui_element]: x_amspi_acn_wpa_work_permit_subscription table has a discrepency of 5 elements.. x_amspi_acn_wpa_work_permit_subscription.do?sys_id=-1&sysparm_view= Look on instance Table [sys_ui_element]: x_amspi_acn_wpa_work_permit_task table has a discrepency of 5 elements.. x_amspi_acn_wpa_work_permit_task.do?sys_id=-1&sysparm_view= Look on instance Categorization Details Definition: HSD0002737: UI Actions displayed as a button should be short and precise Rating: Discuss Description: The text displayed on an UI Action should be short and precise to avoid buttons becoming to large. Recommendation: Review the name for each of the UI Actions and shorten it. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Additional Information Requested Look on instance UI Action [sys_ui_action]: Additional Information Requested Look on instance Platform Findings Categorization Details Definition: HSD0002694: Get the number of Requested Approval for more than 10 Days. Rating: Recommend Description: Approvals are recommended to be processed within 10 days after requested Recommendation: Approvals are recommended to be processed within 10 days after requested and keep the user aware of the turnaround time of processing © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 29 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details sysapproval_approver: 310427 Unapproved Task updated 10 days ago Look on instance Categorization Details Definition: HSD0002695: Unassigned Tasks created 5 days or more Rating: Recommend Description: Tasks are recommended to be assigned as soon as possible to address the query, concern or issues of each user Recommendation: Assign the Task as soon as created and provide the SLA for resolution or reply to keep the user aware of the process and turnaround time of processing Documentation Click here for more details Table / Object Details x_amspi_dataprvcy_pcc: 11 Unassigned updated 5 days ago Look on instance x_amspi_ap20_real_cre_anal ytics_task: 3 Unassigned updated 5 days ago Look on instance x_amspi_ems_base_request: 94 Unassigned updated 5 days ago Look on instance x_amspi_client_tax_matters _task: 4806 Unassigned updated 5 days ago Look on instance AP20 Real Estate Findings Categorization Details Definition: HSD0001265: Auto-complete to match text in the columns listed in the ref_ac_columns attribute should be enabled. Rating: Discuss Description: Check if dictionary 'ref_ac_columns_search' attribute is set to true in order to enable auto- complete to match text in any column listed in the ref_ac_columns attribute. Recommendation: Set dictionary attribute 'ref_ac_columns_search' to true to enable auto-complete to match text in all reference field columns. By default (or when this attribute is false) auto-complete only matches text in the display value column. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: GeoRegion Look on instance ACN NDDO Findings Categorization Details Definition: HSD0002737: UI Actions displayed as a button should be short and precise © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 30 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Discuss Description: The text displayed on an UI Action should be short and precise to avoid buttons becoming to large. Recommendation: Review the name for each of the UI Actions and shorten it. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Request for Additional Details Look on instance ACN PA Findings Categorization Details Definition: HSD0002737: UI Actions displayed as a button should be short and precise Rating: Discuss Description: The text displayed on an UI Action should be short and precise to avoid buttons becoming to large. Recommendation: Review the name for each of the UI Actions and shorten it. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Copy Activity Tracker Information Look on instance ACN_MOBILECP Findings Categorization Details Definition: HSD0002737: UI Actions displayed as a button should be short and precise Rating: Discuss Description: The text displayed on an UI Action should be short and precise to avoid buttons becoming to large. Recommendation: Review the name for each of the UI Actions and shorten it. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Download Legal & Data Privacy+EULA forms Look on instance BizInquiry PAV Findings Categorization Details Definition: HSD0001302: Application navigator application menu with only one module. Rating: Discuss Description: Application menu items with only one module are often created automatically when creating a new table/application. Consider grouping into another Application menu. Recommendation: Consider grouping into a consolidated application menu, removing the module if it is not needed, or adding some more useful modules to the application menu. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 31 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details Application Menu [sys_app_application]: Line Items Look on instance Application Menu [sys_app_application]: Fiscal Period Look on instance Acn Dir Findings Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: x_amspi_acn_dir_sf_task. not_visible on form 2 times in one or more sections. Look on instance Categorization Details Definition: HSD0001344: Minimize the number of options in a choice field Rating: Discuss Description: Having many options in a choice field often results in a poor user experience. Recommendation: Check if all the options are really required. Try to reduce to less than 15. Consolidate the options down or pick another field type. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Lead status Look on instance Dictionary Entry [sys_dictionary]: Reason close Look on instance ACN ESA Findings Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 32 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details Form [sys_ui_form]: sf_x_amspi_acn_esa_task. not_visible on form 2 times in one or more sections. Look on instance Categorization Details Definition: HSD0002020: Long module titles Rating: Discuss Description: Sometimes customers can use long titles for modules, which end up getting truncated and an ellipsis (...) added to it. When this happens, users do not see the full title and feel compelled to click it so they can see what that module is doing. Even more so, this can impact user experience when there are many similarly named modules. Recommendation: Long module titles will be truncated in the UI or they may overlap with the edit/favorite icons. Consider shortening the titles, making them unique. Or, if there are many with a similar name, consider collating them under a separator and renaming them. Documentation Click here for more details Table / Object Details : Imp Tmpl X Amspi Acn Acnesa Esa Group Assignment Look on instance ACN Former Employee Findings Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: x_amspi_acn_former_sf_employee_task. not_visible on form 2 times in one or more sections. Look on instance Categorization Details Definition: HSD0002020: Long module titles Rating: Discuss Description: Sometimes customers can use long titles for modules, which end up getting truncated and an ellipsis (...) added to it. When this happens, users do not see the full title and feel compelled to click it so they can see what that module is doing. Even more so, this can impact user experience when there are many similarly named modules. Recommendation: Long module titles will be truncated in the UI or they may overlap with the edit/favorite icons. Consider shortening the titles, making them unique. Or, if there are many with a similar name, consider collating them under a separator and renaming them. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 33 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details : ACN Former Employee Request Templates Look on instance ACN GCP Findings Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: x_amspi_acn_gcp_sf_task. not_visible on form 2 times in one or more sections. Look on instance Asset Management Findings Categorization Details Definition: HSD0002833: List with a reference field as the first column Rating: Discuss Description: The first column in user facing lists should not be a reference field. Recommendation: Review the list layout and change the position of the reference field. The first column of the list should be a non-reference attribute of the table that is displayed. Documentation Click here for more details Table / Object Details List [sys_ui_list]: alm_asset Look on instance List [sys_ui_list]: alm_asset Look on instance List [sys_ui_list]: alm_asset Look on instance List [sys_ui_list]: alm_asset Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 34 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Manageability Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 31 134 248 ACN BCTAPP 1 25 32 Acn Dir 20 158 88 ACN Document Builder 2 2 11 ACN ESA 8 69 109 ACN Feedback 3 11 ACN Former Employee 6 27 59 ACN GCP 20 171 101 ACN Guided Workflow 5 17 14 ACN MyLearning 20 209 109 ACN NDDO 22 331 130 ACN PA 18 156 111 ACN SAC 19 85 137 ACN WFH 18 204 296 ACN WPA 19 170 118 ACN_ASB 31 305 292 ACN_CBMS 17 111 116 ACN_MOBILECP 12 79 179 ACN_PCHW_GPRT 22 69 113 Admin Account Request 2 3 11 AEE Ideas 15 364 130 Agent Intelligence 4 Agile Development 16 23 AIA Datalake 9 8 28 AP20 Real Estate 38 462 406 APIs and Integration Tools 4 829 431 AppEngine 353 22 Appointment Booking 2 Ask HR 2 84 112 Ask PM 3 109 130 Asset & Cost Management 3 Asset Management 39 142 42 Attachment Utility 1 Audit Tax App 4 82 103 Automated Testing Framework 1 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 35 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
BGC Fortify 6 680 652 Biz Approval 10 92 118 BizInquiry PAV 1 7 19 Business Support Request 15 147 80 Case and Knowledge Management 42 694 521 Cash Appl 9 156 78 CDP 34 332 452 Change Management 25 244 181 Clear Pass 20 197 230 Client Tax Matters 14 267 153 Client Whitelist 13 80 58 Cloud Management 1 Complaint Management Tool 15 128 90 Configuration Management Database 8 217 67 Connect Support 2 Contract Management 4 CRS 20 52 91 Custom Application Runtime and Execution 85 Customer Service Management 1 Data Privacy 49 889 821 Delegation 3 36 37 Disability 31 313 255 Discovery 5 Discovery and Service Mapping Patterns 1 1 E2E 13 253 152 EAM Asset Import 14 50 59 Ecosystem Supplier Management Support 37 54 Employee Data Change 1 147 114 Employee Exit 58 18 EMS 8 93 115 Enterprise Insight 25 167 155 Environment Config 1 1 Fac Compliance 11 378 308 Facilities Service Management 2 5 Fixed Assets 11 190 80 Fixed Assets Change 9 233 105 Flexi Work 1 44 77 Full and Final Exit 3 183 195 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 36 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
GDPR Recruiting 1 6 6 Governance, Risk & Compliance 1 8 Holiday Payout 35 66 Hours That Help 2 114 142 HR Case and Knowledge Management 1 Human Resources: Lifecycle Events 1 Idea Innovation 16 83 112 Incident Management 132 162 456 Integration - MyTE 5 4 Integrations 4 9 Interaction Logging, Routing, and Queueing 1 Internal Archiving 1 3 ITSM VA Accelerator 1 3 ITSM Workspace 1 Knowledge Management 1 57 7 Leave of Absence 13 222 233 LOC 1 49 93 Major Incident Management 13 202 141 Managed documents 2 Metric Definition 3 MetricBase (Clotho) - Time Series Database 1 Mobile 7 Mobile Asset 1 16 Mobile ITSM 3 14 MS Forms 14 54 66 MS Teams Recording Enablement 18 106 135 My Access 11 37 Normalization Data Services Client 2 Notifications 526 On-Call Scheduling 2 10 PAM Password Rotataion 1 32 18 Password Reset 1 Payroll 18 220 90 Payroll Uploads 1 145 121 PDF Generator 3 Performance Analytics 18 PIP Probation 27 116 314 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 37 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Platform 4 183 Platform Foundation 753 11788 10589 Problem Management 1 69 30 Query stats 1 1 Reporting 470 1349 Request Supplementary Pay 2 98 86 RTO Pulse Survey 6 3 20 Sales and Quality 7 153 63 Salesforce Integration 3 9 56 Service Catalog 130 1818 5868 Service Level Management 5 Service Portal Designer 2 7 ServiceNow NowMobile App – Catalog Screens and Applet Launcher 2 3 Software Asset Management 3 7 Source To Pay 35 328 298 Task table schema 1 Task-Outage Relationship 1 Time Card Management 11 159 81 Tracker App 19 17 TRIPP 1 23 33 TSEF 46 43 Users, Groups, and Roles 25 2 VA Adoption Insights 1 1 7 Walk-up Experience 1 11 25 Workflow 2 2 Workflow Runtime Engine 10 WS Admin 1 9 31 xMatters Actionable IT Alerts 15 4 ACN AMC Findings Categorization Details Definition: HSD0001924: Use Notification Categories Rating: Discuss Description: Notification categories allow your users an easy way to manage their notifications. Recommendation: Associate a notification category with every email notification Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 38 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Notification [sysevent_email_action]: Email Notif for CAT Feedback Look on instance Notification [sysevent_email_action]: Email Notif to Due Requests Look on instance Notification [sysevent_email_action]: ACN AMC REQUEST SUBMITTED Look on instance Categorization Details Definition: HSD0002071: Verify that system properties have a value (blank may be a valid value but still good to check this) Rating: Recommend Description: Verify that system properties have a value (blank may be a valid value but still good to check this) //Exclude properties whose names contain "glide" as they may be system properties Recommendation: System propertiess hould have a value (blank may be a valid value but still good to check this) Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_amc_2.evening.rush.hours Look on instance System Property [sys_properties]: x_amspi_acn_amc_2.morning.rush.hours Look on instance Categorization Details Definition: HSD0001015: Reports should typically not be made public Rating: Act Description: By default, reports that are public are available without logging in. This means that data may be unintentionally exposed and viewable by any user. Recommendation: Instead of publishing a report that is accessible by any user, regardless of whether they are logged in or not, share reports based on Roles, Users and/or Groups. To make a report available only to logged in users, set its Sharing setting to Everyone, but do not publish it. List reports are excluded from this definition as they always apply table level security (ACLs). Documentation Click here for more details Table / Object Details Report [x_amspi_acn_amc_request] : CI maintenance requests by building / space Look on instance Report [x_amspi_acn_amc_task]: CI maintenance tasks by building / space Look on instance Report [x_amspi_acn_amc_request] : Asset maintenance requests by building / space Look on instance Report [x_amspi_acn_amc_task]: Asset maintenance tasks by building / space © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 39 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Categorization Details Definition: HSD0003086: Scripted REST service and its resources should have a short description Rating: Discuss Description: Scripted REST services and their resources should have at least a short description for documentation purposes. Recommendation: Scripted REST service or attached resource does not provide a short description. Please add at least a short description for documentation purposes. Documentation Click here for more details Table / Object Details Scripted REST API [sys_ws_definition]: OPS API Look on instance Scripted REST Resource [sys_ws_operation]: addNonRequestHours Look on instance Categorization Details Definition: HSD0001058: Scoped app uses logging utils or depreciated methods for logging rather than the verbosity method. Rating: Act Description: Scoped applications should use scoped logging APIs rather than legacy methods. Recommendation: Scoped applications should use scoped logging APIs rather than legacy methods. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: getActiveContactPerson Look on instance Fix Script [sys_script_fix]: update_practice_domains_to_S&C Look on instance Fix Script [sys_script_fix]: update_practice_domains_to_security Look on instance Categorization Details Definition: HSD0001060: Use UI Policies Instead of Client Scripts Rating: Discuss Description: Review the Client Scripts and identify ones that should be UI Policies Recommendation: UI Policies are superior to Client Scripts as they dont require scripting. Review the client scripts and identify ones that should be UI Policies Documentation Click here for more details Table / Object Details Catalog Client Scripts Hide Fields when No Request. Script:Found on lines 17, 21, 23, 24, 29, 36, 37 and 47. Found © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 40 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[catalog_script_client]: on lines 16, 20, 30, 31, 32, 33, 34 a Look on instance Client Script [sys_script_client]: amc_request_onSubmit. Script:Found on lines 50 and 55 Look on instance Catalog Client Scripts [catalog_script_client]: amc_onChange_RequestType. Script:Found on lines 5, 7, 17, 18, 25 and 26. Found on lines 6, 10, 13, 16, 24 and 31. Found on lin Look on instance Client Script [sys_script_client]: Chargeability based on Focus Area. Script:Found on line 34. Found on lines 13, 22 and 31 Look on instance Categorization Details Definition: HSD0002808: Scripts without description Rating: Recommend Description: Script Includes or Client Scripts where the description is either empty, very short or the same as the script name. Recommendation: A meaningful description describing the use case should be provided for each Client Script or Script Include. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: onChangeClientFeed Look on instance Catalog Client Scripts [sys_script_client]: amc_onChange_Country Look on instance Client Script [sys_script_client]: Check UI Action Look on instance Client Script [sys_script_client]: onchange_serviceStatus Look on instance Categorization Details Definition: HSD0002122: Coding practices: Reading field values (e.g. gr.incident) in a Business Rule Rating: Discuss Description: For readability of code, we should continue to push the customers in the direction of using getValue() or toString() when reading values in a server script. Even more so when using those values in a condition. Recommendation: For improved readability and to leverage current coding practices, utilise the GlideRecord API's getter (glideRecord.getValue()) and setter (glideRecord.setValue()) methods with the identified Script Includes. Using gr.fieldName returns an object, whereas using gr.getValue('fieldName') will return a string value. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Estimated Hours Group. Showing first 5: lines 8, 10, 11, 12, 15 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 41 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Business Rule [sys_script]: AMC Task estimated cost. Found on line 8 - Found on line 16 Look on instance Business Rule [sys_script]: Add activity log for new attachment. Found on line 10 Look on instance Business Rule [sys_script]: AMC Create General Questions Child Task. Showing first 5: lines 13, 14, 15, 16, 17 Look on instance Categorization Details Definition: HSD0001167: Disable list-edit for all fields that have UI Policies and Client script on them. For example, in the list view it s possible to assign an Incident to someone Rating: Recommend Description: This definition verifies whether list editing is disabled for all fields that have UI Policies and Client Scripts on them. Recommendation: Creat edit_list ACLs to limit list editing for fields that require the user to navigate to the form. Reasons you may require a user to edit a field in a form include client script, complex UI policy constraints, or other policies you have in place. Documentation Click here for more details Table / Object Details UI Policy Action [sys_ui_policy_action]: Field "sf_x_amspi_acn_amc_task.ending_state" does not contain an appropriate ACL edit_list in place. It could allow users to edit "sf_x_amspi_acn_amc_task" records directly in the list bypassing any client scripts and/or UI policies. Look on instance UI Policy Action [sys_ui_policy_action]: Field "sf_x_amspi_acn_amc_task.starting_state" does not contain an appropriate ACL edit_list in place. It could allow users to edit "sf_x_amspi_acn_amc_task" records directly in the list bypassing any client scripts and/or UI policies. Look on instance UI Policy Action [sys_ui_policy_action]: Field "sf_x_amspi_acn_amc_request.ending_state" does not contain an appropriate ACL edit_list in place. It could allow users to edit "sf_x_amspi_acn_amc_request" records directly in the list bypassing any client scripts and/or UI policies. Look on instance UI Policy Action [sys_ui_policy_action]: Field "sf_x_amspi_acn_amc_request.starting_state" does not contain an appropriate ACL edit_list in place. It could allow users to edit "sf_x_amspi_acn_amc_request" records directly in the list bypassing any client scripts and/or UI policies. Look on instance Categorization Details Definition: HSD0001193: Use the condition field in Business Rules Rating: Discuss Description: Business rules should have a condition field, rather than just using "if" in the script. Recommendation: Using the condition field makes it easier to spot when scripts are being evaluated in the session debugger. Also, it is more efficent, since the script does not need to be parsed unless it is going to be executed. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 42 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details Business Rule [sys_script]: Estimated Hours Group Delete. Script:Found on line 8 Look on instance Business Rule [sys_script]: Estimated Hours Group. Script:Found on line 7 Look on instance Business Rule [sys_script]: RequestClosedDate Additional Validation. Script:Found on line 10 Look on instance Business Rule [sys_script]: setReportFIlter. Script:There are lots of matches. Showing the first 10: lines 10, 21, 23, 25, 27, 29, 31, 33, 35, 3 Look on instance Categorization Details Definition: HSD0001275: Scripts should not contain hard-coded IDs Rating: Recommend Description: Hard coding sys_ids makes the system more difficult to manage, and less able to move functionality between instances Recommendation: Create a system property to store the name of the record (not the sys_id) for easier manageability. The script can use gs.getProperty() to retrieve the record and use the sys_id. If the named record was not found, an error can be displayed appropriately. Documentation Click here for more details Table / Object Details Notification [sysevent_email_action]: ACN AMC REQUEST SUBMITTED. Advanced condition:Found on line 9 Look on instance Email Script [sys_script_email]: OPS_Due_Request. Script:Found on lines 13 and 26 Look on instance Script Include [sys_script_include]: getAMCOG. Script:Found on lines 14 and 14 Look on instance Business Rule [sys_script]: AMC Create General Questions Child Task. Script:Found on lines 61 and 62 Look on instance Categorization Details Definition: HSD0001278: Before Business Rules should not update() or insert() records on other tables Rating: Recommend Description: Running an insert() or update() in a onBefore BR will cause updates to other tables, even though the update may be cancelled Recommendation: To ensure data integrity, change this business rule to run "after". Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Set Request Status to Assigned. Script:Found on line 6 Look on instance Business Rule [sys_script]: Set Service Status to Assigned. Script:Found on line 5 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 43 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Business Rule [sys_script]: Add activity log for removed attachment. Script:Found on line 11 Look on instance Business Rule [sys_script]: AMC Create Media Child Task. Script:Found on line 65 Look on instance Categorization Details Definition: HSD0001312: Client-side code should not contain the console.log() debugging method Rating: Recommend Description: The client-side function console.log could cause errors in certain browser versions Recommendation: Replace console.log() calls with jslog. The benefits of jslog are that you have to open the JavaScript Debugger Window to view the output, it is compatible with all browsers, and can be left in production since only administrators can open the window. Documentation Click here for more details Table / Object Details Catalog UI Policy [catalog_ui_policy]: Hide fields onload. Execute if true:Found on line 8 Look on instance Client Script [sys_script_client]: onChange_MMSiD. Script:Found on line 216 Look on instance UI Script [sys_ui_script]: x_amspi_acn_amc_2.angular-bootstrap-cale. Script:Found on lines 4142, 4144 and 4146 Look on instance Catalog Client Scripts [catalog_script_client]: amc_onChange_MMSiD. Script:Found on line 238 Look on instance Categorization Details Definition: HSD0001320: Don't use a variable called gr in scripts Rating: Discuss Description: It is very common to use a variable called "gr" in scripts. This puts it at high risk of namespace conflicts. Choose another variable name. Recommendation: Change code like "var gr = new GlideRecord('incident')", to be something like "var grInc = new GlideRecord('incident')" Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: acn_amc_AJAX. Script:There are lots of matches. Showing the first 10: lines 9, 10, 11, 12, 13, 21, 22, 23, 24, 25 Look on instance Business Rule [sys_script]: AMC Create Conceptual Design Child Task. Script:There are lots of matches. Showing the first 10: lines 13, 14, 15, 16, 17, 18, 19, 20, 21, 2 Look on instance Business Rule [sys_script]: Assigned to Estimated hours. Script:There are lots of matches. Showing the first 10: lines 99, 100, 101, 102, 103, 104, 105, 106 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 44 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Business Rule [sys_script]: Sync Data from Request to Task. Script:There are lots of matches. Showing the first 10: lines 2, 3, 4, 6, 7, 8, 9, 10, 11, 12, 13, Look on instance Categorization Details Definition: HSD0003083: Scripted REST resource without enabled security Rating: Act Description: Scripted REST services offer 2 security options on resource level: requiring authentication and requiring ACL authorization. At least one of them should be checked. Recommendation: Enable at least authorization, even for scripted REST services that don't alter data. Consider using ACL authorization as well, if data will be altered by the web service. Documentation Click here for more details Table / Object Details Scripted REST Resource [sys_ws_operation]: addNonRequestHours Look on instance Categorization Details Definition: HSD0002331: Coding practices: Reading field values (e.g. gr.incident) in a Script Include Rating: Discuss Description: For readability of code, we should continue to push the customers in the direction of using getValue() or toString() when reading values in a server script. Even more so when using those values in a condition. As an example, you may have var someValue = glideRecord.fieldName; //this is a GlideElement object This returns an object where loose coding (or hacks) are used to make them practical, but readability becomes an issue: var someValue = glideRecord.fieldName + ''; //add empty string to make a string if ("someString" == someValue) {} // notice the == instead of === As a good practice, it is recommended to use getValue(). So the above script would become var someValue = glideRecord.getValue("fieldName"); For dot-walking can use toString(). For example: var someValue = glideRecord.refField.fieldName.toString(); There is the additional benefit of avoiding conflicting code so you can stick to consistency. For example the Javascript .value versus a value field. Recommendation: For improved readability and to leverage current coding practices, utilise the GlideRecord API's getter (glideRecord.getValue()) and setter (glideRecord.setValue()) methods with the identified Script Includes. Using gr.fieldName returns an object, whereas using gr.getValue('fieldName') will return a string value. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: getMarketUnit. Found on line 8 Look on instance Script Include [sys_script_include]: getAMCRequestype. Found on lines 8, 11 and 12 Look on instance Script Include [sys_script_include]: getStatuses. Showing first 5: lines 31, 146, 147, 149, 150 - Found on line 154 - Showing first 5: lines 31, 146, Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 45 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Script Include [sys_script_include]: getAllPPSMembers. Found on line 25 Look on instance Categorization Details Definition: HSD0003082: Enable Scripted REST API versioning Rating: Discuss Description: Scripted REST APIs may be versioned, allowing you to test and deploy changes without impacting existing integrations. Recommendation: Enable versioning for a scripted REST API to provide multiple versions of the API while maintaining compatibility with existing integrations. Documentation Click here for more details Table / Object Details Scripted REST API [sys_ws_definition]: OPS API Look on instance Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_amc_2.glide.script.block.client.globals. false Look on instance Categorization Details Definition: HSD0001597: Auto check: Prefer strict equality (===) and inequality (!==) operators over normal (== and !=) operators Rating: Discuss Description: Make sure that equality is exact. Recommendation: The === (also called the identity operator) only returns true only if the two operands are exactly the same thing. Not the same value, but exactly the same object. The operator !== is exactly the inverse of this. Documentation Click here for more details Table / Object Details Access Control [sys_security_acl]: x_amspi_acn_amc_request.category. Script:Found on lines 4, 5 and 6 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 46 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Access Control [sys_security_acl]: x_amspi_acn_amc_2_amc_request. Script:Found on line 4 Look on instance Business Rule [sys_script]: Set Request Status to Assigned. Script:Found on line 3. Found on lines 3 and 3 Look on instance Access Control [sys_security_acl]: x_amspi_acn_amc_task.short_description. Script:Found on lines 4, 5 and 6 Look on instance Categorization Details Definition: HSD0005001: Roles without any user Rating: Act Description: This definition checks if any role exists which is not assigned to any user. If the role is not needed, these roles can be removed. Recommendation: If the role is not assigned to any user, this role is probably not needed and can be removed from the system. Documentation Click here for more details Table / Object Details Role [sys_user_role]: x_amspi_acn_amc_2_initiator Look on instance Role [sys_user_role]: x_amspi_acn_amc_2_agent Look on instance Role [sys_user_role]: x_amspi_acn_amc_2_approver_user Look on instance Role [sys_user_role]: x_amspi_acn_amc_2.master_client_name_user Look on instance Categorization Details Definition: HSD0002111: Default ACLs on custom tables not modified Rating: Discuss Description: When creating a custom table, the standard choice is to create simple CRUD ACLs with one role attached to it. Couple scenarios where this does not make sense: - DELETE Acl should be an admin function - If table is extended and same ACL's are on parent they are useless Recommendation: 1. DELETE ACLs should be an admin function 2. If table is extended and the CRUD ACL's are on parent, ACLs on the Child table are redundant. Documentation Click here for more details Table / Object Details Access Control [sys_security_acl]: Delete ACL "x_amspi_acn_amc_2_request_sub_type_be" not assigned to Admin user. Look on instance Access Control [sys_security_acl]: Delete ACL "x_amspi_acn_amc_2_deliverable_language" not assigned to Admin user. Look on instance Access Control [sys_security_acl]: Possible redundant "write" ACL "x_amspi_acn_amc_2_amc_task". Similar ACL found of parent table "x_amspi_acn_amc_task". Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 47 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Access Control [sys_security_acl]: Delete ACL "x_amspi_acn_amc_2_request_type" not assigned to Admin user. Look on instance ACN BCTAPP Findings Categorization Details Definition: HSD0001924: Use Notification Categories Rating: Discuss Description: Notification categories allow your users an easy way to manage their notifications. Recommendation: Associate a notification category with every email notification Documentation Click here for more details Table / Object Details Notification [sysevent_email_action]: Travel Approvers - Status is Rejected Look on instance Notification [sysevent_email_action]: Travel Approvers - Status is Approved Look on instance Categorization Details Definition: HSD0001058: Scoped app uses logging utils or depreciated methods for logging rather than the verbosity method. Rating: Act Description: Scoped applications should use scoped logging APIs rather than legacy methods. Recommendation: Scoped applications should use scoped logging APIs rather than legacy methods. Documentation Click here for more details Table / Object Details Fix Script [sys_script_fix]: acn_PMG_FixScript_BCT_RITM9387271 Look on instance Categorization Details Definition: HSD0001167: Disable list-edit for all fields that have UI Policies and Client script on them. For example, in the list view it s possible to assign an Incident to someone Rating: Recommend Description: This definition verifies whether list editing is disabled for all fields that have UI Policies and Client Scripts on them. Recommendation: Creat edit_list ACLs to limit list editing for fields that require the user to navigate to the form. Reasons you may require a user to edit a field in a form include client script, complex UI policy constraints, or other policies you have in place. Documentation Click here for more details Table / Object Details UI Policy Action [sys_ui_policy_action]: Field "x_amspi_acn_bctapp_travel_approval.approve_reject_status" does not contain an appropriate ACL edit_list in place. It could allow users to edit "x_amspi_acn_bctapp_travel_approval" records directly in the list bypassing any client © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 48 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
scripts and/o Look on instance Platform Foundation Findings Categorization Details Definition: HSD0002602: List Layout with more than one List Element on the same position Rating: Act Description: List Elements on a List layouts should all have a unique position. List layouts will get corrupted when migrating to and from environments where they do not have unique positions. Recommendation: A list layout has been corrupted. You can address this by reviewing the list layouts to ensure the list elements all have a unique position. Documentation Click here for more details Table / Object Details List [sys_ui_list]: sys_script_include. 7 common Element(s) in List Look on instance Categorization Details Definition: HSD0001016: Lots of active tasks more than a month old Rating: Discuss Description: If there are lots of active tasks (more than 10% of the total) that are older than a month, it indicates a process problem. Recommendation: Check your processes to ensure that tasks (Incidents, Problems, Changes, Requests) are being closed as expected, and the active flag is set to false. Documentation Click here for more details Object: wm_order x_amspi_hpt_request em_remediation_task sc_req_item Categorization Details Definition: HSD0002397: Review updates left in a default update set Rating: Discuss Description: Check in a default update set if there are any updates created by any of developers who created update sets in the instance. if there are, advise developers to review them to make sure that there is nothing left there that should be promoted to production instances. Recommendation: Default update set contains several updates by developer, please review them to make sure that there is nothing left in default update set that should be promoted to next environement. Documentation Click here for more details Table / Object Details sys_update_xml: 898 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 49 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance sys_update_xml: 2954 Look on instance sys_update_xml: 33 Look on instance sys_update_xml: 45 Look on instance Categorization Details Definition: HSD0001066: Groups with no users Rating: Recommend Description: A group is a set of users who share a common purpose. Groups without users indicate poor data management. There are some occasions where this would not be the case, for example when groups are used for hierarchy purpose, and there is a logic in place not to pick these groups. In these cases you can also ignore this finding. Recommendation: Ensure that all assignment groups have members. Groups that are redundant should be deactivated. If groups are being created via integration services such as LDAP, then ensure they are necessary and have members. Documentation Click here for more details Table / Object Details Group [sys_user_group]: BusSvs-OS-T2-CL-FLOORVALPO Look on instance Group [sys_user_group]: APPSUP-CIO-SERVICENOW-ADMIN-ACCESS Look on instance Group [sys_user_group]: TSL-NTWKSVS-GDN-ALLSEC-CHENNAI Look on instance Group [sys_user_group]: SVSDSK Look on instance Categorization Details Definition: HSD0004650: Transform maps should not have boolean fields in their import set table Rating: Act Description: "Copy empty fields" check on the transform map make sure that the fields that are not supposed to be updated by the transform should not get emptied out during the transform. Boolean fields are never empty and by default is false. If a transform map is run with Copy Empty fields as false but a boolean field is present in the map's import set table, it will result in updating this field on all target records to false even though that is not intended. Recommendation: Replace the True/False field on the import set table to string field and write the transformation script to populate the value on the target record if needed. This will make sure if this field is not part of the data provided for update, it won't be modified on the target record. Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 50 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Field Map [sys_transform_entry]: u_reverse_zone Look on instance Field Map [sys_transform_entry]: u_turn_off_automatic_reminder Look on instance Field Map [sys_transform_entry]: u_gs Look on instance Field Map [sys_transform_entry]: u_cdl Look on instance Categorization Details Definition: HSD0003054: Activate plugin 'Contextual Security: Role Management V2' Rating: Recommend Description: ServiceNow recommends you enable the plugin 'Contextual Security: Role Management V2'. This plugin helps manage user groups and roles to protect information through role- based access controls. It also efficiently consolidates duplicate entries for inherited roles. Recommendation: The Contextual Security: Role Management V2 plugin should be activated. It helps manage user groups and roles to protect information through role-based access controls. Efficiently consolidates duplicate entries for inherited roles. Documentation Click here for more details Table / Object Details System Plugin [v_plugin]: Contextual Security: Role Management V2 Look on instance Categorization Details Definition: HSD0001195: Tables without ACLs Rating: Act Description: Every table should be secured by ACLs Recommendation: For tables that have no ACLs defined, the default deny property can be used to make the wildcard table ACL rules restrict the read, write, create, and delete operations on all tables unless the user has the admin role or meets the requirements of another table ACL rule. This means that custom tables without ACLs will not be accessible by any other user beside admin. Documentation Click here for more details Table / Object Details Table [sys_db_object]: label Look on instance Categorization Details Definition: HSD0004354: Scheduled jobs that fail or produce errors Rating: Recommend Description: Scheduled jobs that produce errors or that fail should be investigated and the issues © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 51 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
remediated. Recommendation: Manually investigate what the cause for the errors and failures is and fix. Documentation Click here for more details Table / Object Details Schedule Item [sys_trigger]: Job SMTP Sender 4 has failed 93 times, last error being com.glide.sys.TransactionCancelledException : Transaction cancelled: Available memory is almost depleted Look on instance Schedule Item [sys_trigger]: Job Scheduled execution of EBI SLA Breach has failed 1 times, last error being java.lang.NullPointerException : null Look on instance Schedule Item [sys_trigger]: Job PA Forecast Job Schedule has failed 43 times, last error being java.lang.NoSuchFieldError : SEASONAL_TREND_LOESS Look on instance Schedule Item [sys_trigger]: Job Scheduled Execution of SLOG Reduction Re has failed 1 times, last error being java.lang.NullPointerException : null Look on instance Categorization Details Definition: HSD0002015: Update Sets should be named uniquely Rating: Recommend Description: Where duplicate Update Set names exist, there is a likelihood that the contents of the update sets (customer updates) will also be duplicates. These duplicates may have been manually imported or imported when changing update sources. They can often lead false- positive results on update set previews and update sets being committed in the wrong order. Duplicate update sets should (where possible) be identified and deleted or given a unique name if are being used for current development. Recommendation: Duplicate update sets should be removed or renamed if being used for active development. Documentation Click here for more details Table / Object Details sys_update_set: 2 update sets with duplicate name "BizInquiry_WBS_INC4468011" Look on instance sys_update_set: 2 update sets with duplicate name "acn_asb_sprint_1_R2_01_ASB_6" Look on instance sys_update_set: 2 update sets with duplicate name "OfficeServices_FY18Q1_CR_441414_01" Look on instance sys_update_set: 2 update sets with duplicate name "WPA_Oct_StabFix_01_CHG0845157" Look on instance Categorization Details Definition: HSD0001306: Debug properties should be disabled in production Rating: Discuss © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 52 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Having debugging enabled unnecessarily can cause performance issues and possibly leak data. Recommendation: If not actively debugging in production, disable all debug system properties. Documentation Click here for more details Table / Object Details System Property [sys_properties]: queue.manager.debug. true Look on instance System Property [sys_properties]: glide.ldap.debug. true Look on instance Categorization Details Definition: HSD0001338: Business Rules should not be defined on the Global table (Global Business Rule) Rating: Act Description: A global Business Rule is any Business Rule where the selected Table is Global. Any other script can call global Business Rules. Global Business Rules have no condition or table restrictions and load on every page in the system. Recommendation: For the majority of situations, you can use a script include instead of a global business rule. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: sc_req_item_functions Look on instance Business Rule [sys_script]: Get Number Look on instance Business Rule [sys_script]: custom_ProcessFlowList() Look on instance Categorization Details Definition: HSD0001392: Scripts should not use the eval() method Rating: Recommend Description: The eval() function evaluates or executes an argument. Improper use of eval() opens up your code for injection attacks and debugging can be more challenging, as no line numbers are displayed with an error. Recommendation: Avoid the use of eval. It encourages the use of untrusted code. If you must execute arbitrary code, use GlideScriptEvaluator which ensures it came from a record. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: acn_UnifiedGatewayReadData. Script:Found on line 320 Look on instance Script Include [sys_script_include]: acn_clone. Script:Found on line 1115 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 53 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
UI Page [sys_ui_page]: receive_assetSW_clone. Processing script:There are lots of matches. Showing the first 10: lines 16, 32, 34, 35, 37, 38, 39 Look on instance UI Page [sys_ui_page]: eam_change_model_category. Processing script:Found on lines 9 and 10 Look on instance Categorization Details Definition: HSD0001398: Script Includes with duplicate names Rating: Act Description: When two Script Includes exist with the same name in the same scope, when those script includes are called it is unreliable as to which Script Include will actually be instantiated. Recommendation: Ensure all your Script Includes have unique names. Rename any script include with a duplicate name with a unique name. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: SLAConditionBase Look on instance Script Include [sys_script_include]: u_siebel_askpm_copy_attachment Look on instance Script Include [sys_script_include]: u_siebel_askpm_copy_attachment Look on instance Script Include [sys_script_include]: MyDateTimeAjax Look on instance Categorization Details Definition: HSD0002592: Dictionary entries present for a table that does not exist Rating: Act Description: Dictionary entries [sys_dictionary] have been found, but the Table [sys_db_object] record ir references does not exist Recommendation: Review Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: u_rep_amspi_global_jimy_joseph_ccp_all_2020 Look on instance Dictionary Entry [sys_dictionary]: u_rep_amspi_global_jimy_joseph_ci_updated_in_2days Look on instance Dictionary Entry [sys_dictionary]: u_rep_amspi_global_jimy_joseph_new Look on instance Dictionary Entry [sys_dictionary]: u_rep_amspi_global_jimy_joseph_ccp_data1 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 54 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0002917: Update Set should have Description field populated Rating: Recommend Description: Provide details relating to update in 'Description' field of update set as it helps indetifying the changes included in it. Recommendation: Include details relating to updates which were made in update set, you can include: * Story Number or Short Description * Defect Number or Short Description * Change Number or Short Description * or any other details relating to this update Documentation Click here for more details Table / Object Details sys_update_set: description. Number of update sets with empty descriptions = 13380 Look on instance Categorization Details Definition: HSD0002437: Check if strict mode for GlideRecord queries is active Rating: Recommend Description: Checks if glide.invalid_query.returns_no_rows is set to true. Recommendation: The system property "glide.invalid_query.returns_no_rows" should be set to "true" in order to force GlideRecord queries with invalid encoded queries to return an empty record set. Otherwise, errors in GlideRecord queries can have severe unintended side effects. See also the description of the property here: https://docs.servicenow.com/bundle/london- platform-administration/page/administer/reference- pages/reference/r_AvailableSystemProperties.html If you change this property, please do so in a subproduction instance first and perform thorough regression testing. Consider a trial period with thorough test coverage as part of UAT before enabling on existing, long standing production environments. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.invalid_query.returns_no_rows Look on instance Categorization Details Definition: HSD0004723: Incative User Criteria should not be used for "Available" related list Rating: Recommend Description: Removed any Inactive User Criteria on the "Available" list. For a more managable and easy detection of any issues on the viewing catalog items, it is recommended to have a clean list on active use criteria of the catalog items for "Available" related list. This will reduce the time when investigating or debugging user criteria issues on catalog items. Recommendation: Removed any Inactive User Criteria on the "Available" list. For a more managable and easy detection of any issues on the viewing catalog items, it is recommended to have a clean list on active use criteria of the catalog items for "Available" related list. This will reduce the time when investigating or debugging user criteria issues on catalog items. Documentation Click here for more details Object: Catalog Item Available for [sc_cat_item_user_criteria_mtom] © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 55 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Catalog Item Available for [sc_cat_item_user_criteria_mtom] Catalog Item Available for [sc_cat_item_user_criteria_mtom] Table / Object Details Catalog Item Available for [sc_cat_item_user_criteria_ mtom]: Non-Standard Software Review.India Look on instance Categorization Details Definition: HSD0001467: Duplicate foundation/core data found. Rating: Recommend Description: Duplicate foundation data records found in your instance. Recommendation: This could cause confusion from an end user perspective but also from a maintenance perspective. The recommendation is to ensure these records have unique, unambiguous names in the system. Documentation Click here for more details Table / Object Details cmn_cost_center: 349516 duplicate record(s) found in table [cmn_cost_center]. NOTE: Only showing first 40 Look on instance core_company: 1069 duplicate record(s) found in table [core_company]. NOTE: Only showing first 40 Look on instance sys_user_group: 4 duplicate record(s) found in table [sys_user_group]. Look on instance cmn_department: 1 duplicate record(s) found in table [cmn_department]. Look on instance Categorization Details Definition: HSD0004489: LDAP Listener is active Rating: Recommend Description: Verify if the listener field on all the active LDAP servers is set to true. Add a finding for each active server that doesn't have the listeren active Recommendation: By activating the listener on LDAP integrations ensures that all user data is updated in real time and therefore improves accuracy Documentation Click here for more details Table / Object Details LDAP Server [ldap_server_config]: AccenturePasswordExpiration Look on instance LDAP Server [ldap_server_config]: AccenturePasswordExpiration_secure Look on instance LDAP Server [ldap_server_config]: LDAPACNMANACCSServer Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 56 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
LDAP Server [ldap_server_config]: AccentureLDAPAMRDC Look on instance Categorization Details Definition: HSD0004724: Incative User Criteria should not be used for "Not Available" and "Available" related list Rating: Recommend Description: Removed any Inactive User Criteria on the "Not Available" and Available list. For a more managable and easy detection of any issues on the viewing catalog items, it is recommended to have a clean list on active use criteria of the catalog items for "Not Available" and "Available" related list. This will reduce the time when investigating or debugging user criteria issues on catalog items. Recommendation: Removed any Inactive User Criteria on the "Available" and "Not Available" list. For a more managable and easy detection of any issues on the viewing catalog items, it is recommended to have a clean list on active use criteria of the catalog items for "Available" and "Not Available"related list. This will reduce the time when investigating or debugging user criteria issues on catalog items. Documentation Click here for more details Object: Catalog Item Available for [sc_cat_item_user_criteria_mtom] Catalog Item Available for [sc_cat_item_user_criteria_mtom] Catalog Item Available for [sc_cat_item_user_criteria_mtom] Catalog Item Available for [sc_cat_item_user_criteria_mtom] Categorization Details Definition: HSD0004991: Control how exported CSV data appears in Notepad Rating: Recommend Description: Enables the user to control how exported CSV data appears in Notepad. Valid values are LF for a line feed between records and CRLF for a carriage return followed by a line feed Recommendation: Enables the user to control how exported CSV data appears in Notepad. Valid values are LF for a line feed between records and CRLF for a carriage return followed by a line feed Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.csv.export.line_break Look on instance Categorization Details Definition: HSD0001556: For domain separated instances, admins should be at the top level domain instead of Global Rating: Recommend Description: Checks domain membership for admins and creates a finding if an admin doesnt belong to Global. Recommendation: Consider moving all Global domain users to the Top level domain in production. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 57 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details User [sys_user]: admin Look on instance User [sys_user]: preserver.admin Look on instance User [sys_user]: ads.rjones Look on instance User [sys_user]: ads.CIOFFCLN Look on instance Categorization Details Definition: HSD0005017: Enable Update set tables to be audited Rating: Act Description: Check if the Update set tables is included in the auditable tables. Update set should be audited for deletions to make sure no developer can just delete directly from update sets. Recommendation: Enable auditing for update sets by adding the 'sys_update_xml' table to the 'glide.ui.audit_deleted_tables' property. This will enable auditing of deletions from Update sets. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.ui.audit_deleted_tables. sys_user,sys_user_group,sys_user_role,sys_user_has_role,sys_user_grmember,sys_group_h as_role,sys_sec Look on instance Service Catalog Findings Categorization Details Definition: HSD0002602: List Layout with more than one List Element on the same position Rating: Act Description: List Elements on a List layouts should all have a unique position. List layouts will get corrupted when migrating to and from environments where they do not have unique positions. Recommendation: A list layout has been corrupted. You can address this by reviewing the list layouts to ensure the list elements all have a unique position. Documentation Click here for more details Table / Object Details List [sys_ui_list]: item_option_new. 10 common Element(s) in List Look on instance Categorization Details Definition: HSD0001646: Workflow(s) should not be checked out for an extended time © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 58 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Discuss Description: A workflow version that is checked out isn't available for general use. Be sure to publish once edits are done. Recommendation: Follow up with owner of the checked out version and ensure the changes were made appropriate and/or remove the checked out version. Documentation Click here for more details Table / Object Details Workflow Version [wf_workflow_version]: ns_Transition_Process_subflow_NewProject_Infrastructure Look on instance Workflow Version [wf_workflow_version]: dim_ciw_workflow_v2 Look on instance Acn Dir Findings Categorization Details Definition: HSD0002071: Verify that system properties have a value (blank may be a valid value but still good to check this) Rating: Recommend Description: Verify that system properties have a value (blank may be a valid value but still good to check this) //Exclude properties whose names contain "glide" as they may be system properties Recommendation: System propertiess hould have a value (blank may be a valid value but still good to check this) Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_dir.morning.rush.hours Look on instance System Property [sys_properties]: x_amspi_acn_dir.evening.rush.hours Look on instance Categorization Details Definition: HSD0003625: Script code in Business Rules should be encapsulated in the executeRule method Rating: Recommend Description: The code should check if there is any business rule that have some code that is not encapsulated in the executeRule function. Recommendation: Encapsulate the code in the executeRule method so that the method is in scope for execution. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Assigned Look on instance Business Rule [sys_script]: Cancel Cleanup © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 59 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Business Rule [sys_script]: Start Work Look on instance Business Rule [sys_script]: Accept Look on instance Categorization Details Definition: HSD0001286: No coalesce field set for transform map Rating: Recommend Description: It is recommended that transform maps should have a coalesce field. Configuring a target field to coalesce causes the import set to treat the field as a unique key, updating records if they exist and only creating new ones if a match is not found for this field. Recommendation: Set a coalesce field for the transform map. Configuring a target field to coalesce causes the import set to treat the field as a unique key. When selected, the import set application attempts to match source values to records with values from an existing record. If a match is found, the transform map updates the record instead of creating a new record. When false, the import set application always creates new records for each transformation. Documentation Click here for more details Table / Object Details Table Transform Map [sys_transform_map]: Operationg Group Relationship Transform Look on instance Table Transform Map [sys_transform_map]: op_grp_industry_transform Look on instance Table Transform Map [sys_transform_map]: acn_bus_tow_transform Look on instance Table Transform Map [sys_transform_map]: Accenture Business TOW Transform Look on instance Categorization Details Definition: HSD0002419: Coding practices: Reading field values (e.g. gr.incident) in a UI Action Rating: Discuss Description: For readability of code, we should continue to push the customers in the direction of using getValue() or toString() when reading values in a server script. Even more so when using those values in a condition. As an example, you may have var someValue = glideRecord.fieldName; //this is a GlideElement object This returns an object where loose coding (or hacks) are used to make them practical, but readability becomes an issue: var someValue = glideRecord.fieldName + ''; //add empty string to make a string if ("someString" == someValue) {} // notice the == instead of === As a good practice, it is recommended to use getValue(). So the above script would become var someValue = glideRecord.getValue("fieldName"); For dot-walking can use toString(). For example: var someValue = glideRecord.refField.fieldName.toString(); Recommendation: For improved readability and to leverage current coding practices, utilise the GlideRecord API's getter (glideRecord.getValue()) and setter (glideRecord.setValue()) methods with the identified Script Includes. Using gr.fieldName returns an object, whereas using © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 60 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
gr.getValue('fieldName') will return a string value. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Copy Record. Showing first 5: lines 3, 4, 5, 6, 7 Look on instance Categorization Details Definition: HSD0004150: UI Actions with complex scripted conditions should be managed differently Rating: Recommend Description: It is more difficult to manage and understand conditional logic entered in the condition field of a UI action than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Tips: 1. Use a function with relevant comments 2. Simplify the condition logic (reduce repeat script) 3. Use a script include for re-usability across the platform Recommendation: It is more difficult to manage and understand conditional logic entered in the condition field of a UI action than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Example bad case: gs.getUser().getName() != 'system' && (!new hr_Utils().checkUserHasRole(hr.ROLE_HR_CASE_READER)) Example good case: new hr_Utils().applicableUser() Where possible, move conditional logic into a function that allows for comments and/or simplified script that is more easily consumable. This will help speed up troubleshooting and decrease maintenance efforts while promoting re-usability. Example: /* * Returns true if the user is neither the HR case reader nor the system user */ applicableUser: function() { var systemUser = gs.getUser().getName() == 'system'; var caseReader = this.checkUserHasRole(hr.ROLE_HR_CASE_READER); return !(systemUser || caseReader); } Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Ready For Work Look on instance UI Action [sys_ui_action]: Cancel Look on instance UI Action [sys_ui_action]: Pending Look on instance UI Action [sys_ui_action]: Save Look on instance Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 61 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_dir.glide.script.block.client.globals. false Look on instance ACN ESA Findings Categorization Details Definition: HSD0002071: Verify that system properties have a value (blank may be a valid value but still good to check this) Rating: Recommend Description: Verify that system properties have a value (blank may be a valid value but still good to check this) //Exclude properties whose names contain "glide" as they may be system properties Recommendation: System propertiess hould have a value (blank may be a valid value but still good to check this) Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_acnesa.morning.rush.hours Look on instance Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_acnesa.glide.script.block.client.globals. false Look on instance HR Case and Knowledge Management Findings Categorization Details Definition: HSD0001926: Specify group types Rating: Recommend Description: Use group types to organize different types of group. Provides the ability to limit groups on Group reference fields. Recommendation: Specify group types to organize different types of group. Provides the ability to limit groups © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 62 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
on Group reference fields. Documentation Click here for more details Table / Object Details sys_user_group: 1942 groups with empty group type Look on instance Asset Management Findings Categorization Details Definition: HSD0001020: List Report without any columns selected Rating: Discuss Description: List report who has no fields configured in field_list will always fall back to default layout of the lists Recommendation: List report who has no fields configured in field_list will always fall back to the default layout of the lists. If this is expected behavior for this report, you do not have to take any action, else you should configure the fields you want to see in this list report Documentation Click here for more details Table / Object Details Report [sys_report]: EAM-Assets in Stock Look on instance Report [sys_report]: EAM-Assets Pending Disposal >90 days Look on instance Categorization Details Definition: HSD0001187: Minimize logging in production Rating: Discuss Description: Turn debug logging off in production. It can affect performance, and potentially cause data leak challenges Recommendation: Remove the logging functions entirely or control their use with a property. At the minimum, switch to using gs.info and gs.debug Documentation Click here for more details Table / Object Details Business Rule [sys_script]: EAM_Asset_Tag_Generation - Hardware. Script:Found on line 8 Look on instance Access Control [sys_security_acl]: alm_asset.assigned_to. Script:Found on lines 4 and 9 Look on instance Categorization Details Definition: HSD0002454: Business rules with complex scripted conditions should be managed differently Rating: Recommend Description: It is more difficult to manage and understand conditional logic entered in the condition field © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 63 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
of a business rule than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Tips: 1. Use a function with relevant comments 2. Simplify the condition logic (reduce repeat script) 3. Use a script include for re-usability across the platform Recommendation: It is more difficult to manage and understand conditional logic entered in the condition field of a business rule than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Example bad case: gs.getUser().getName() != 'system' && (!new hr_Utils().checkUserHasRole(hr.ROLE_HR_CASE_READER)) Example good case: new hr_Utils().applicableUser() Where possible, move conditional logic into a function that allows for comments and/or simplified script that is more easily consumable. This will help speed up troubleshooting and decrease maintenance efforts while promoting re-usability. Example: /* * Returns true if the user is neither the HR case reader nor the system user */ applicableUser: function() { var systemUser = gs.getUser().getName() == 'system'; var caseReader = this.checkUserHasRole(hr.ROLE_HR_CASE_READER); return !(systemUser || caseReader); } Documentation Click here for more details Table / Object Details Business Rule [sys_script]: EAM - Query Country/Region wise Assets Look on instance Case and Knowledge Management Findings Categorization Details Definition: HSD0001020: List Report without any columns selected Rating: Discuss Description: List report who has no fields configured in field_list will always fall back to default layout of the lists Recommendation: List report who has no fields configured in field_list will always fall back to the default layout of the lists. If this is expected behavior for this report, you do not have to take any action, else you should configure the fields you want to see in this list report Documentation Click here for more details Table / Object Details Report [sys_report]: HR Case Identifier Look on instance Report [sys_report]: VENDOR CASE Look on instance Report [sys_report]: PMG Workday Monitoring - Invite Letters Look on instance Platform Findings Categorization Details Definition: HSD0002814: Draft or New task older than 1 month Rating: Recommend Description: Tasks should not stay in Draft for more than a month. Most likely those are no longer valid. Recommendation: Highly recommended to cancel all those tasks. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 64 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details alm_transfer_order_line_tas k: 6 Draft/New older than 1 month - alm_transfer_order_line_task Look on instance upgrade_history_task: 208 Draft/New older than 1 month - upgrade_history_task Look on instance x_amspi_acn_asb_structure_ setup: 171 Draft/New older than 1 month - x_amspi_acn_asb_structure_setup Look on instance x_amspi_aee_ideas_request: 3 Draft/New older than 1 month - x_amspi_aee_ideas_request Look on instance Categorization Details Definition: HSD0002740: Active Tasks with Inactive 'Opened By' User Rating: Recommend Description: Scan all open tasks and cases verify that there are no open cases with an inactive "Opened By" field. This is particularly important when the case is closed and there is a user acceptance workflow and in addition, it is a problem as the case agent is trying to communicate with this user through the case. Recommendation: Scan and review these tasks. As the owner is inactive, it may not be necessary to complete it anymore. Documentation Click here for more details Table / Object Details change_request: 377 with inactive Opened By - change_request Look on instance x_amspi_ask_hr_ask_hr: 1404 with inactive Opened By - x_amspi_ask_hr_ask_hr Look on instance x_amspi_emp_exit_employe e_exit: 10 with inactive Opened By - x_amspi_emp_exit_employee_exit Look on instance x_amspi_stp_procurement_r equests: 27 with inactive Opened By - x_amspi_stp_procurement_requests Look on instance Categorization Details Definition: HSD0002804: Active task with Closed Date Rating: Recommend Description: Task when closed should not be re-opened, that will have impact on your reporting. There are some metrics that are looking at closed dates. Customer needs to be strict on this and should update their process to just open another task and make a reference of the closed task instead. Recommendation: Check the URL provided on the finding and review the State and Active fields. Create/Update ACL to not allow re-opening of tasks. Consider using Resolved state then auto-close after 3 days so users are given enough time to accept or reject resolution. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 65 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details change_request: 55 active records but have closed date - change_request Look on instance x_amspi_comp_tool_task: 270 active records but have closed date - x_amspi_comp_tool_task Look on instance sc_request: 2670 active records but have closed date - sc_request Look on instance change_task: 32 active records but have closed date - change_task Look on instance Categorization Details Definition: HSD0004419: Inactive user accounts need to be deactivated Rating: Recommend Description: Users that have not logged into ServiceNow within the last 6 months are potentially users that are no longer working for the customer, are users that should not have been imported in the first place, or are not actually users but instead printers and rooms that are imported due to bad data quality. Flag active user records that have not logged in in the last 6 months for review. Recommendation: Review the active user records and deactivate those that are not relevant. Also recommended to review the user integration process to make sure the data quality is improved, only the relevant user records are imported and synced, and that employees no longer with the company are deactivated. Documentation Click here for more details Table / Object Details Table [sys_user]: 1338008 user(s) that have not logged in within the last 6 months. Look on instance Categorization Details Definition: HSD0002827: All events should have a description Rating: Recommend Description: All custom events in the event registry should have the "description" field populated. This will ensure that the event's purpose is easily identifiable by administrators who did not create the registry entry and improve maintainability of the instance. Recommendation: Populate the description on all events Documentation Click here for more details Table / Object Details sysevent_register: 1473 Event with empty Description. Look on instance Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 66 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0002700: Active Scheduled Job run by Deleted User Rating: Act Description: Scheduled Job if configured to be run by a different user (Run as), should be run by a valid active user in the application to execute the job. Customer intend to delete including OOTB users. We need to validate that all jobs are not affected by such deletion. Recommendation: Validate that all jobs are configured with a valid user if there are any define values under the "Run as" field Documentation Click here for more details Table / Object Details sysauto: 422 jobs with invalid user as 'Run as'. Look on instance Categorization Details Definition: HSD0002479: Group must not have an inactive Member Rating: Act Description: A group is a set of users who share a common purpose. Groups which include inactive users indicate poor data management and could result in failed task assignments causing delays to the processing. Recommendation: Remove inactive users from the group. Documentation Click here for more details Table / Object Details sys_user_grmember: 8148 group membership(s) where user is inactive. Look on instance Categorization Details Definition: HSD0002828: All events should have the "fired by" field populated Rating: Recommend Description: All custom events in the event registry should have the "fired_by" field populated. This will ensure that the event's trigger is easily identifiable by administrators who did not create the registry entry and improve maintainability of the instance. Recommendation: Populate the fired by on all events Documentation Click here for more details Table / Object Details sysevent_register: 1215 Event with empty Fired By. Look on instance Categorization Details Definition: HSD0002480: Group should not have an inactive Manager Rating: Act Description: A group is a set of users who share a management structure. Groups with an inactive user as a Manager indicate poor data management. No groups should be assigned a manager © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 67 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
who is inactive. Recommendation: Update the affected groups with an active manager. Documentation Click here for more details Table / Object Details sys_user_group: 12 group(s) with inactive Manager Look on instance Categorization Details Definition: HSD0002701: Active Scheduled Job run by Inactive User Rating: Act Description: Scheduled Job if configured to be run by a different user (Run as), should be run by a valid active user in the application to execute the job. Users can easily deactivate. We need to validate that all jobs are not affected by such activity. Recommendation: Validate that all jobs are configured with a valid user if there are any define values under the "Run as" field Documentation Click here for more details Table / Object Details sysauto: 48 Job(s) with inactive user as 'Run as'. Look on instance ACN SAC Findings Categorization Details Definition: HSD0003086: Scripted REST service and its resources should have a short description Rating: Discuss Description: Scripted REST services and their resources should have at least a short description for documentation purposes. Recommendation: Scripted REST service or attached resource does not provide a short description. Please add at least a short description for documentation purposes. Documentation Click here for more details Table / Object Details Scripted REST Resource [sys_ws_operation]: GET_INFORMATIONAL_TILE_BY_ID Look on instance Scripted REST Resource [sys_ws_operation]: GetSoftwareByID Look on instance Scripted REST Resource [sys_ws_operation]: getApproverProfile Look on instance Categorization Details Definition: HSD0003082: Enable Scripted REST API versioning Rating: Discuss © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 68 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Scripted REST APIs may be versioned, allowing you to test and deploy changes without impacting existing integrations. Recommendation: Enable versioning for a scripted REST API to provide multiple versions of the API while maintaining compatibility with existing integrations. Documentation Click here for more details Table / Object Details Scripted REST API [sys_ws_definition]: SAC Software API Look on instance Categorization Details Definition: HSD0001614: A before Business Rule should alter the current object. Otherwise it can be done async. Rating: Discuss Description: Similar (but not the same) as PID0001017 Recommendation: Use Async business rule Documentation Click here for more details Table / Object Details Business Rule [sys_script]: SAC Requested Items Look on instance ACN Guided Workflow Findings Categorization Details Definition: HSD0001058: Scoped app uses logging utils or depreciated methods for logging rather than the verbosity method. Rating: Act Description: Scoped applications should use scoped logging APIs rather than legacy methods. Recommendation: Scoped applications should use scoped logging APIs rather than legacy methods. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: acn_gw_cart_submit Look on instance APIs and Integration Tools Findings Categorization Details Definition: HSD0003076: Basic authentication credentials on SOAP Message definition Rating: Recommend Description: Basic Authentication for outbound SOAP Messages should use Basic Auth Profiles instead of putting the credentials on the function definition itself. Recommendation: Move the credentials from the SOAP Message definition into a Basic Auth Profile record and reference it for easier, centralized management of credentials. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 69 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details SOAP Message Function [sys_soap_message_function ]: AddSharedMailbox Look on instance SOAP Message Function [sys_soap_message_function ]: GBUObjectSoap.AddGroupMember Look on instance SOAP Message Function [sys_soap_message_function ]: GBUObjectSoap.AddGroupMember Look on instance SOAP Message Function [sys_soap_message_function ]: Create Look on instance Categorization Details Definition: HSD0003084: Scripted REST without a REST resource Rating: Discuss Description: A scripted REST service will not be usefull unless it defines at least one REST resource. Recommendation: Either create a REST resource for this scripted REST service or delete it, as it is not usable in its current state. Documentation Click here for more details Table / Object Details Scripted REST API [sys_ws_definition]: Update Service Look on instance Categorization Details Definition: HSD0003083: Scripted REST resource without enabled security Rating: Act Description: Scripted REST services offer 2 security options on resource level: requiring authentication and requiring ACL authorization. At least one of them should be checked. Recommendation: Enable at least authorization, even for scripted REST services that don't alter data. Consider using ACL authorization as well, if data will be altered by the web service. Documentation Click here for more details Table / Object Details Scripted REST Resource [sys_ws_operation]: Update CI Record Look on instance Scripted REST Resource [sys_ws_operation]: updateComment Look on instance Scripted REST Resource [sys_ws_operation]: ipAddressAndLocation Look on instance Scripted REST Resource [sys_ws_operation]: Get Status Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 70 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0002825: glide.import.error_message.generic is not enabled. Rating: Recommend Description: When true, failed imports display a generic error instead of a verbose SQL message. Enabling this property is highly recommended. Recommendation: Enable glide.import.error_message.generic to improve user experience thus limiting exposure to error messages. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.import.error_message.generic Look on instance Categorization Details Definition: HSD0003082: Enable Scripted REST API versioning Rating: Discuss Description: Scripted REST APIs may be versioned, allowing you to test and deploy changes without impacting existing integrations. Recommendation: Enable versioning for a scripted REST API to provide multiple versions of the API while maintaining compatibility with existing integrations. Documentation Click here for more details Table / Object Details Scripted REST API [sys_ws_definition]: Update Service Look on instance Categorization Details Definition: HSD0001600: Transform Script that run onBefore should not update() or insert() records on another table Rating: Discuss Description: A finding will be created for each transform script that uses updates or inserts on other tables than the traget table Recommendation: Avoid creating record other than the target table, otherwise the import could take a long time. Typically because the BR loging and potential additional logic will be triggered with every update. In addition, it is hard to find out from where a record was updated. Documentation Click here for more details Table / Object Details Transform Script [sys_transform_script]: onBefore in tm_dsrm_di_domain_inclusion_bulk_request. Script:Found on lines 20 and 126 Look on instance AppEngine Findings Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 71 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0001071: Custom Tables in global scope Rating: Recommend Description: Having many custom tables is difficult to manage. New tables should be created inside a scope, which makes things easier. There is a finding for each custom table outside of a scope. Recommendation: Leverage scoped apps to create new tables and consider transitioning old ones. This allows you to split responsibilities with Delegated developement. Documentation Click here for more details Table / Object Details CIO CI Manual Bulk Import Target Table [u_cio_ci_manual_bulk_imp ort_target_table]: CIO CI Manual Bulk Import Target Table Look on instance dSRM TR Imp [u_dsrm_tr_imp]: dSRM TR Imp Look on instance dSRM PDR DS Imp [u_dsrm_pdr_ds_imp]: dSRM PDR DS Imp Look on instance dSRM VSPD VDI Bulk [u_dsrm_vspd_vdi_bulk]: dSRM VSPD VDI Bulk Look on instance Categorization Details Definition: HSD0001538: Workflow activity references an empty or invalid group Rating: Discuss Description: Approval and other workflow activities with empty or invalid groups may cause issues with the workflow process. Recommendation: Make sure the correct group is assigned to the activity and that there are active users in the group. Documentation Click here for more details Table / Object Details Workflow Activity [wf_activity]: Get administrator group approval. Group Accenture LTS has no users. Look on instance Workflow Activity [wf_activity]: Catalog Request Approvers. Group Catalog Request Approvers > $1000 has no users. Look on instance Workflow Activity [wf_activity]: People Mobility Approval. Group ETR People Mobility Approvers has invalid users. Look on instance Workflow Activity [wf_activity]: CAB Approval. Group CAB Approval has no users. Look on instance Custom Application Runtime and Execution Findings Categorization Details Definition: HSD0001106: Applications should use Source Control Rating: Discuss © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 72 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Applications build on the Now platform should be linked to a source control repository Recommendation: Applications build on the Now platform are recommended to be linked to a Source Control Repository. Documentation Click here for more details Table / Object Details Custom Application [sys_app]: Ask HR Look on instance Custom Application [sys_app]: Client Whitelist Look on instance Custom Application [sys_app]: Clear Pass Look on instance Custom Application [sys_app]: ACN_ASB Look on instance Categorization Details Definition: HSD0001107: JavaScript Mode is not set on ES5 Rating: Discuss Description: To support existing scripts and new scripts developed to the ECMAScript5 standard, the JavaScript engine has two modes. The modes are Compatibility Mode and ES5 Standards Mode. The JavaScript engine dynamically determines which mode to use on a script-by- script basis. ES5 Standards mode is the default when you create new scoped scripts. This mode does not preserve the legacy behaviors in the pre-Helsinki JavaScript engine. Recommendation: All apps created after Helsinki should have ES5 set as the JavaScript mode. For any legacy apps, consider migrating to ES5. For any new apps, ES5 should be selected. Documentation Click here for more details Table / Object Details Custom Application [sys_app]: BizInquiry PAV Look on instance Leave of Absence Findings Categorization Details Definition: HSD0003084: Scripted REST without a REST resource Rating: Discuss Description: A scripted REST service will not be usefull unless it defines at least one REST resource. Recommendation: Either create a REST resource for this scripted REST service or delete it, as it is not usable in its current state. Documentation Click here for more details Table / Object Details Scripted REST API [sys_ws_definition]: LOA Get ACN MRDR People Relationship Look on instance ACN MyLearning Findings © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 73 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001153: Hard coded instance URL Rating: Recommend Description: Raises a finding for any hard-coded instance URLs Recommendation: Hard coded URLs to the instance make it difficult to move code between sub-prod and prod environments, causing broken links in at least one of the environments. Instead of hard coding, you might choose to use relative paths such as /incident.do or if you must use the instance URL use gs.getProperty('glide.servlet.uri'). Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: mylrn_surveyLink. Script:Found on line 4 Look on instance Categorization Details Definition: HSD0002419: Coding practices: Reading field values (e.g. gr.incident) in a UI Action Rating: Discuss Description: For readability of code, we should continue to push the customers in the direction of using getValue() or toString() when reading values in a server script. Even more so when using those values in a condition. As an example, you may have var someValue = glideRecord.fieldName; //this is a GlideElement object This returns an object where loose coding (or hacks) are used to make them practical, but readability becomes an issue: var someValue = glideRecord.fieldName + ''; //add empty string to make a string if ("someString" == someValue) {} // notice the == instead of === As a good practice, it is recommended to use getValue(). So the above script would become var someValue = glideRecord.getValue("fieldName"); For dot-walking can use toString(). For example: var someValue = glideRecord.refField.fieldName.toString(); Recommendation: For improved readability and to leverage current coding practices, utilise the GlideRecord API's getter (glideRecord.getValue()) and setter (glideRecord.setValue()) methods with the identified Script Includes. Using gr.fieldName returns an object, whereas using gr.getValue('fieldName') will return a string value. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Cancel Request. Found on line 49 Look on instance Categorization Details Definition: HSD0002454: Business rules with complex scripted conditions should be managed differently Rating: Recommend Description: It is more difficult to manage and understand conditional logic entered in the condition field of a business rule than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Tips: 1. Use a function with relevant comments 2. Simplify the condition logic (reduce repeat script) 3. Use a script include for re-usability across the platform © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 74 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: It is more difficult to manage and understand conditional logic entered in the condition field of a business rule than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Example bad case: gs.getUser().getName() != 'system' && (!new hr_Utils().checkUserHasRole(hr.ROLE_HR_CASE_READER)) Example good case: new hr_Utils().applicableUser() Where possible, move conditional logic into a function that allows for comments and/or simplified script that is more easily consumable. This will help speed up troubleshooting and decrease maintenance efforts while promoting re-usability. Example: /* * Returns true if the user is neither the HR case reader nor the system user */ applicableUser: function() { var systemUser = gs.getUser().getName() == 'system'; var caseReader = this.checkUserHasRole(hr.ROLE_HR_CASE_READER); return !(systemUser || caseReader); } Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Auto assessment business rule Look on instance Categorization Details Definition: HSD0001602: Number maintenance fields unique Rating: Discuss Description: Number fields in the sys_number table should always be marked unique. A unique index on a table guarantees that the index key contains no duplicate values and therefore ensures that every row in the table is unique in some way. Recommendation: Enable a unique index on the table. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Survey_id Look on instance Categorization Details Definition: HSD0001614: A before Business Rule should alter the current object. Otherwise it can be done async. Rating: Discuss Description: Similar (but not the same) as PID0001017 Recommendation: Use Async business rule Documentation Click here for more details Table / Object Details Business Rule [sys_script]: myLrng_updateDuration Look on instance Business Rule [sys_script]: Mylrn Last Notes Updation Look on instance Business Rule [sys_script]: mylrn_contactSupport_task_onAfter Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 75 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
ACN WFH Findings Categorization Details Definition: HSD0001153: Hard coded instance URL Rating: Recommend Description: Raises a finding for any hard-coded instance URLs Recommendation: Hard coded URLs to the instance make it difficult to move code between sub-prod and prod environments, causing broken links in at least one of the environments. Instead of hard coding, you might choose to use relative paths such as /incident.do or if you must use the instance URL use gs.getProperty('glide.servlet.uri'). Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: wfh_servicenow. Script:Found on line 3 Look on instance Email Script [sys_script_email]: wfh_BL_Approvals. Script:Found on line 7 Look on instance Email Script [sys_script_email]: wfh_req. Script:Found on line 5 Look on instance Email Script [sys_script_email]: wfh_contributor. Script:Found on line 3 Look on instance Categorization Details Definition: HSD0001214: Report assigned to a non-existent group/user Rating: Discuss Description: In case a report is shared with a non-existent group/user, this might be a left over after the group/user was deleted. Admins should consider keeping those records up to date to keep the system manageable Recommendation: Update the report and share it only with valid groups/users known to the system. In the rare case the system creates a group/user with the same orphan sys_id, the report would otherwise immediately shared with the group/user. Documentation Click here for more details Table / Object Details Report Users and Groups [sys_report_users_groups]: WFH PH Reports, Group: 86bbd69bdb89101ce61cd054d4961938 Look on instance Categorization Details Definition: HSD0004595: Email notifications with missing users, groups (no members), user/groups Rating: Recommend Description: Scan active email notifications for who should receive the notification and provide a list of any notifications that have missing users, user/groups, or groups with no members. This check is used to confirm that the notification settings are still correct, that the configuration is accurate. Exclude notifications where Event parms can contain recipient or Users/Groups © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 76 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
in fields can contain recipient. Recommendation: Review notifications that indicate missing information and correct them. Documentation Click here for more details Table / Object Details Notification [sysevent_email_action]: ACN WFH SLA Breached - Connectivity Look on instance Notification [sysevent_email_action]: ACN WFH Assigned - Escalation 3- 6th day Look on instance Notification [sysevent_email_action]: ACN WFH Closed for Pre-Closure - AO Look on instance Notification [sysevent_email_action]: ACN WFH - 7 prior to WFH End Date - AO Look on instance Categorization Details Definition: HSD0001614: A before Business Rule should alter the current object. Otherwise it can be done async. Rating: Discuss Description: Similar (but not the same) as PID0001017 Recommendation: Use Async business rule Documentation Click here for more details Table / Object Details Business Rule [sys_script]: WFH_Skip HRPA approval Look on instance Agile Development Findings Categorization Details Definition: HSD0001187: Minimize logging in production Rating: Discuss Description: Turn debug logging off in production. It can affect performance, and potentially cause data leak challenges Recommendation: Remove the logging functions entirely or control their use with a property. At the minimum, switch to using gs.info and gs.debug Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Remove accenture data. Script:Found on line 11 Look on instance AIA Datalake Findings Categorization Details Definition: HSD0001187: Minimize logging in production © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 77 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Discuss Description: Turn debug logging off in production. It can affect performance, and potentially cause data leak challenges Recommendation: Remove the logging functions entirely or control their use with a property. At the minimum, switch to using gs.info and gs.debug Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: ACNBaseClass. Script:Found on line 39 Look on instance Ask HR Findings Categorization Details Definition: HSD0001187: Minimize logging in production Rating: Discuss Description: Turn debug logging off in production. It can affect performance, and potentially cause data leak challenges Recommendation: Remove the logging functions entirely or control their use with a property. At the minimum, switch to using gs.info and gs.debug Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: acn_askHRQuery. Script:Found on line 207 Look on instance Categorization Details Definition: HSD0002454: Business rules with complex scripted conditions should be managed differently Rating: Recommend Description: It is more difficult to manage and understand conditional logic entered in the condition field of a business rule than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Tips: 1. Use a function with relevant comments 2. Simplify the condition logic (reduce repeat script) 3. Use a script include for re-usability across the platform Recommendation: It is more difficult to manage and understand conditional logic entered in the condition field of a business rule than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Example bad case: gs.getUser().getName() != 'system' && (!new hr_Utils().checkUserHasRole(hr.ROLE_HR_CASE_READER)) Example good case: new hr_Utils().applicableUser() Where possible, move conditional logic into a function that allows for comments and/or simplified script that is more easily consumable. This will help speed up troubleshooting and decrease maintenance efforts while promoting re-usability. Example: /* * Returns true if the user is neither the HR case reader nor the system user */ applicableUser: function() { var systemUser = gs.getUser().getName() == 'system'; var caseReader = this.checkUserHasRole(hr.ROLE_HR_CASE_READER); return !(systemUser || caseReader); } Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 78 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details Business Rule [sys_script]: u_Siebel_ASKHR_Reopen_On_Adding_comments Look on instance BGC Fortify Findings Categorization Details Definition: HSD0001191: Report shared with a group which has no users Rating: Discuss Description: Report shared with a group which has no users. This definition scans up to 10 level of group hierarchy, in case reports are assigned to functional groups with no users and users are actually maintained on child groups. Recommendation: Check if the report should be really shared with this group and if not adjust the sharing options for it. Documentation Click here for more details Table / Object Details Report Users and Groups [sys_report_users_groups]: BGC-RPT-RECRTR-SEA, Group: BGC-RPT-RECRTR-SEA Look on instance Report Users and Groups [sys_report_users_groups]: BGC-RPT-RECRTR-ASG, Group: BGC-RPT-RECRTR-ASG Look on instance Report Users and Groups [sys_report_users_groups]: BGC-RPT-RECRTR-Greater China, Group: BGC-RPT-RECRTR-Greater China Look on instance Report Users and Groups [sys_report_users_groups]: BGC-RPT-RECRTR-JPN, Group: BGC-RPT-RECRTR-JPN Look on instance Categorization Details Definition: HSD0001214: Report assigned to a non-existent group/user Rating: Discuss Description: In case a report is shared with a non-existent group/user, this might be a left over after the group/user was deleted. Admins should consider keeping those records up to date to keep the system manageable Recommendation: Update the report and share it only with valid groups/users known to the system. In the rare case the system creates a group/user with the same orphan sys_id, the report would otherwise immediately shared with the group/user. Documentation Click here for more details Table / Object Details Report Users and Groups [sys_report_users_groups]: Background Check Request Dashboard PHL, Group: a5814f00dbbd7344dd3cf5951d961935 Look on instance Report Users and Groups [sys_report_users_groups]: Unprocessed Taleo Records, Group: a5814f00dbbd7344dd3cf5951d961935 Look on instance Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 79 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0001454: Business Rules do not have when checkbox (insert, update, insert, query) checked Rating: Discuss Description: Business Rules that run before, async, or after should have, at least, one "when" checkbox checked (insert, update, insert, query). Recommendation: Generally, Business Rules that run before, async, or after should have, at least, one "when" checkbox checked (insert, update, insert, query). It is recommended to DISCUSS this finding to determine if the Business Rule in question is functioning intentionally or not. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: BGC Override Look on instance AP20 Real Estate Findings Categorization Details Definition: HSD0001195: Tables without ACLs Rating: Act Description: Every table should be secured by ACLs Recommendation: For tables that have no ACLs defined, the default deny property can be used to make the wildcard table ACL rules restrict the read, write, create, and delete operations on all tables unless the user has the admin role or meets the requirements of another table ACL rule. This means that custom tables without ACLs will not be accessible by any other user beside admin. Documentation Click here for more details Table / Object Details Table [sys_db_object]: AP20 Chat Data Look on instance BizInquiry PAV Findings Categorization Details Definition: HSD0001195: Tables without ACLs Rating: Act Description: Every table should be secured by ACLs Recommendation: For tables that have no ACLs defined, the default deny property can be used to make the wildcard table ACL rules restrict the read, write, create, and delete operations on all tables unless the user has the admin role or meets the requirements of another table ACL rule. This means that custom tables without ACLs will not be accessible by any other user beside admin. Documentation Click here for more details Table / Object Details Table [sys_db_object]: Product Category Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 80 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Data Privacy Findings Categorization Details Definition: HSD0001195: Tables without ACLs Rating: Act Description: Every table should be secured by ACLs Recommendation: For tables that have no ACLs defined, the default deny property can be used to make the wildcard table ACL rules restrict the read, write, create, and delete operations on all tables unless the user has the admin role or meets the requirements of another table ACL rule. This means that custom tables without ACLs will not be accessible by any other user beside admin. Documentation Click here for more details Object: Table [sys_db_object] EMS Findings Categorization Details Definition: HSD0001195: Tables without ACLs Rating: Act Description: Every table should be secured by ACLs Recommendation: For tables that have no ACLs defined, the default deny property can be used to make the wildcard table ACL rules restrict the read, write, create, and delete operations on all tables unless the user has the admin role or meets the requirements of another table ACL rule. This means that custom tables without ACLs will not be accessible by any other user beside admin. Documentation Click here for more details Table / Object Details Table [sys_db_object]: label Look on instance Reporting Findings Categorization Details Definition: HSD0001202: Report assigned to a user which is not active Rating: Discuss Description: Report assigned to a user which is not active Recommendation: Check if the report should be really shared with this user and if not adjust the sharing options for it. Documentation Click here for more details Table / Object Details sys_report: You have 532 user assigned to reports which are no longer active. Look on instance Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 81 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0001204: Map sources should have a location field referenced Rating: Discuss Description: Map sources only work with Locations (cmn_location) Recommendation: A set of predefined map sources and maps are available by default. Use these predefined objects whenever possible. If you need a map source that does not exist, generate it automatically using Generate map source levels link on the map source form, then customize it. You can automatically generate map source levels only for map sources that reference the location table. These map sources have a field that ends in .location. Documentation Click here for more details Table / Object Details Map Source [sys_report_map_source]: AEE Idea Requester Location - Task Table Look on instance Categorization Details Definition: HSD0001214: Report assigned to a non-existent group/user Rating: Discuss Description: In case a report is shared with a non-existent group/user, this might be a left over after the group/user was deleted. Admins should consider keeping those records up to date to keep the system manageable Recommendation: Update the report and share it only with valid groups/users known to the system. In the rare case the system creates a group/user with the same orphan sys_id, the report would otherwise immediately shared with the group/user. Documentation Click here for more details Table / Object Details Report Users and Groups [sys_report_users_groups]: Tickets Assigned to My Group, User: 50ac29cfdb2843c0b6ca562bdc9619bd Look on instance Report Users and Groups [sys_report_users_groups]: Assigned to me tickets Krish, User: 50ac29cfdb2843c0b6ca562bdc9619bd Look on instance ACN GCP Findings Categorization Details Definition: HSD0001203: Reports should not be shared with roles that have no users Rating: Discuss Description: Report shared with a role which has no users Recommendation: Check if the report should be really shared with this role and if not adjust the sharing options for it. Documentation Click here for more details Table / Object Details Report [sys_report]: ACN GCP Requests by Month, Roles: x_amspi_acn_gcp_read Look on instance Report [sys_report]: ACN GCP Requests, Roles: x_amspi_acn_gcp_read Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 82 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Report [sys_report]: ACN GCP Group Usage, Roles: x_amspi_acn_gcp_read Look on instance Report [sys_report]: ACN GCP Tasks, Roles: x_amspi_acn_gcp_read Look on instance Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_gcp.glide.script.block.client.globals. false Look on instance Integrations Findings Categorization Details Definition: HSD0001306: Debug properties should be disabled in production Rating: Discuss Description: Having debugging enabled unnecessarily can cause performance issues and possibly leak data. Recommendation: If not actively debugging in production, disable all debug system properties. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.authenticate.multisso.debug. true Look on instance Mobile Asset Findings Categorization Details Definition: HSD0001306: Debug properties should be disabled in production Rating: Discuss Description: Having debugging enabled unnecessarily can cause performance issues and possibly leak data. Recommendation: If not actively debugging in production, disable all debug system properties. Documentation Click here for more details Table / Object Details System Property x_amspi_mobl_asset.mobile.asset.debug. true © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 83 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[sys_properties]: Look on instance Change Management Findings Categorization Details Definition: HSD0001348: Duplicate task numbers Rating: Act Description: Task numbers should always be unique to clearly identify them. Recommendation: Although duplicate numbers are rare, numbering does not enforce uniqueness, by default. Fix the number maintenance and re-number those who are duplicates. Documentation Click here for more details Table / Object Details change_task: 2 Look on instance change_request: 2 Look on instance Categorization Details Definition: HSD0001454: Business Rules do not have when checkbox (insert, update, insert, query) checked Rating: Discuss Description: Business Rules that run before, async, or after should have, at least, one "when" checkbox checked (insert, update, insert, query). Recommendation: Generally, Business Rules that run before, async, or after should have, at least, one "when" checkbox checked (insert, update, insert, query). It is recommended to DISCUSS this finding to determine if the Business Rule in question is functioning intentionally or not. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: CI Required on CR Look on instance Categorization Details Definition: HSD0001646: Workflow(s) should not be checked out for an extended time Rating: Discuss Description: A workflow version that is checked out isn't available for general use. Be sure to publish once edits are done. Recommendation: Follow up with owner of the checked out version and ensure the changes were made appropriate and/or remove the checked out version. Documentation Click here for more details Table / Object Details Workflow Version [wf_workflow_version]: Comprehensive Change Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 84 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Incident Management Findings Categorization Details Definition: HSD0001348: Duplicate task numbers Rating: Act Description: Task numbers should always be unique to clearly identify them. Recommendation: Although duplicate numbers are rare, numbering does not enforce uniqueness, by default. Fix the number maintenance and re-number those who are duplicates. Documentation Click here for more details Table / Object Details sm_order: 2 Look on instance incident: 2 Look on instance sm_task: 2 Look on instance ACN PA Findings Categorization Details Definition: HSD0002419: Coding practices: Reading field values (e.g. gr.incident) in a UI Action Rating: Discuss Description: For readability of code, we should continue to push the customers in the direction of using getValue() or toString() when reading values in a server script. Even more so when using those values in a condition. As an example, you may have var someValue = glideRecord.fieldName; //this is a GlideElement object This returns an object where loose coding (or hacks) are used to make them practical, but readability becomes an issue: var someValue = glideRecord.fieldName + ''; //add empty string to make a string if ("someString" == someValue) {} // notice the == instead of === As a good practice, it is recommended to use getValue(). So the above script would become var someValue = glideRecord.getValue("fieldName"); For dot-walking can use toString(). For example: var someValue = glideRecord.refField.fieldName.toString(); Recommendation: For improved readability and to leverage current coding practices, utilise the GlideRecord API's getter (glideRecord.getValue()) and setter (glideRecord.setValue()) methods with the identified Script Includes. Using gr.fieldName returns an object, whereas using gr.getValue('fieldName') will return a string value. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Restore Record. Found on line 22 Look on instance UI Action [sys_ui_action]: Delete Record. Found on line 22 Look on instance UI Action [sys_ui_action]: Delete Record. Found on line 22 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 85 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001600: Transform Script that run onBefore should not update() or insert() records on another table Rating: Discuss Description: A finding will be created for each transform script that uses updates or inserts on other tables than the traget table Recommendation: Avoid creating record other than the target table, otherwise the import could take a long time. Typically because the BR loging and potential additional logic will be triggered with every update. In addition, it is hard to find out from where a record was updated. Documentation Click here for more details Table / Object Details Transform Script [sys_transform_script]: onBefore in ACN PA Bulk Activities Transform. Script:Found on lines 139, 156 and 225. Found on lines 37 and 253 Look on instance Transform Script [sys_transform_script]: onBefore in ACN_PA_Bulk_Projects_Transform. Script:Found on line 109. Found on lines 44 and 69 Look on instance Transform Script [sys_transform_script]: onBefore in ACN PA Activities Map. Script:Found on lines 65, 82 and 150. Found on line 175 Look on instance Transform Script [sys_transform_script]: onBefore in ACN PA Projects List Map. Script:Found on line 48 Look on instance Clear Pass Findings Categorization Details Definition: HSD0001454: Business Rules do not have when checkbox (insert, update, insert, query) checked Rating: Discuss Description: Business Rules that run before, async, or after should have, at least, one "when" checkbox checked (insert, update, insert, query). Recommendation: Generally, Business Rules that run before, async, or after should have, at least, one "when" checkbox checked (insert, update, insert, query). It is recommended to DISCUSS this finding to determine if the Business Rule in question is functioning intentionally or not. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Clearpass_samePSK Look on instance E2E Findings Categorization Details Definition: HSD0001454: Business Rules do not have when checkbox (insert, update, insert, query) checked Rating: Discuss © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 86 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Business Rules that run before, async, or after should have, at least, one "when" checkbox checked (insert, update, insert, query). Recommendation: Generally, Business Rules that run before, async, or after should have, at least, one "when" checkbox checked (insert, update, insert, query). It is recommended to DISCUSS this finding to determine if the Business Rule in question is functioning intentionally or not. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: E2E Time to Assign Look on instance Business Rule [sys_script]: E2E Task Sync P+Status for List View Look on instance xMatters Actionable IT Alerts Findings Categorization Details Definition: HSD0003081: Basic authentication credentials on REST Message definition Rating: Recommend Description: Basic Authentication for outbound REST Messages should use Basic Auth Profiles instead of putting the credentials on the function definition itself. Recommendation: Basic (simple) is a legacy type of authentication. It should no longer be used, as it is not very manageable due to the credentials being spread over all method definitions. Instead, consider moving the credentials from the REST Message definition into a Basic Auth Profile record and reference it for easier, centralized management of credentials. Documentation Click here for more details Table / Object Details HTTP Method [sys_rest_message_fn]: get Look on instance HTTP Method [sys_rest_message_fn]: put Look on instance HTTP Method [sys_rest_message_fn]: post Look on instance HTTP Method [sys_rest_message_fn]: delete Look on instance ACN_ASB Findings Categorization Details Definition: HSD0003082: Enable Scripted REST API versioning Rating: Discuss Description: Scripted REST APIs may be versioned, allowing you to test and deploy changes without impacting existing integrations. Recommendation: Enable versioning for a scripted REST API to provide multiple versions of the API while maintaining compatibility with existing integrations. Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 87 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Scripted REST API [sys_ws_definition]: ASB_Trigger Look on instance Scripted REST API [sys_ws_definition]: ASB_MME_Trigger Look on instance ACN Former Employee Findings Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_former.glide.script.block.client.globals. false Look on instance Ask PM Findings Categorization Details Definition: HSD0002454: Business rules with complex scripted conditions should be managed differently Rating: Recommend Description: It is more difficult to manage and understand conditional logic entered in the condition field of a business rule than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Tips: 1. Use a function with relevant comments 2. Simplify the condition logic (reduce repeat script) 3. Use a script include for re-usability across the platform Recommendation: It is more difficult to manage and understand conditional logic entered in the condition field of a business rule than in a script include that allows for descriptive comments. This is especially true when multiple conditions exist or the length of the condition is long. Example bad case: gs.getUser().getName() != 'system' && (!new hr_Utils().checkUserHasRole(hr.ROLE_HR_CASE_READER)) Example good case: new hr_Utils().applicableUser() Where possible, move conditional logic into a function that allows for comments and/or simplified script that is more easily consumable. This will help speed up troubleshooting and decrease maintenance efforts while promoting re-usability. Example: /* * Returns true if the user is neither the HR case reader nor the system user */ applicableUser: function() { var systemUser = gs.getUser().getName() == 'system'; var caseReader = this.checkUserHasRole(hr.ROLE_HR_CASE_READER); return !(systemUser || caseReader); } Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 88 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Business Rule [sys_script]: u_Siebel_ASKPM_set_Fulfiller/requester Look on instance Business Rule [sys_script]: u_Siebel_ASKPM_Reopen_On_Adding_comments Look on instance ACN Feedback Findings Categorization Details Definition: HSD0001602: Number maintenance fields unique Rating: Discuss Description: Number fields in the sys_number table should always be marked unique. A unique index on a table guarantees that the index key contains no duplicate values and therefore ensures that every row in the table is unique in some way. Recommendation: Enable a unique index on the table. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Number Look on instance AEE Ideas Findings Categorization Details Definition: HSD0001602: Number maintenance fields unique Rating: Discuss Description: Number fields in the sys_number table should always be marked unique. A unique index on a table guarantees that the index key contains no duplicate values and therefore ensures that every row in the table is unique in some way. Recommendation: Enable a unique index on the table. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Number Look on instance Dictionary Entry [sys_dictionary]: Number Look on instance Dictionary Entry [sys_dictionary]: Efficiency Utilization Number Look on instance Knowledge Management Findings Categorization Details Definition: HSD0001888: Every Knowledge Base should have at least one Category defined. Rating: Recommend Description: Every Knowledge Base should have at least one Category defined. Recommendation: Every Knowledge Base should have at least one Category defined. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 89 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details Knowledge Base [kb_knowledge_base]: Knowledge Base 'ACN WPA Knowledge' should have at least one category defined Look on instance Knowledge Base [kb_knowledge_base]: Knowledge Base 'Hours that Help' should have at least one category defined Look on instance Knowledge Base [kb_knowledge_base]: Knowledge Base 'Field Service Knowledge' should have at least one category defined Look on instance Knowledge Base [kb_knowledge_base]: Knowledge Base 'ClearPass (Accenture Corporate Devices) - Bulk Template' should have at least one category defined Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 90 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Performance Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 2 4 ACN BCTAPP 1 1 Acn Dir 2 1 ACN Document Builder 1 ACN ESA 1 2 ACN Former Employee 3 1 ACN Guided Workflow 18 ACN MyLearning 4 ACN NDDO 1 ACN SAC 22 ACN WFH 3 2 ACN WPA 3 ACN_ASB 8 36 ACN_MOBILECP 6 1 ACN_PCHW_GPRT 3 6 3 Admin Account Request 1 AEE Ideas 1 5 Agile Development 4 2 AIA Datalake 1 1 AP20 Real Estate 8 47 1 APIs and Integration Tools 391 83 48 Ask HR 2 1 Ask PM 4 1 9 Asset Management 2 2 7 Audit Tax App 4 Automated Testing Framework 1 BGC Fortify 19 18 25 Biz Approval 7 1 Business Support Request 1 Case and Knowledge Management 8 131 8 Cash Appl 1 1 CDP 23 25 3 Change Management 3 35 Clear Pass 3 1 2 Client Tax Matters 2 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 91 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Client Whitelist 1 Complaint Management Tool 6 4 Configuration Management Database 5 9 17 Connect Support 2 Contract Management 2 CRS 7 9 Data Privacy 1 16 Disability 5 2 10 E2E 1 33 Employee Data Change 2 3 2 Employee Exit 1 1 Enterprise Insight 2 5 Environment Config 1 Fac Compliance 8 8 1 Facilities Service Management 1 Fixed Assets 1 Fixed Assets Change 3 5 Flexi Work 2 Full and Final Exit 5 17 4 Holiday Payout 6 6 1 Hours That Help 3 8 Idea Innovation 3 1 Incident Management 4 9 11 Integrations 13 6 2 Knowledge Management 1 Leave of Absence 2 25 2 LOC 3 1 Major Incident Management 5 15 My Access 1 2 PAM Password Rotataion 1 Payroll 1 1 Payroll Uploads 1 3 Performance Analytics 2 PIP Probation 2 17 Platform Foundation 82 1625 183 Problem Management 1 2 4 Reporting 1 Request Supplementary Pay 4 RTO Pulse Survey 2 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 92 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Sales and Quality 1 Salesforce Integration 1 1 Service Catalog 41 1610 101 Service Portal Designer 527 Software Asset Management 4 Source To Pay 9 6 1 Time Card Management 1 1 TSEF 1 4 VA Adoption Insights 1 Walk-up Experience 4 Workflow Runtime Engine 189 xMatters Actionable IT Alerts 8 Case and Knowledge Management Findings Categorization Details Definition: HSD0001022: Excessive Client Scripts Rating: Recommend Description: More than 10 custom Client Scripts on the table is typically unnecessary. Investigate why so much code is being written. Recommendation: Check if the functionality is necessary. Often client side scripts can typically be remade as server side scripts, which will often perform much faster. Documentation Click here for more details Table / Object Details hr_case: 64 Look on instance Categorization Details Definition: HSD0001281: getMessage() called in Client Script without preloading message key Rating: Act Description: getMessage used in a client script needs to have the message key added to the Messages field on the script record. Recommendation: Use the messages field on the client script record to load the message key being used in getMessage(). Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: pss_onchange_closure_reason. Messages: Please enter the Exit ticket number, Please share the input with payroll team and attach t Look on instance Client Script [sys_script_client]: pss_onchange_hrss_reason. Messages: Please enter the Exit ticket number, Please enter the LOA ticket number, Please enter the Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 93 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001347: Client-side code should not use GlideRecord Rating: Discuss Description: The client side GlideRecord object is often inefficent, because it returns lots of unecessary data. GlideRecord and g_form.getReference are both involved. Recommendation: Use client data as much as possible to eliminate the need for time-consuming server lookups. The top ways to get information from the server are g_scratchpad, and asynchronous GlideAjax lookup. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: u_HRCM_CS_EscalationSubject. Script:Found on line 9 Look on instance Client Script [sys_script_client]: u_HRCM_CS_hide_attachments. Script:Found on line 16 Look on instance Client Script [sys_script_client]: u_HRCM_CS_EscalationOpenedfor. Script:Found on line 8 Look on instance Categorization Details Definition: HSD0001496: Active workflow context older than 30 days Rating: Recommend Description: Review old workflows in the system which are still active. These are still executing and using system resources. Recommendation: There are active workflows in the system that have been active for more than 30 days. Review the findings and determine why the workflows have not yet terminated. If these workflows are no longer required, consider cancelling them to free up system resources. Documentation Click here for more details Table / Object Details Workflow Version [wf_workflow_version]: Pmg_Imm_L_Blanket_Work_Permit - Visa Stamping Look on instance Workflow Version [wf_workflow_version]: PMG Business Case Look on instance Workflow Version [wf_workflow_version]: PMG Delegates Look on instance Workflow Version [wf_workflow_version]: PMG_Imm_Business Visa ROW Visa Stamping Look on instance Change Management Findings Categorization Details Definition: HSD0001022: Excessive Client Scripts Rating: Recommend © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 94 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: More than 10 custom Client Scripts on the table is typically unnecessary. Investigate why so much code is being written. Recommendation: Check if the functionality is necessary. Often client side scripts can typically be remade as server side scripts, which will often perform much faster. Documentation Click here for more details Table / Object Details change_request: 25 Look on instance Incident Management Findings Categorization Details Definition: HSD0001022: Excessive Client Scripts Rating: Recommend Description: More than 10 custom Client Scripts on the table is typically unnecessary. Investigate why so much code is being written. Recommendation: Check if the functionality is necessary. Often client side scripts can typically be remade as server side scripts, which will often perform much faster. Documentation Click here for more details Table / Object Details incident: 51 Look on instance Platform Foundation Findings Categorization Details Definition: HSD0001022: Excessive Client Scripts Rating: Recommend Description: More than 10 custom Client Scripts on the table is typically unnecessary. Investigate why so much code is being written. Recommendation: Check if the functionality is necessary. Often client side scripts can typically be remade as server side scripts, which will often perform much faster. Documentation Click here for more details Table / Object Details psp_bulk_share: 33 Look on instance alm_license: 16 Look on instance Categorization Details Definition: HSD0003452: Export limit property glide.excel.export.limit not set as per OOB Rating: Discuss Description: Export limit property glide.excel.export.limit different from out of the box setting (10000), © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 95 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
it should not be changed, unless there is a valid reason for it. Recommendation: Discuss the reason why this property was changed to a different value than the OOB one and revert back from OOB value. You can delete this property from sys_property table, and it will load the hardcoded value on the platform code. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.excel.export.limit. 20000 Look on instance Categorization Details Definition: HSD0004897: Set the maximum display size for journal fields Rating: Recommend Description: When a journal field exceeds the length set in this property, the instance shows a preview of the journal field instead of the field's entire contents. The preview includes a Show All button to display the rest of the field's contents. Recommendation: Consider reverting the system property (max_journal_list_size) to the default value of 10. This will limit the amount of data from these fields that is loaded into system memory. Documentation Click here for more details Table / Object Details : max_journal_list_size Look on instance Categorization Details Definition: HSD0001049: Avoid Global UI Scripts Rating: Recommend Description: Global UI scripts are loaded on every single page/form in ServiceNow even if the code within them is not called. Recommendation: Make the UI Script non-global, and include the UI Script on the appropriate page by referencing the script as needed Documentation Click here for more details Table / Object Details UI Script [sys_ui_script]: PIWIK Tracking Code Look on instance UI Script [sys_ui_script]: BroadcastChannel Look on instance UI Script [sys_ui_script]: Service Portal Catalog Checkout Redirect Look on instance UI Script [sys_ui_script]: Hide Filters Look on instance Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 96 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0001085: LDAP Server definition should limit attributes retrieved Rating: Recommend Description: By default, the system loads all of the attributes for each object that it has permission to read from your LDAP server. Using the Attributes field, you can specify and thereby limit the attributes the LDAP query returns. Using this approach for large LDAP imports can greatly improve the speed of those imports. Recommendation: Consider using the attributes property to limit retrieved LDAP fields to those that are used in the transform (map and scripts). See link for details. Documentation Click here for more details Table / Object Details LDAP Server [ldap_server_config]: LDAPACNMANACCSServer Look on instance LDAP Server [ldap_server_config]: AccentureLDAPAMRDC Look on instance Categorization Details Definition: HSD0001124: Index Suggestions for Slow Queries should be reviewed Rating: Discuss Description: The Index Suggestion Engine generates index suggestions for slow queries. Recommendation: Review index suggestions and create new indexes based on the recommendations: - Index Suggestions should be reviewed and the appropriate action should be taken. - The Slow Query log should be reviewed, and the Index Suggestion Engine be utilized. Documentation Click here for more details Table / Object Details sys_index_suggestion: There were no Index Suggestions created in the last 30 days. However, there are currently 2333 slow queries that regularly run for more than a second, these should be reviewed regulary. Use the Index Suggestion Engine to optimize Slow Queries. Look on instance Categorization Details Definition: HSD0002402: Check Table Rotations against OOTB version for the same version Rating: Recommend Description: Compare the OOTB records (Duration, Rotations, and Type) against the client instance. Reference(s): https://docs.servicenow.com/bundle/london-servicenow- platform/page/administer/platform-performance/concept/c_TableRotation.html Recommendation: Contact ServiceNow Customer Support and request that they examine your table rotation configuration. Documentation Click here for more details Table / Object Details sys_table_rotation: Custom Finding Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 97 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0003448: Export limit property glide.xml.export.limit not set as per OOB Rating: Discuss Description: Export limit property glide.xml.export.limit different from out of the box setting (10000), it should not be changed, unless there is a valid reason for it. Recommendation: Discuss the reason why this property was changed to a different value than the OOB one and revert back from OOB value. You can delete this property from the sys_property table, and it will load the hardcoded value on the platform code. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.xml.export.limit. 20000 Look on instance Categorization Details Definition: HSD0001235: Avoid Dynamic JEXL Expressions in an Evaluate Rating: Recommend Description: When writing Jelly code, avoid using dynamic JEXL expressions inside the Jelly tag (or <g2:evaluate> for phase two). While the code appears to work, it affects a memory resource (called PermGen) in the Java Virtual Machine, which can lead to performance issues and even system outages over time. The exception to using JEXL expressions inside <g:evaluate> tags is with static values, including: ${AMP}\, ${AND}, ${GT}, ${LT}, and ${SP} (and their phase two counterparts: $[AMP], $[AND], and so on). Recommendation: A better way to use Jelly variables inside <g:evaluate> tags is to include the attribute jelly="true", then reference a copy of the variable with the jelly prefix. For example, instead of '${jvar_my_variable}', consider using jelly.jvar_my_variable. Documentation Click here for more details Table / Object Details Macro [sys_ui_macro]: interactive_date_filter. Found on lines 20, 22, 30, 33, 38 Look on instance UI Page [sys_ui_page]: u_seibel_AD_PendingReason. Found on line 29 Look on instance UI Page [sys_ui_page]: u_siebel_ASKHR_PendingReason. Found on line 29 Look on instance UI Page [sys_ui_page]: u_seibel_TE_PendingReason. Found on line 29 Look on instance Categorization Details Definition: HSD0003461: System properties modified excessively Rating: Discuss Description: When a system property is modified, the platform performs a cache flush which results in the cache being rebuilt. While the cache is being rebuilt, users could experience a temporary performance degradation. An excessive number of system property updates will cause cache flushes and in turn, users will experience temporary performance degradation. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 98 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Investigate why these system properties are being modified frequently and whether you can choose to set Ignore Cache. Documentation Click here for more details Table / Object Details System Property [sys_properties]: System property 'glide.authenticate.sso.redirect.idp' has been updated 47 times and within the last 7 days. [object Object] Look on instance System Property [sys_properties]: System property 'glide.email.smtp.active' has been updated 37 times and within the last 7 days. [object Object] Look on instance Categorization Details Definition: HSD0001413: Run SLAs Business Rule Executed Synchronously Rating: Recommend Description: SLA processing runs asynchronously. For example, you can run this for performance reasons, such as to avoid delays when a user saves a new incident record. While the SLA engine is running asynchronously, there can be a short delay before the Task SLA records are available after updating a Task. Refresh the form to see the updated Task SLAs. Use synchronous processing to get the best user experience. Asynchronous processing mode is used only when there a performance issues. Recommendation: If performance issues related to SLA calculations, set the processing to Asynchronous. 'com.snc.sla.engine.async' set to true. Documentation Click here for more details Table / Object Details : Custom Finding Look on instance Categorization Details Definition: HSD0004352: Scheduled Jobs that run longer than their recurrence interval Rating: Act Description: If a scheduled job runs longer than the recurrence interval this can result in poor platform performance. If the runtime is more than twice the interval time this will result in an accumulation of jobs over time and slowing down the system. Recommendation: Investigate if the interval can be extended or if the job can be optimized (e.g. delta jobs instead of full jobs). Go to System Definition > Scheduled Jobs to change the interval. Documentation Click here for more details Table / Object Details syslog_transaction: JOB: [AIA Datalake] Send Real-time Records [c Look on instance syslog_transaction: JOB: [AIA Datalake] Send Real-time Records [0 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 99 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0004726: Debugger should not be used in client scripts Rating: Recommend Description: The debugger statement is used to tell the executing JavaScript environment to stop execution and start up a debugger at the current point in the code. This has fallen out of favor as a good practice with the advent of modern debugging and development tools. Production code should definitely not contain debugger, as it will cause the browser to stop executing code and open an appropriate debugger. Recommendation: The debugger statement is used to tell the executing JavaScript environment to stop execution and start up a debugger at the current point in the code. Debugger will cause the browser to stop executing code and open an appropriate debugger. Documentation Click here for more details Table / Object Details Catalog Client Scripts [sys_script_client]: acn_ci_efax_fax_account. 5 Look on instance Catalog Client Scripts [sys_script_client]: ITSM_worksched_mandatory. 2 Look on instance Catalog Client Scripts [sys_script_client]: MacEnablementInitialized. 237 Look on instance Categorization Details Definition: HSD0001627: Do not query audit log in your custom integrations and code. Rating: Recommend Description: The audit log is typically very large and inefficient queries will cause performance issues. Recommendation: Determine if querying the audit log is strictly necessary, and remove as appropriate. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: EAMSAMSurrenderLicense. Script:Found on line 564 Look on instance Script Include [sys_script_include]: PerspectiumJournalField. Script:Found on line 14 Look on instance Categorization Details Definition: HSD0003437: Setting default related list loading Rating: Act Description: Setting Related List Loading, allows for a system-wide control on how related lists are loaded on forms. Recommendation: Set a systemwide default by creating a record in sys_user_preference with name = 'glide.ui.related_list_timing' and system = 1 (=true), and value = <default | deferred | ondemand | false>. default = With the Form deferred = After the Form loads ondemand = On Demand false = No loading Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 100 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details sys_user_preference: glide.ui.related_list_timing Look on instance Categorization Details Definition: HSD0001632: Long running (slow) scripts Rating: Recommend Description: The instance detects scripts that take a long time to execute and records them in the sys_script_pattern table. You can access the table by navigating to System Diagnosis > Stats > Slow Scripts. Recommendation: This script has been identified as slow running. It should be evaluated for reasons why, and optimizations made as appropriate. Documentation Click here for more details Table / Object Details Slow Scripts [sys_script_pattern]: sys_script:gvdr_supportPOC_affectedCI Look on instance Slow Scripts [sys_script_pattern]: sys_transform_script:onBefore Look on instance Slow Scripts [sys_script_pattern]: sys_script:update BGC Tasks Look on instance Slow Scripts [sys_script_pattern]: sys_script:dim_inv_fa_update_assignTo Look on instance Categorization Details Definition: HSD0003451: Export limit property glide.xlsx.export.limit not set as per OOB Rating: Discuss Description: Export limit property glide.xlsx.export.limit different from out of the box setting (10000), it should not be changed, unless there is a valid reason for it. Recommendation: Discuss the reason why this property was changed to a different value than the OOB one and revert back from OOB value. You can delete this property from sys_property table, and it will load the hardcoded value on the platform code. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.xlsx.export.limit. 20000 Look on instance Acn Dir Findings Categorization Details Definition: HSD0002909: Do not use nested GlideRecord queries Rating: Recommend Description: This type of scenario is reducing performance a lot. Moreover, it can be easily detected and, © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 101 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
as shown in the provided documentation, it is quite easy to fix. It is therefore a must fix as it easily enhances performance. This definition detects if a GlideRecord.next() is present in the while loop's condition and if there is at least one GlideRecord.query() inside the while loop's body. Recommendation: Array flattened GlideRecords. Looping once to build the new query that should then be used instead of nesting queries. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: u_siebel_AD_populate_watchlist. 24 Look on instance Categorization Details Definition: HSD0006666: Check if current.update() is used in a business rule Rating: Act Description: Current.update() used in a business rule causes recursive updates and can significantly impact performance. Recommendation: Do not use current.update() in any Business Rules. Using current.update() triggers an additional database operation, which could cause duplicate notifications, recursive loops, etc. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: u_Siebel_AD_copy_attachment_set_info_ind. 12 Look on instance Business Rule [sys_script]: u_Siebel_AD_Build_Scratchpad. 45 Look on instance ACN ESA Findings Categorization Details Definition: HSD0002909: Do not use nested GlideRecord queries Rating: Recommend Description: This type of scenario is reducing performance a lot. Moreover, it can be easily detected and, as shown in the provided documentation, it is quite easy to fix. It is therefore a must fix as it easily enhances performance. This definition detects if a GlideRecord.next() is present in the while loop's condition and if there is at least one GlideRecord.query() inside the while loop's body. Recommendation: Array flattened GlideRecords. Looping once to build the new query that should then be used instead of nesting queries. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: esa_AutoClosedRequest. 5 Look on instance Script Include [sys_script_include]: esa_AutoClosedRequestTest. 6 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 102 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0006666: Check if current.update() is used in a business rule Rating: Act Description: Current.update() used in a business rule causes recursive updates and can significantly impact performance. Recommendation: Do not use current.update() in any Business Rules. Using current.update() triggers an additional database operation, which could cause duplicate notifications, recursive loops, etc. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: esa_changeAssignedToTask. 28 Look on instance ACN Guided Workflow Findings Categorization Details Definition: HSD0002909: Do not use nested GlideRecord queries Rating: Recommend Description: This type of scenario is reducing performance a lot. Moreover, it can be easily detected and, as shown in the provided documentation, it is quite easy to fix. It is therefore a must fix as it easily enhances performance. This definition detects if a GlideRecord.next() is present in the while loop's condition and if there is at least one GlideRecord.query() inside the while loop's body. Recommendation: Array flattened GlideRecords. Looping once to build the new query that should then be used instead of nesting queries. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: dsm_inv_gw_add_template_data. 45 Look on instance Categorization Details Definition: HSD0002154: Don't use $rootScope.$on in a widget's client script. Rating: Recommend Description: $rootScope.$on should only be used in a service. Using event listeners on $rootScope in a widget's client controller script can cause memory leaks if the listeners are not manually destroyed. Every time a widget is loaded, the controller is initialized, and every listener initialized on the $rootScope will not be destroyed with the controller, unless done so manually. Services have no other alternative but to fire events on $rootScope, and the listen for events on $rootScope. This is because services are initialized once across the app and do not have their own scope. It is okay to use $rootScope.$on in a service. Recommendation: Replace event listeners and senders in the widget with a publish/subscribe service to send/receive events, or manually destroy the listener. Do not use $rootScope.$on in a widget's client script directly without assigning a variable to it first and destroying the © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 103 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
listener. Documentation Click here for more details Table / Object Details Widget [sp_widget]: Guided Workflow Context. Found 2 instance(s) of issue in client controller. Look on instance Widget [sp_widget]: Guided WF Catalog Item iFrame Renderer. Found 2 instance(s) of issue in client controller. Look on instance Widget [sp_widget]: Guided Workflow Flow Formatter. Found 2 instance(s) of issue in client controller. Look on instance Widget [sp_widget]: Guided Workflow Item Container. Found 4 instance(s) of issue in client controller. Look on instance Categorization Details Definition: HSD0004726: Debugger should not be used in client scripts Rating: Recommend Description: The debugger statement is used to tell the executing JavaScript environment to stop execution and start up a debugger at the current point in the code. This has fallen out of favor as a good practice with the advent of modern debugging and development tools. Production code should definitely not contain debugger, as it will cause the browser to stop executing code and open an appropriate debugger. Recommendation: The debugger statement is used to tell the executing JavaScript environment to stop execution and start up a debugger at the current point in the code. Debugger will cause the browser to stop executing code and open an appropriate debugger. Documentation Click here for more details Table / Object Details Widget Angular Provider [sp_angular_provider]: acnGwDataService. 42 Look on instance Categorization Details Definition: HSD0002067: Don't use $rootScope.$broadcast in widgets Rating: Recommend Description: Don't use $rootScope.$broadcast in widgets. This can cause performance issues, as the message is sent to all scopes. There are a lot of OOTB findings on this one, a lot of them using the sp.update.breadcrumbs event. Be careful when communicating to customer, particularly when a cloned widget has been used. Recommendation: Replace $rootScope.$broadcast with $rootScope.$emit, $scope.$emit or $scope.$broadcast method if appropriate. Better still, use a publush/subscribe service, and move the event listeners and senders there. Documentation Click here for more details Table / Object Details Widget [sp_widget]: Guided Workflow Transactions List. Client controller:Found on line 244 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 104 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Widget [sp_widget]: Guided WF Catalog Item iFrame Renderer. Client controller:Found on line 118 Look on instance Widget [sp_widget]: External Managed GW Navigation. Client controller:Found on line 7 Look on instance Widget [sp_widget]: Guided Workflow Test. Client controller:Found on lines 6, 11 and 16 Look on instance ACN SAC Findings Categorization Details Definition: HSD0002909: Do not use nested GlideRecord queries Rating: Recommend Description: This type of scenario is reducing performance a lot. Moreover, it can be easily detected and, as shown in the provided documentation, it is quite easy to fix. It is therefore a must fix as it easily enhances performance. This definition detects if a GlideRecord.next() is present in the while loop's condition and if there is at least one GlideRecord.query() inside the while loop's body. Recommendation: Array flattened GlideRecords. Looping once to build the new query that should then be used instead of nesting queries. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: SACUtility. 269 Look on instance Categorization Details Definition: HSD0001358: Server-side code should not use GlideRecord.getRowCount() to count records Rating: Recommend Description: The GlideRecord.getRowCount() works by getting the whole result set without using the build-in arithmetic functions of the database. GlideAggregate does use the database, therefore is often drastically faster. The exception to this recommendation is if you intend to loop through the records and process them anyway. Recommendation: Replace GlideRecord with GlideAggregate and a 'COUNT' aggregate to improve performance. This could make a large impact when working on tables with a high record count Documentation Click here for more details Table / Object Details Scripted REST Resource [sys_ws_operation]: getSoftwareADPermissions. Script:Found on line 37 Look on instance Script Include [sys_script_include]: SACV2_Utils. Script:Found on lines 819 and 1143 Look on instance Widget [sp_widget]: SAC Search box. Server script:Found on line 45 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 105 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001552: Avoid 2-way AngularJS bindings {{options.myVar}} for the non-dynamic options variables, use one-way instead {{::options.myVar}} Rating: Recommend Description: The options object is not dynamic and should use one-way bindings. Recommendation: Update {{options.value}} in the template to {{::options.value}} if the values don't change once the page is loaded. Documentation Click here for more details Table / Object Details Widget [sp_widget]: SAC Catalog Item V2. Body HTML template:Found on lines 36, 87 and 154. Found on lines 21, 23 and 24 Look on instance Widget [sp_widget]: SAC Search Home Widget. Body HTML template:Found on lines 2 and 4. Found on lines 2, 4 and 7 Look on instance Reporting Findings Categorization Details Definition: HSD0001034: Reports with very long execution times Rating: Recommend Description: Reports which take a long time to execute might run with inefficient filter conditions and perform operations on large data sets. Recommendation: Investigate Report Statistics for long running reports and review conditions used in the longest running queries. Remove inefficient queries using "is one of" or "contains"/"does not contain" and replace them with more efficient conditions like "starts with"/"ends with". Documentation Click here for more details Table / Object Details report_stats: You have 7632 reports running longer on average as 10000 milliseconds. Look on instance Service Portal Designer Findings Categorization Details Definition: HSD0002607: Enable pagination for search sources Rating: Recommend Description: Pagination should be used to improve Service Portal search performance. Recommendation: Limit the number of results that a search source displays at one time to improve performance. End users can load more results as needed. Documentation Click here for more details Table / Object Details Search Source [sp_search_source]: DSM Ticket Portal Source Look on instance Search Source DSM Search Source © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 106 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[sp_search_source]: Look on instance Search Source [sp_search_source]: NIKE Global Search Source Look on instance Search Source [sp_search_source]: NIKE Knowledge Bases Look on instance ACN NDDO Findings Categorization Details Definition: HSD0001126: Unnecessary dot walking to sys_id from current object Rating: Recommend Description: Reference fields already store the Sys ID of the referenced record. Using gr.fieldname.sys_id is a dot-walk and instructs the platform to perform another query only to return the same value. This is an unnecessary overhead. Recommendation: Reference fields already store the Sys ID of the referenced record. Using gr.fieldname.sys_id is a dot-walk and instructs the platform to perform another query only to return the same value. This is an unnecessary overhead. Call the field as normal. For example, gr.getValue('reference_field'). Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: paloAlto_ApprovalEmail_btn. Script:Found on line 4 Look on instance ACN WPA Findings Categorization Details Definition: HSD0001126: Unnecessary dot walking to sys_id from current object Rating: Recommend Description: Reference fields already store the Sys ID of the referenced record. Using gr.fieldname.sys_id is a dot-walk and instructs the platform to perform another query only to return the same value. This is an unnecessary overhead. Recommendation: Reference fields already store the Sys ID of the referenced record. Using gr.fieldname.sys_id is a dot-walk and instructs the platform to perform another query only to return the same value. This is an unnecessary overhead. Call the field as normal. For example, gr.getValue('reference_field'). Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: WPA_addDetails. Script:Found on line 95 Look on instance Categorization Details Definition: HSD0001128: Client-side code should not use synchronous AJAX methods Rating: Recommend Description: Code that uses synchronous AJAX feels very slow. It is detrimental to the user experience. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 107 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: For data that can change during the user experience, replace g_form.getReference with GlideAjax, a callback function, and a custom function in a Script Include that returns only the needed information. For data that remains the same after the form loads and can be determined before the form loads, replace g_form.getReference with a Display Business Rule and g_scratchpad. If using getXMLWait, replace with getXML and a callback function. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: WPA Preview document dialog. Client script:Found on line 101 Look on instance ACN_ASB Findings Categorization Details Definition: HSD0001126: Unnecessary dot walking to sys_id from current object Rating: Recommend Description: Reference fields already store the Sys ID of the referenced record. Using gr.fieldname.sys_id is a dot-walk and instructs the platform to perform another query only to return the same value. This is an unnecessary overhead. Recommendation: Reference fields already store the Sys ID of the referenced record. Using gr.fieldname.sys_id is a dot-walk and instructs the platform to perform another query only to return the same value. This is an unnecessary overhead. Call the field as normal. For example, gr.getValue('reference_field'). Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: acn_asb_email_notif_pending_body. Script:Found on line 16 Look on instance Email Script [sys_script_email]: acn_asb_email_notif_approved_body. Script:Found on line 93 Look on instance Email Script [sys_script_email]: acn_asb_email_notif_reject_body. Script:Found on line 91 Look on instance Categorization Details Definition: HSD0001190: Transform map coalesces on non-indexed field(s) Rating: Recommend Description: Transform map coalesces on non-indexed field(s). Coalesce field(s) should be indexed to prevent performance issues. Recommendation: Coalescing on non-indexed fields with a large amount of data may cause transforms to slow down. If possible, you should coalesce on a field that is unique and already indexed. Documentation Click here for more details Table / Object Details Table Transform Map [sys_transform_map]: Ben Org Import Table Look on instance Table Transform Map [sys_transform_map]: profit_centers_transform_map Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 108 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001552: Avoid 2-way AngularJS bindings {{options.myVar}} for the non-dynamic options variables, use one-way instead {{::options.myVar}} Rating: Recommend Description: The options object is not dynamic and should use one-way bindings. Recommendation: Update {{options.value}} in the template to {{::options.value}} if the values don't change once the page is loaded. Documentation Click here for more details Table / Object Details Widget [sp_widget]: Copy of Ticket Conversations. Body HTML template:Found on lines 5 and 139 Look on instance Widget [sp_widget]: ASB Dashboard Activity Log. Body HTML template:Found on lines 5 and 139 Look on instance Widget [sp_widget]: ASB Open Tickets Table. Body HTML template:Found on lines 1 and 11. Found on lines 2, 11, 12, 13, 28 and 60 Look on instance Categorization Details Definition: HSD0001623: Read ACLs (Security rules) should not have GlideRecord/GlideAggregate in script Rating: Act Description: Read ACLs are frequently executed. Having complex database lookups can harm performance. Recommendation: Avoid database lookups in Access Control rules, as this can significantly impact performance. Documentation Click here for more details Table / Object Details Access Control [sys_security_acl]: x_amspi_acn_asb_request. Script:Found on lines 13, 49 and 58 Look on instance ACN_PCHW_GPRT Findings Categorization Details Definition: HSD0001128: Client-side code should not use synchronous AJAX methods Rating: Recommend Description: Code that uses synchronous AJAX feels very slow. It is detrimental to the user experience. Recommendation: For data that can change during the user experience, replace g_form.getReference with GlideAjax, a callback function, and a custom function in a Script Include that returns only the needed information. For data that remains the same after the form loads and can be determined before the form loads, replace g_form.getReference with a Display Business Rule and g_scratchpad. If using getXMLWait, replace with getXML and a callback function. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 109 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details UI Page [sys_ui_page]: pchw_gprt_deactivate_invitation_modal. Client script:Found on line 10 Look on instance UI Page [sys_ui_page]: pchw_gprt_programC_excludeUser_modal. Client script:Found on line 14 Look on instance UI Page [sys_ui_page]: pchw_gprt_programC_addSelected_modal. Client script:Found on line 14 Look on instance UI Page [sys_ui_page]: pchw_gprt_programC_sendInvitation_modal. Client script:Found on line 16 Look on instance Categorization Details Definition: HSD0001347: Client-side code should not use GlideRecord Rating: Discuss Description: The client side GlideRecord object is often inefficent, because it returns lots of unecessary data. GlideRecord and g_form.getReference are both involved. Recommendation: Use client data as much as possible to eliminate the need for time-consuming server lookups. The top ways to get information from the server are g_scratchpad, and asynchronous GlideAjax lookup. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: pchw_gprt_deactivate_invitation_modal. Client script:Found on line 26 Look on instance AEE Ideas Findings Categorization Details Definition: HSD0001190: Transform map coalesces on non-indexed field(s) Rating: Recommend Description: Transform map coalesces on non-indexed field(s). Coalesce field(s) should be indexed to prevent performance issues. Recommendation: Coalescing on non-indexed fields with a large amount of data may cause transforms to slow down. If possible, you should coalesce on a field that is unique and already indexed. Documentation Click here for more details Table / Object Details Table Transform Map [sys_transform_map]: AEE Idea Implementation Transform Map Look on instance APIs and Integration Tools Findings Categorization Details Definition: HSD0001190: Transform map coalesces on non-indexed field(s) Rating: Recommend Description: Transform map coalesces on non-indexed field(s). Coalesce field(s) should be indexed to © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 110 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
prevent performance issues. Recommendation: Coalescing on non-indexed fields with a large amount of data may cause transforms to slow down. If possible, you should coalesce on a field that is unique and already indexed. Documentation Click here for more details Table / Object Details Table Transform Map [sys_transform_map]: inactive_users Look on instance Table Transform Map [sys_transform_map]: akn article category map Look on instance Categorization Details Definition: HSD0001268: Fields used to coalesce in a Table Transform Maps should be indexed Rating: Recommend Description: Importing data is system intensive. Coalesced fields should have indexes on to improve performance. Recommendation: When possible, coalesce on a field that is unique and indexed. Use the options in the transform map to add an index if necessary. Documentation Click here for more details Table / Object Details Field Map [sys_transform_entry]: tm_mrdr_costcenterhierarchy_delta: u_hierarchycd Look on instance Field Map [sys_transform_entry]: ACNMRDRRoleValidation: u_rolecd Look on instance Field Map [sys_transform_entry]: ACNMRDRXWorkForceCareerLevel: u_xworkforcecareerlevelcd Look on instance Field Map [sys_transform_entry]: EAM BuyNow PO Line Item: u_pol_line Look on instance Categorization Details Definition: HSD0008013: Check for scheduled imports running at the same time. Rating: Act Description: Multiple imports scheduled to run at the same time can negatively impact performance. Recommendation: Do not schedule multiple imports at the same time. Running multiple imports at the same time may negatively impact performance or cause an instance outage. Documentation Click here for more details Table / Object Details Scheduled Data Import [scheduled_import_set]: ACNMRDRProfitCenterHierarchyUnfolded Look on instance Scheduled Data Import [scheduled_import_set]: DPF_SocSiteId_Data Look on instance Scheduled Data Import ACNMRDRPplHier © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 111 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[scheduled_import_set]: Look on instance Scheduled Data Import [scheduled_import_set]: DSRM Orchestration PDC Look on instance Categorization Details Definition: HSD0001365: LDAP Server record does not use attributes field Rating: Recommend Description: LDAP Server record does not use attributes field. Recommendation: Specify the attributes included in LDAP server queries using the LDAP server Attributes field. This can enhance performance as well as security. Documentation Click here for more details Table / Object Details LDAP Server [ldap_server_config]: LDAPACNMANACCSServer Look on instance LDAP Server [ldap_server_config]: AccentureLDAPAMRDC Look on instance Categorization Details Definition: HSD0001490: Business rules firing outbound SOAP/REST should be async Rating: Recommend Description: outbound SOAP/REST fired by before/after business rule waits untill gets response from outbound web services. Recommendation: When using web service calls within Business Rules delays can be encountered as it is waiting for the response. It is recommended that for this use case business rules should be set to asynchronous as to reduce performance impact and unnecessary waiting. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: u_Scoped_ImpersonateUserToEncryptAttach Look on instance Categorization Details Definition: HSD0001546: Table Transform Maps generally do not need "Run business rules" enabled Rating: Discuss Description: This option may cause the transform to take longer than expected, or cause the instance to slow down. Recommendation: Unless you need business rules to run during the transform, un-check the 'Run business rules' checkbox on the Table Transform Map when transforming large amounts of data (or high volume data). Documentation Click here for more details Table / Object Details Table Transform Map EAM SAP Scrap Invoice ZF127 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 112 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[sys_transform_map]: Look on instance Table Transform Map [sys_transform_map]: ACNMRDRJob Look on instance Table Transform Map [sys_transform_map]: ds_dsrm_vlan_ticketDetail_transformMap Look on instance Table Transform Map [sys_transform_map]: tm_mrdr_contract Look on instance Categorization Details Definition: HSD0001554: JDBC Data Sources should have the "Use last run datetime" option checked Rating: Act Description: Repeatedly importing data that has not changed leads to many skipped rows and unnecessarily bounds system resources. Recommendation: Ensure that each import is not importing all records every time by using the 'Use Last Run Datetime' option. If you are running a JDBC import, use the last run datetime option in your import set Data Source. For a type of File import, be sure that whatever is generating your files is only adding data that is new, or has been changed. Documentation Click here for more details Table / Object Details Data Source [sys_data_source]: ds_dsrm_jdbc_orchestration_pdc_test Look on instance Data Source [sys_data_source]: ACNMRDRFloorFeed Look on instance Data Source [sys_data_source]: ACNMRDRPeople adhoc Look on instance Data Source [sys_data_source]: EAM SAP ZA02 Look on instance Major Incident Management Findings Categorization Details Definition: HSD0001235: Avoid Dynamic JEXL Expressions in an Evaluate Rating: Recommend Description: When writing Jelly code, avoid using dynamic JEXL expressions inside the Jelly tag (or <g2:evaluate> for phase two). While the code appears to work, it affects a memory resource (called PermGen) in the Java Virtual Machine, which can lead to performance issues and even system outages over time. The exception to using JEXL expressions inside <g:evaluate> tags is with static values, including: ${AMP}\, ${AND}, ${GT}, ${LT}, and ${SP} (and their phase two counterparts: $[AMP], $[AND], and so on). Recommendation: A better way to use Jelly variables inside <g:evaluate> tags is to include the attribute jelly="true", then reference a copy of the variable with the jelly prefix. For example, instead of '${jvar_my_variable}', consider using jelly.jvar_my_variable. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 113 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Object: UI Page [sys_ui_page] Categorization Details Definition: HSD0008070: Synchronous outbound calls in should be carefully used in Business Rules and UI Actions Rating: Act Description: Business rules and UI actions that call a remote web service should send the request asynchronously. This allows the user to continue their work without having to wait for a response from the remote web service provider. Recommendation: When using RESTMessageV2 or SOAPMessageV2 in a business rule or UI action, use executeAsync() instead of execute(). Outbound web service requests sent through a MID Server are always executed asynchronously. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: MIM_TFAO_Integration_Update Look on instance Categorization Details Definition: HSD0001490: Business rules firing outbound SOAP/REST should be async Rating: Recommend Description: outbound SOAP/REST fired by before/after business rule waits untill gets response from outbound web services. Recommendation: When using web service calls within Business Rules delays can be encountered as it is waiting for the response. It is recommended that for this use case business rules should be set to asynchronous as to reduce performance impact and unnecessary waiting. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: MIM_update_Circles Look on instance Business Rule [sys_script]: MIM_TFAO_Integration_Update Look on instance BGC Fortify Findings Categorization Details Definition: HSD0001281: getMessage() called in Client Script without preloading message key Rating: Act Description: getMessage used in a client script needs to have the message key added to the Messages field on the script record. Recommendation: Use the messages field on the client script record to load the message key being used in getMessage(). Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 114 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Client Script [sys_script_client]: BGC Validat Task Closur Befo Req Closure. Messages: BGC Request State Message for Meet Standard, BGC Request State Message for Doesnot Meet St Look on instance Client Script [sys_script_client]: BGC state FADV task. Messages: BGC Task State Message, BGC Task State Message Look on instance Categorization Details Definition: HSD0001347: Client-side code should not use GlideRecord Rating: Discuss Description: The client side GlideRecord object is often inefficent, because it returns lots of unecessary data. GlideRecord and g_form.getReference are both involved. Recommendation: Use client data as much as possible to eliminate the need for time-consuming server lookups. The top ways to get information from the server are g_scratchpad, and asynchronous GlideAjax lookup. Documentation Click here for more details Table / Object Details Catalog Client Scripts [catalog_script_client]: Check if the Request is present. Script:Found on line 49 Look on instance Categorization Details Definition: HSD0008070: Synchronous outbound calls in should be carefully used in Business Rules and UI Actions Rating: Act Description: Business rules and UI actions that call a remote web service should send the request asynchronously. This allows the user to continue their work without having to wait for a response from the remote web service provider. Recommendation: When using RESTMessageV2 or SOAPMessageV2 in a business rule or UI action, use executeAsync() instead of execute(). Outbound web service requests sent through a MID Server are always executed asynchronously. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Generate Attestation Memo Look on instance Categorization Details Definition: HSD0004365: Cache flushed as part of scripts Rating: Act Description: If a cache flush is triggered as part of a non-ootb script execution this will require the platform to rebuild the cache before returning to its BAU state. This activity has a significant performance impact. Recommendation: Remove any cache flush triggers unless necessary. Recommended is only the pre-defined © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 115 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
cache flush actions that are built into out the box solutions. Do not make use of gs.cacheFlush() in scripts. Care should be taken when setting system properties (sys_properties) using this method as it causes a system-wide cache flush. Each flush can cause system degradation while the caches rebuild. If a value must be updated often, it should not be stored as a system property. In general, you should only place values in the sys_properties table that do not frequently change. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: BGCIntegrationUtils. 1454 - 1505 Look on instance E2E Findings Categorization Details Definition: HSD0001281: getMessage() called in Client Script without preloading message key Rating: Act Description: getMessage used in a client script needs to have the message key added to the Messages field on the script record. Recommendation: Use the messages field on the client script record to load the message key being used in getMessage(). Documentation Click here for more details Table / Object Details Catalog Client Scripts [sys_script_client]: onSubmitAttachmentsCatMandatory. Messages: Please attach a copy of the agreement Look on instance Integrations Findings Categorization Details Definition: HSD0004814: The maximum number of redirects the server sends to the client before the soap request is timed out. Rating: Recommend Description: Property Name: glide.soap.max_redirects Specifies the maximum number of redirects the server sends to the client before the soap request is timed out Recommendation: Limit the number of redirects the server sends to the client before the soap request is timed out to less than 20. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.soap.max_redirects Look on instance Categorization Details Definition: HSD0004804: Inactive Integration session timeout settings Rating: Recommend Description: Property Name: glide.integration.session_timeout Length of time, in minutes, that an © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 116 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
inactive integration session is maintained before the session times out. Recommended Value is less than 1 Recommendation: The property should be present in the instance and the recommended value is less than 1. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.integration.session_timeout Look on instance Categorization Details Definition: HSD0004817: SOAP request connection timeout Rating: Recommend Description: Property Name: glide.soap.request_processing_timeout Sets the maximum number of seconds that a SOAP request has to finish processing before the connection times out. This property computes a default value from the value of the property glide.http.timeout divided by 1000. There might be network infrastructure (such as proxy servers) in place that implements a shorter timeout. In this case, a socket timeout may occur unless this property is set to a shorter value. In general, you should set this property to a value several seconds less than the shortest socket inactivity timeout in effect anywhere in the network path between the client application and the ServiceNow instance. Recommendation: In general, you should set this property to a value several seconds less than the shortest socket inactivity timeout in effect anywhere in the network path between the client application and the ServiceNow instance. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.soap.request_processing_timeout Look on instance Categorization Details Definition: HSD0004531: System does not support LDAP password authentication through a MID Server Rating: Act Description: The system does not support LDAP password authentication through a MID Server. An instance must be able to directly connect with an LDAP server to support password authentication.On the LDAP Server record (ldap_server_config) if the field Authentication = true and the LDAP server record is using a mid server it will create unnecessary warning logs in the log table (syslog). Recommendation: When the LDAP server record (ldap_server_config) is using a mid server to communicate to an LDAP Server, the Authetication field should be set to false to ensure Unnecessary warning logs do not fill up the log table (syslog). Documentation Click here for more details Table / Object Details LDAP Server [ldap_server_config]: AccenturePasswordExpiration Look on instance LDAP Server [ldap_server_config]: AccenturePasswordExpiration_secure © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 117 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance LDAP Server [ldap_server_config]: LDAPACNMANACCSServer Look on instance LDAP Server [ldap_server_config]: AccentureLDAPAMRDC Look on instance Categorization Details Definition: HSD0004992: Remote Table Max Data Cache Size Rating: Recommend Description: The out of the box maximum cache size appointed for Remote Tables is 1MB. This definition checks if the customers have increased the limit beyond the recommended 1MB by adding or modifying the 'glide.script.vtable.data_cache.max_data_size' property. Recommendation: The out of the box cache size appointed for Remote Tables is 1MB. It is recommended that customers do not increase the limit beyond the recommended 1MB (1000000) by adding or modifying the 'glide.script.vtable.data_cache.max_data_size' property. Documentation Click here for more details Table / Object Details : glide.script.vtable.data_cache.max_data_size Look on instance Categorization Details Definition: HSD0004997: Remote Table Max Entry Size Rating: Recommend Description: Check if customers increased the max entry size for entries retrieved in remote tables using the 'glide.script.vtable.data_cache.entry_max_data_size'. Larger entries take longer to load and are stored in memory. Default max size is 1MB (1000000) per entry Recommendation: For remote tables data is retrieved through an integration and stored in memory. The default max entry size of records is 1MB, it is not recommended to increase this as larger files will take longer to retrieve and it also means a larger portion of memory is consumed to cache the data. This can lead to performance issues. Documentation Click here for more details Table / Object Details : glide.script.vtable.data_cache.entry_max_data_size Look on instance ACN BCTAPP Findings Categorization Details Definition: HSD0001358: Server-side code should not use GlideRecord.getRowCount() to count records Rating: Recommend Description: The GlideRecord.getRowCount() works by getting the whole result set without using the build-in arithmetic functions of the database. GlideAggregate does use the database, therefore is often drastically faster. The exception to this recommendation is if you intend © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 118 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
to loop through the records and process them anyway. Recommendation: Replace GlideRecord with GlideAggregate and a 'COUNT' aggregate to improve performance. This could make a large impact when working on tables with a high record count Documentation Click here for more details Table / Object Details Scheduled Script Execution [sysauto_script]: acn_ptat_fix_stuck_workflow_task. Run this script:Found on lines 5 and 21 Look on instance Categorization Details Definition: HSD0001561: Client Scripts should check for isLoading and return Rating: Discuss Description: Try to minimise the amount of scripts that run on load. Recommendation: The isLoading flag is the simplest way to prevent unnecessary code from taking up browser time in onChange scripts. The isLoading flag should be used at the beginning of any script that is not required to run when the form is loading. Add "if (isLoading) return;" as the first statement of the onChange function. Documentation Click here for more details Table / Object Details Catalog Client Scripts [sys_script_client]: BCTAPP : Auto Set Home Office Country Look on instance ACN Former Employee Findings Categorization Details Definition: HSD0001358: Server-side code should not use GlideRecord.getRowCount() to count records Rating: Recommend Description: The GlideRecord.getRowCount() works by getting the whole result set without using the build-in arithmetic functions of the database. GlideAggregate does use the database, therefore is often drastically faster. The exception to this recommendation is if you intend to loop through the records and process them anyway. Recommendation: Replace GlideRecord with GlideAggregate and a 'COUNT' aggregate to improve performance. This could make a large impact when working on tables with a high record count Documentation Click here for more details Table / Object Details Scheduled Script Execution [sysauto_script]: Daily Report For Workday Ops Team - Address Update. Condition:Found on line 13 Look on instance xMatters Actionable IT Alerts Findings Categorization Details Definition: HSD0003461: System properties modified excessively Rating: Discuss © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 119 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: When a system property is modified, the platform performs a cache flush which results in the cache being rebuilt. While the cache is being rebuilt, users could experience a temporary performance degradation. An excessive number of system property updates will cause cache flushes and in turn, users will experience temporary performance degradation. Recommendation: Investigate why these system properties are being modified frequently and whether you can choose to set Ignore Cache. Documentation Click here for more details Table / Object Details System Property [sys_properties]: System property 'x_xma_xmatters.xmatters.reb.incident.individual.responses' has been updated 44 times and within the last 7 days. [object Object] Look on instance System Property [sys_properties]: System property 'x_xma_xmatters.xmatters.reb.incident.group.responses' has been updated 45 times and within the last 7 days. [object Object] Look on instance System Property [sys_properties]: System property 'x_xma_xmatters.xmatters.reb.hostname' has been updated 46 times and within the last 7 days. [object Object] Look on instance Biz Approval Findings Categorization Details Definition: HSD0001452: GlideRecord in calculated fields Rating: Discuss Description: GlideRecord should be avoided in a calculated field Recommendation: GlideRecord queries in a calculated field may cause performance issues since the script is run very frequently. Instead, consider using Function Fields Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Attachments Look on instance CDP Findings Categorization Details Definition: HSD0001452: GlideRecord in calculated fields Rating: Discuss Description: GlideRecord should be avoided in a calculated field Recommendation: GlideRecord queries in a calculated field may cause performance issues since the script is run very frequently. Instead, consider using Function Fields Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Operating Group Look on instance Dictionary Entry [sys_dictionary]: Operating Group © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 120 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Categorization Details Definition: HSD0004365: Cache flushed as part of scripts Rating: Act Description: If a cache flush is triggered as part of a non-ootb script execution this will require the platform to rebuild the cache before returning to its BAU state. This activity has a significant performance impact. Recommendation: Remove any cache flush triggers unless necessary. Recommended is only the pre-defined cache flush actions that are built into out the box solutions. Do not make use of gs.cacheFlush() in scripts. Care should be taken when setting system properties (sys_properties) using this method as it causes a system-wide cache flush. Each flush can cause system degradation while the caches rebuild. If a value must be updated often, it should not be stored as a system property. In general, you should only place values in the sys_properties table that do not frequently change. Documentation Click here for more details Table / Object Details Scheduled Script Execution [sysauto_script]: CDP Luis API Token Refresh. 9 Look on instance Disability Findings Categorization Details Definition: HSD0001452: GlideRecord in calculated fields Rating: Discuss Description: GlideRecord should be avoided in a calculated field Recommendation: GlideRecord queries in a calculated field may cause performance issues since the script is run very frequently. Instead, consider using Function Fields Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: First Name Look on instance Dictionary Entry [sys_dictionary]: Date of Escalation Look on instance Agile Development Findings Categorization Details Definition: HSD0001496: Active workflow context older than 30 days Rating: Recommend Description: Review old workflows in the system which are still active. These are still executing and using system resources. Recommendation: There are active workflows in the system that have been active for more than 30 days. Review the findings and determine why the workflows have not yet terminated. If these © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 121 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
workflows are no longer required, consider cancelling them to free up system resources. Documentation Click here for more details Table / Object Details Workflow Version [wf_workflow_version]: Release Management manual approvals workflow Look on instance ACN AMC Findings Categorization Details Definition: HSD0001561: Client Scripts should check for isLoading and return Rating: Discuss Description: Try to minimise the amount of scripts that run on load. Recommendation: The isLoading flag is the simplest way to prevent unnecessary code from taking up browser time in onChange scripts. The isLoading flag should be used at the beginning of any script that is not required to run when the form is loading. Add "if (isLoading) return;" as the first statement of the onChange function. Documentation Click here for more details Table / Object Details Catalog Client Scripts [sys_script_client]: amc_onChange_SupportType Look on instance Catalog Client Scripts [sys_script_client]: onChange_effortCostVisibility Look on instance Catalog Client Scripts [sys_script_client]: amc_onChange_RequestType Look on instance Catalog Client Scripts [sys_script_client]: amc_onChange_salesValue Look on instance Categorization Details Definition: HSD0006666: Check if current.update() is used in a business rule Rating: Act Description: Current.update() used in a business rule causes recursive updates and can significantly impact performance. Recommendation: Do not use current.update() in any Business Rules. Using current.update() triggers an additional database operation, which could cause duplicate notifications, recursive loops, etc. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Set Request Status to Assigned. 6 Look on instance Business Rule [sys_script]: Set Service Status to Assigned. 5 Look on instance Leave of Absence Findings © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 122 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0004726: Debugger should not be used in client scripts Rating: Recommend Description: The debugger statement is used to tell the executing JavaScript environment to stop execution and start up a debugger at the current point in the code. This has fallen out of favor as a good practice with the advent of modern debugging and development tools. Production code should definitely not contain debugger, as it will cause the browser to stop executing code and open an appropriate debugger. Recommendation: The debugger statement is used to tell the executing JavaScript environment to stop execution and start up a debugger at the current point in the code. Debugger will cause the browser to stop executing code and open an appropriate debugger. Documentation Click here for more details Table / Object Details Widget Angular Provider [sp_angular_provider]: LOAAuthenticationContext. 6 - 10 Look on instance ACN_MOBILECP Findings Categorization Details Definition: HSD0001623: Read ACLs (Security rules) should not have GlideRecord/GlideAggregate in script Rating: Act Description: Read ACLs are frequently executed. Having complex database lookups can harm performance. Recommendation: Avoid database lookups in Access Control rules, as this can significantly impact performance. Documentation Click here for more details Table / Object Details Access Control [sys_security_acl]: x_amspi_acn_mobile_compliance_publishing.opened_by. Script:Found on line 3 Look on instance Access Control [sys_security_acl]: x_amspi_acn_mobile_ext_mobile_compliance_publishing.opened_by. Script:Found on line 3 Look on instance Access Control [sys_security_acl]: x_amspi_acn_mobile_update_mobile_compliance_publishing.opened_by. Script:Found on line 3 Look on instance Access Control [sys_security_acl]: x_amspi_acn_mobile_ext_mobile_compliance_publishing. Script:Found on line 3 Look on instance Service Catalog Findings Categorization Details Definition: HSD0002888: Avoid using gs.sleep on workflow activities Rating: Act © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 123 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Avoid using gs.sleep on any workflow activities. The call to gs.sleep() does not release the session, the workflow will hold on to the thread, and the instance will run out of worker threads for other jobs. Recommendation: Replace calls to gs.sleep with a Workflow Timer activity. This will ensure the workflow will release the thread, freeing up system resources. Documentation Click here for more details Table / Object Details Workflow Version [wf_workflow]: Workflow: "cntSub_dot_com_self_edit_workflow" uses gs.sleep() in activity: "Set value of Actual publish date" Look on instance Workflow Version [wf_workflow]: Workflow: "acn_MS_Project_Activate" uses gs.sleep() in activity: "sleep" Look on instance Workflow Version [wf_workflow]: Workflow: "acn_byoc_dummy_complete" uses gs.sleep() in activity: "Set variables" Look on instance Workflow Version [wf_workflow]: Workflow: "acn_MS_Developer_Tools_Activate" uses gs.sleep() in activity: "Sleep Timer" Look on instance ACN Document Builder Findings Categorization Details Definition: HSD0002067: Don't use $rootScope.$broadcast in widgets Rating: Recommend Description: Don't use $rootScope.$broadcast in widgets. This can cause performance issues, as the message is sent to all scopes. There are a lot of OOTB findings on this one, a lot of them using the sp.update.breadcrumbs event. Be careful when communicating to customer, particularly when a cloned widget has been used. Recommendation: Replace $rootScope.$broadcast with $rootScope.$emit, $scope.$emit or $scope.$broadcast method if appropriate. Better still, use a publush/subscribe service, and move the event listeners and senders there. Documentation Click here for more details Table / Object Details Widget [sp_widget]: Select Document Template. Client controller:Found on line 15 Look on instance Clear Pass Findings Categorization Details Definition: HSD0004365: Cache flushed as part of scripts Rating: Act Description: If a cache flush is triggered as part of a non-ootb script execution this will require the platform to rebuild the cache before returning to its BAU state. This activity has a significant performance impact. Recommendation: Remove any cache flush triggers unless necessary. Recommended is only the pre-defined cache flush actions that are built into out the box solutions. Do not make use of gs.cacheFlush() in scripts. Care should be taken when setting system properties (sys_properties) using this method as it causes a system-wide cache flush. Each flush can © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 124 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
cause system degradation while the caches rebuild. If a value must be updated often, it should not be stored as a system property. In general, you should only place values in the sys_properties table that do not frequently change. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: ClearPassOauthAccessToken. 24 Look on instance Business Rule [sys_script]: Clear Pass Template Link. 8 Look on instance Environment Config Findings Categorization Details Definition: HSD0004365: Cache flushed as part of scripts Rating: Act Description: If a cache flush is triggered as part of a non-ootb script execution this will require the platform to rebuild the cache before returning to its BAU state. This activity has a significant performance impact. Recommendation: Remove any cache flush triggers unless necessary. Recommended is only the pre-defined cache flush actions that are built into out the box solutions. Do not make use of gs.cacheFlush() in scripts. Care should be taken when setting system properties (sys_properties) using this method as it causes a system-wide cache flush. Each flush can cause system degradation while the caches rebuild. If a value must be updated often, it should not be stored as a system property. In general, you should only place values in the sys_properties table that do not frequently change. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: InstanceConfigUtil. 11 - 12 - 13 - 14 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 125 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Security Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 3 1 ACN BCTAPP 1 ACN Document Builder 3 ACN Former Employee 1 ACN GCP 1 ACN Guided Workflow 2 ACN MyLearning 4 ACN NDDO 1 ACN SAC 12 ACN WFH 2 1 ACN WPA 3 ACN_ASB 15 ACN_CBMS 1 ACN_PCHW_GPRT 2 1 AIA Datalake 10 AP20 Real Estate 22 3 APIs and Integration Tools 642 Ask HR 3 Asset Management 1 Audit Tax App 2 BGC Fortify 23 3 Biz Approval 1 Case and Knowledge Management 4 CDP 5 Change Management 1 Clear Pass 12 7 Client Whitelist 1 Complaint Management Tool 29 Custom Application Runtime and Execution 57 Data Privacy 16 Disability 8 E2E 5 Ecosystem Supplier Management Support 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 126 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Employee Data Change 1 2 Enterprise Insight 4 Fac Compliance 6 Fixed Assets 1 1 Flexi Work 4 Full and Final Exit 1 2 Holiday Payout 4 1 Hours That Help 3 1 Integrations 9 Leave of Absence 6 11 Major Incident Management 1 MS Teams Recording Enablement 2 2 My Access 4 Payroll 1 Payroll Uploads 1 Performance Analytics 14 Performance Analytics - Content Pack - Request Management (Requested Item) 2 PIP Probation 3 6 Platform 1 Platform Foundation 1 20 3 Purginator 1 Reporting 1 Request Supplementary Pay 1 RTO Pulse Survey 7 Salesforce Integration 1 Service Portal Designer 407 Source To Pay 4 2 Time Card Management 1 TSEF 2 VA Adoption Insights 1 Virtual Agent Analytics Dashboard 1 Walk-up Experience 3 WS Admin 2 Platform Foundation Findings Categorization Details Definition: HSD0003331: SNC Access Control plugin allows customers to control access by ServiceNow Customer Support Rating: Discuss © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 127 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: The SNC Access Control plugin allows customers to control access by ServiceNow Customer Support to their instances. The default configuration for the ServiceNow platform allows Customer Support to access customer instances through an internal process that creates short-term support credentials. Although all access is audited, some customers prefer to control this access. Recommendation: Activate and configure SNC Access Control as per documentation, to allow for added security of who can access the instance. Documentation Click here for more details Table / Object Details : Custom Finding Look on instance Categorization Details Definition: HSD0004060: Only allow acceptable file extensions to be uploaded during file attachment Rating: Recommend Description: The glide.attachment.extensions property restricts the file extensions that are permissible to upload as attachments. Use this property to improve security by preventing users from uploading harmful files, such as viruses, as attachments. Additionally, this functionality can prevent the use of incompatible file types. For example, Internet Explorer does not support icons in .png format. Note that this property does not restrict files based on the actual file type, but only based on the extension. If no extensions are specified, then all extensions are allowed. However, if any extensions are specified, all unlisted extensions are restricted. Note: This property is prerequisite for '6.5 Upload MIME Type Restriction' as only those extensions specified within this property will be checked for MIME type during upload. Recommendation: Add file extensions that can be uploaded to the instance. For example: xls,xlsx,doc,docx,pdf Documentation Click here for more details Table / Object Details : Custom Finding Look on instance Categorization Details Definition: HSD0004448: Allow Entity Validation with Whitelisting Rating: Recommend Description: This remediation control needs to be enabled to defend against XML External Entity attacks. Recommendation: This remediation control needs to be enabled to defend against XML External Entity attacks. The system property 'glide.stax.whitelist_enabled' allows the processing (using XMLDocument2) of external entities that are whitelisted. Prerequisite: 'glide.xml.entity.whitelist.enabled' set to 'true' & 'glide.xml.entity.whitelist' that defines allowed entity path Documentation Click here for more details Table / Object Details : glide.stax.whitelist_enabled Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 128 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0003041: Convert Inbound Email HTML Rating: Recommend Description: The system displays broken cid (content ID) links in place of images received when glide.email.inbound.convert_html_inline_attachment_references property is to false. Verifies this property is true. This property specifies whether to convert inbound email HTML so email images appear in the email HTML body preview. The format in which the system displays an email image depends on the property setting at the time the email is received, not the current property setting. Recommendation: https://docs.servicenow.com/bundle/london-servicenow- platform/page/administer/reference-pages/concept/c_EmailProperties.html https://docs.servicenow.com/bundle/london-servicenow- platform/page/administer/reference-pages/reference/r_InboundMailConfiguration.html Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.email.inbound.convert_html_inline_attachment_references. true Look on instance Categorization Details Definition: HSD0003385: Restrict Emails by Domain Rating: Recommend Description: Trusts domains when creating users from incoming emails. Specifies the comma-separated list of trusted domains for creating users from incoming emails. By default, an asterisk (*) is used to trust all domains. Specific domains should be provided if it is not required to allow email from every domain. The instance ignores incoming email from other domains unless it is from an existing user's address. The instance will not create guest users from untrusted domains. Recommendation: Restrict domains from which emails would automatically create users. Trusted domains can be entered as a comma separated list in the glide.user.trusted_domain system property. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.user.trusted_domain. * Look on instance Categorization Details Definition: HSD0001354: Upload MIME Type Restriction should be enabled Rating: Recommend Description: This property must be set to activate MIME type checking for uploads . Enables (true) or disables (false) mime type validation for file attachments. File extensions configured via glide.attachment.extensions are checked for MIME type during upload. Check if glide.security.file.mime_type.validation is set to false and recommend set to true Recommendation: Enable Upload MIME Type Restriction © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 129 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.security.file.mime_type.validation. false Look on instance Categorization Details Definition: HSD0004802: All Proccessors of type - SCRIPT must be protected with CSRF Token. Rating: Recommend Description: All Proccessors of type - SCRIPT must be protected with CSRF Token. CSRF Option should be checked for all Active Processors. This Option is to protect the processor from running unless the instance uses a CSRF token. Recommendation: All Proccessors of type - SCRIPT must be protected with CSRF Token. This Option is to protect the processor from running unless the instance uses a CSRF token. Documentation Click here for more details Table / Object Details Processor [sys_processor]: DSM_ExportREQAttachmentsOpenWatchList Look on instance Processor [sys_processor]: PSPSchemaProcessor Look on instance Processor [sys_processor]: OAuthLoginProcessor Look on instance Processor [sys_processor]: x_amspi_stp_CA_ExportICARAttachments_v2 Look on instance Categorization Details Definition: HSD0004442: Disable Entity Expansion Rating: Act Description: This remediation control needs to be enabled to defend against XML Entity Expansion/Billion Laugh attack. If the customization does not require entity expansion, use this property to completely disable the external entity expansion. The XML will complete parsing but will not include any internal or external entities. True: All external entities will attempt resolve/expand subject to glide.stax.whitelist_enabled. False: Blocks all entity resolution/expansion. (Recommended) Recommendation: Set value of the system property 'glide.stax.allow_entity_resolution' to 'false' to defend against XML Entity Expansion/Billion Laugh attack. If the customization does require entity expansion, set this property to 'true' and follow the steps mentioned at https://hi.service- now.com/kb_view.do?sysparm_article=KB0550654#10.4.2.2 External Reference: https://en.wikipedia.org/wiki/Billion_laughs_attack | https://cwe.mitre.org/data/definitions/776.html Documentation Click here for more details Table / Object Details sys_properties: glide.stax.allow_entity_resolution Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 130 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0002959: Disable SQL error messages Rating: Recommend Description: Administrators can create a new system property that prevents raw SQL error messages from rendering on the browser Recommendation: Create the glide.db.loguser system property with a value of 'false'. No sensitive SQL information should be allowed to display as a part of error message on a webpage that could help an attacker. This setting does not impact functionality. Documentation Click here for more details Table / Object Details sys_properties: glide.db.loguser Look on instance Categorization Details Definition: HSD0003030: Enable Privacy on Client-Callable Script Includes Rating: Recommend Description: The glide.script.ccsi.ispublic provides privacy control over client-callable script includes that are accessed by public pages. When this property is set to false, all client-callable script includes are private. This property can be added to provide control over all client callable script includes. Recommendation: Add the "glide.script.ccsi.ispublic" property and set the value to false. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.script.ccsi.ispublic Look on instance Categorization Details Definition: HSD0002569: GlideRecord query on non-existent column should not return all table rows Rating: Recommend Description: When a GlideRecord query on non-existent column (or used in a web service call against a SN table API) the ServiceNow instance returns all table rows System Property: glide.invalid_query.returns_no_rows Controls how invalid GlideRecord queries are handled. When this property is true, invalid queries always return no rows. When this property is false (default), if a query is incorrect, such as by including an invalid field name, the invalid part of the query condition is ignored, and results are based on the valid part of the query. Default = no System Property and defaulting to false It is recommended to add this System Property to your instance and default it to true Recommendation: Describe how to add this System property and set it to true. It controls how invalid GlideRecord queries are handled. When this property is true, invalid queries always return no rows. When this property is false (default), if a query is incorrect, such as by including an invalid field name, the invalid part of the query condition is ignored, and results are based on the valid part of the query. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 131 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.invalid_query.returns_no_rows Look on instance Categorization Details Definition: HSD0004449: Custom Watermarks on notification emails Rating: Discuss Description: Any email notifications that are forwarded from one instance to another might be indistinguishable because they use the same watermark. Unintended emails might get mixed from different instances due to both having the same watermark prefix. Also, to avoid unintentionally triggering events in the wrong instance, create a unique watermark prefix for each instance. By default, the system generates a watermark label at the bottom of each notification email to allow matching incoming emails to existing records. The watermark always includes "Ref:" and a customizable prefix, followed by the auto- numbered identifier of the source record, such as case, problem, or change request. The default prefix is MSG. For example, Ref:MSG3846157. Watermarks are always generated, but you can configure them to: Create a custom watermark prefix for each instance to prevent accidentally triggering events in the wrong instance. Have custom prefix characters after MSG Be hidden globally Be omitted from individual email messages Inbound email actions might not work properly if watermarks are omitted from email notifications. Without a watermark, inbound email messages cannot be associated with the accumulated comments related to the original case, and each subsequent notification that is sent is treated as a new case. Recommendation: Any email notifications that are forwarded from one instance to another might be indistinguishable because they use the same watermark. Unintended emails might get mixed from different instances due to both having the same watermark prefix. Also, to avoid unintentionally triggering events in the wrong instance, create a unique watermark prefix for each instance by adding the system property 'glide.email.prior_watermark_prefix' and change its value. Note: Do not use colons (:) in custom watermark prefixes. Colons are a reserved character and may cause the watermark to be ignored. Documentation Click here for more details Table / Object Details sys_properties: glide.email.prior_watermark_prefix Look on instance Categorization Details Definition: HSD0004820: Specifies the maximum number of recipients the instance can list in the To Rating: Recommend Description: Property Name: glide.email.smtp.max_recipients Specifies the maximum number of recipients the instance can list in the To: line for a single email notification. Notifications that would exceed this limit instead create duplicate email notifications addressed to a subset of the recipient list. Recommendation: Add this property and set the value to less than 100 to not share the email ids between a large number of recipients. Prevents sharing of email addresses in case of issues in query while dynamically population the recipients. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 132 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.email.smtp.max_recipients Look on instance Categorization Details Definition: HSD0001557: Enforce strong passwords Rating: Recommend Description: Ensure that strong passwords are being used to improve isntance security. Recommendation: Enable "Enforce Strong Passwords" installation exit Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.enable.password_policy Look on instance Categorization Details Definition: HSD0001635: Disable Embedded HTML Code property Rating: Discuss Description: Check of a system property (glide.ui.security.allow_codetag) according to ServiceNow instance hardening customer security document Recommendation: Disable the Allow Embedded HTML Code property. There is an associated security risk. If the glide.ui.security.allow_codetag property is set to true, any malicious user can write harmful HTML JS code that may be executed on a different client browser after the journal fields are rendered. ServiceNow Security recommends setting this property to false so that administrators can prevent journal fields from rendering HTML code by disabling support for the [code] tag. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.ui.security.allow_codetag. true Look on instance Custom Application Runtime and Execution Findings Categorization Details Definition: HSD0003079: Unintentional Cross Scope privileges Rating: Recommend Description: Having many Cross Privileges in a custom application, might be an indication that during development these Cross Scope privileges were added unintentionally. Recommendation: Recommendation is to investigate each Cross Scope privilege and identify whether this is really needed as part of the application. If not remove the privilege. Removing privileges might require regression testing to ensure that nothing will break. The extend of testing will depend on the Application size. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 133 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details Custom Application [sys_app]: "Clear Pass" has a large number of Cross Scope privileges - 63 Look on instance Custom Application [sys_app]: "Enterprise Insight" has a large number of Cross Scope privileges - 111 Look on instance Custom Application [sys_app]: "ACN BCTAPP" has a large number of Cross Scope privileges - 28 Look on instance Custom Application [sys_app]: "Hours That Help" has a large number of Cross Scope privileges - 35 Look on instance Asset Management Findings Categorization Details Definition: HSD0001183: Report shared with a specific role which does not exist Rating: Discuss Description: Reports shared with a role which does not exists might lead to unforeseen behaviour. Once a role with this name is created, immediately all the reports are shared with this role. Recommendation: Reports shared with a role which does not exists might lead to unforeseen behaviour, once a role with this name is created and immediately all the reports are shared with this role. Consider removing the role by editing the report and only share the report with valid roles. Documentation Click here for more details Table / Object Details Report [sys_report]: Asset Report, Role: acn_catalog_fullfiller Look on instance Fixed Assets Findings Categorization Details Definition: HSD0001183: Report shared with a specific role which does not exist Rating: Discuss Description: Reports shared with a role which does not exists might lead to unforeseen behaviour. Once a role with this name is created, immediately all the reports are shared with this role. Recommendation: Reports shared with a role which does not exists might lead to unforeseen behaviour, once a role with this name is created and immediately all the reports are shared with this role. Consider removing the role by editing the report and only share the report with valid roles. Documentation Click here for more details Table / Object Details Report [sys_report]: Assigned to me Requests with new customer response, Role: x_amspi_fixd_asset.fa_admin Look on instance Reporting Findings Categorization Details Definition: HSD0001183: Report shared with a specific role which does not exist © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 134 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Discuss Description: Reports shared with a role which does not exists might lead to unforeseen behaviour. Once a role with this name is created, immediately all the reports are shared with this role. Recommendation: Reports shared with a role which does not exists might lead to unforeseen behaviour, once a role with this name is created and immediately all the reports are shared with this role. Consider removing the role by editing the report and only share the report with valid roles. Documentation Click here for more details Table / Object Details Report [sys_report]: TLM Report, Role: acn_catalog_fullfiller Look on instance ACN AMC Findings Categorization Details Definition: HSD0001507: There is a dedicated integration user that runs actions in place of the default admin user Rating: Act Description: internal_integration_user field on user record can be checked, i.e. if any of the integration methods is active and this field is not true of any record should be recorded as finding. However, it may be tricky to check if all the possible integrations are active? Recommendation: Run as user in automated scripts should have internal_integration_user field checked in user record Documentation Click here for more details Table / Object Details Scheduled Script Execution [sysauto]: AMC Check if OPS Request is Complete Look on instance Scheduled Script Execution [sysauto]: AMC Check Due OPS Requests Look on instance Scheduled Script Execution [sysauto]: getAMCMRDR Look on instance Categorization Details Definition: HSD0002016: Server scripts in widgets should use GlideRecordSecure instead of GlideRecord Rating: Recommend Description: The best practice should be that server scripts in widgets should use GlideRecordSecure rather than GlideRecord. This is to ensure that security ACLs are considered in all server interactions. To detect deviation from this, any instantiation of GlideRecord should be marked as a finding. Note that $sp.getRecord() currently returns a GlideRecord object. I believe that this call should actually return a GlideRecordSecure object to be as secure as possible. While that is a separate enhancement outside of the HealthScan tool, it does pose a challenge in that it will be harder for HealthScan to detect the use of the GlideRecord object returned by $sp.getRecord. Recommendation: According to best practice, server scripts in widgets should use GlideRecordSecure rather © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 135 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
than GlideRecord. This is to ensure that security ACLs are considered in all server interactions. Documentation Click here for more details Table / Object Details Widget [sp_widget]: AMC Calendar. Server script:There are lots of matches. Showing the first 10: lines 233, 309, 508, 836, 866, 897, Look on instance ACN BCTAPP Findings Categorization Details Definition: HSD0001507: There is a dedicated integration user that runs actions in place of the default admin user Rating: Act Description: internal_integration_user field on user record can be checked, i.e. if any of the integration methods is active and this field is not true of any record should be recorded as finding. However, it may be tricky to check if all the possible integrations are active? Recommendation: Run as user in automated scripts should have internal_integration_user field checked in user record Documentation Click here for more details Table / Object Details Scheduled Script Execution [sysauto]: acn_ptat_fix_stuck_workflow_task Look on instance ACN Former Employee Findings Categorization Details Definition: HSD0001507: There is a dedicated integration user that runs actions in place of the default admin user Rating: Act Description: internal_integration_user field on user record can be checked, i.e. if any of the integration methods is active and this field is not true of any record should be recorded as finding. However, it may be tricky to check if all the possible integrations are active? Recommendation: Run as user in automated scripts should have internal_integration_user field checked in user record Documentation Click here for more details Table / Object Details Scheduled Script Execution [sysauto]: Daily Report For Workday Ops Team - Address Update Look on instance ACN Document Builder Findings Categorization Details Definition: HSD0002016: Server scripts in widgets should use GlideRecordSecure instead of GlideRecord Rating: Recommend © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 136 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: The best practice should be that server scripts in widgets should use GlideRecordSecure rather than GlideRecord. This is to ensure that security ACLs are considered in all server interactions. To detect deviation from this, any instantiation of GlideRecord should be marked as a finding. Note that $sp.getRecord() currently returns a GlideRecord object. I believe that this call should actually return a GlideRecordSecure object to be as secure as possible. While that is a separate enhancement outside of the HealthScan tool, it does pose a challenge in that it will be harder for HealthScan to detect the use of the GlideRecord object returned by $sp.getRecord. Recommendation: According to best practice, server scripts in widgets should use GlideRecordSecure rather than GlideRecord. This is to ensure that security ACLs are considered in all server interactions. Documentation Click here for more details Table / Object Details Widget [sp_widget]: Substitution Fields. Server script:Found on lines 49, 54, 65, 74 and 83 Look on instance Widget [sp_widget]: Select Document Template. Server script:Found on lines 20, 44, 52, 60, 67 and 79 Look on instance Widget [sp_widget]: Document Editor. Server script:Found on lines 12, 20, 51, 72, 87, 109, 114, 121 and 132 Look on instance ACN GCP Findings Categorization Details Definition: HSD0002016: Server scripts in widgets should use GlideRecordSecure instead of GlideRecord Rating: Recommend Description: The best practice should be that server scripts in widgets should use GlideRecordSecure rather than GlideRecord. This is to ensure that security ACLs are considered in all server interactions. To detect deviation from this, any instantiation of GlideRecord should be marked as a finding. Note that $sp.getRecord() currently returns a GlideRecord object. I believe that this call should actually return a GlideRecordSecure object to be as secure as possible. While that is a separate enhancement outside of the HealthScan tool, it does pose a challenge in that it will be harder for HealthScan to detect the use of the GlideRecord object returned by $sp.getRecord. Recommendation: According to best practice, server scripts in widgets should use GlideRecordSecure rather than GlideRecord. This is to ensure that security ACLs are considered in all server interactions. Documentation Click here for more details Table / Object Details Widget [sp_widget]: GCP Provide Information. Server script:Found on lines 16, 54, 76 and 113 Look on instance Platform Findings Categorization Details Definition: HSD0001639: Enable IP Range Based Authentication © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 137 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Discuss Description: One way to secure a web-based application is to restrict access based on the IP address. You can block access to a specific address or range of addresses that you suspect belong to malicious individuals. The instance allows you to control access by IP address. Recommendation: Navigate to System Security > IP Address Access Control to manage the list of IP address that you want to allow or deny. Documentation Click here for more details Table / Object Details ip_access: No entry in the IP Address Access Control Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 138 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Upgradeability Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 5 9 ACN BCTAPP 1 Acn Dir 1 2 ACN Document Builder 3 ACN ESA 1 ACN Former Employee 1 ACN GCP 2 ACN Guided Workflow 1 1 ACN MyLearning 3 ACN PA 2 ACN SAC 4 1 ACN WFH 1 20 ACN WPA 4 ACN_ASB 3 ACN_CBMS 2 ACN_MOBILECP 1 ACN_PCHW_GPRT 7 2 Admin Account Request 1 2 AEE Ideas 1 50 AP20 Real Estate 8 25 Ask HR 6 Ask PM 6 Asset & Cost Management 6 Asset Management 21 7 Automated Testing Framework 2 BGC Fortify 6 1 59 Business Support Request 1 Case and Knowledge Management 13 36 21 CDP 1 5 Change Management 1 5 Clear Pass 2 23 Client Tax Matters 2 5 Client Whitelist 1 Cloud Management 1 Complaint Management Tool 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 139 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Configuration Management Database 5 14 Connect Support 2 Contract Management 2 Customer Service Management 45 Data Privacy 9 50 Delegation 1 Disability 3 5 Discovery 1 1 Discovery and Service Mapping Patterns 1 E2E 8 Ecosystem Supplier Management Support 1 Employee Data Change 3 Enterprise Insight 10 Event Management 13 Fac Compliance 2 Facilities Service Management 1 Financial Reporting 1 Fixed Assets Change 1 Flexi Work 4 Full and Final Exit 3 Glide Conversation Server 1 Holiday Payout 1 5 Hours That Help 5 Idea Innovation 5 Incident Communications Management 1 Incident Management 2 13 3 Instance Security Dashboard (PA) 1 Integrations 1 5 Interaction Logging, Routing, and Queueing 1 Knowledge Management 18 Leave of Absence 7 LOC 1 Major Incident Management 1 4 Managed documents 1 MS Forms 1 MS Teams Recording Enablement 1 1 My Access 7 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 140 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
On-Call Scheduling 4 Password Reset 1 Pattern Designer 1 Payroll 1 Payroll Uploads 2 PDF Generator 2 Performance Analytics 13 PIP Probation 1 4 Platform Foundation 139 152 877 Problem Management 1 Procurement 4 Project & Portfolio Management 1 Project Management 1 Proxy agent for connecting to Natural Language Understanding (NLU) providers 1 Query stats 1 Reporting 2 Request Supplementary Pay 2 Salesforce Integration 3 Service Catalog 262 13 34 Service Level Management 4 Service Mapping 1 Service Portal Designer 1 2 Software Asset Management 8 Source To Pay 3 18 Task table schema 1 Task-Outage Relationship 1 Time Card Management 1 3 2 TRIPP 2 2 Workflow 3 Workflow Runtime Engine 3 WS Admin 1 Asset & Cost Management Findings Categorization Details Definition: HSD0001664: Differs from baseline: Script Includes Rating: Recommend Description: These Script Includes have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 141 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: ModelAndCategoryFilters Look on instance Categorization Details Definition: HSD0004749: Differs from baseline: Field Dictionaries Rating: Recommend Description: These Field Dictionaries have been modified from the OOTB baseline. These Field Dictionaries will not be altered upon an upgrade. Recommendation: Review the changes to these Dictionares and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Cost Look on instance Categorization Details Definition: HSD0004839: Differs from baseline: Access Controls Rating: Recommend Description: These Access Controls have been modified from the OOTB baseline. These Access Controls will not be altered upon an upgrade. Recommendation: Review the changes to these Access Controls and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Access Control [sys_security_acl]: cmdb_model_category Look on instance Access Control [sys_security_acl]: cmdb_model_category Look on instance Access Control [sys_security_acl]: cmdb_software_product_model Look on instance Access Control [sys_security_acl]: cmdb_model_category.asset_class Look on instance Case and Knowledge Management Findings Categorization Details Definition: HSD0001664: Differs from baseline: Script Includes Rating: Recommend © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 142 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: These Script Includes have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: hr_Task Look on instance Script Include [sys_script_include]: GeneralHRForm Look on instance Script Include [sys_script_include]: hr_Case Look on instance Categorization Details Definition: HSD0001662: Differs from baseline: Business Rules Rating: Recommend Description: These Business Rules have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these Business Rules and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Restrict query Look on instance Categorization Details Definition: HSD0001761: Differs from baseline: UI actions Rating: Recommend Description: These UI actions have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these UI Actions and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Ready for Work Look on instance Categorization Details Definition: HSD0004842: Differs from baseline: Email Scripts Rating: Recommend © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 143 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: These Email Scripts have been modified from the OOTB baseline. These Email Scripts will not be altered upon an upgrade. Recommendation: Review the changes to these Email Scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: get_url Look on instance Contract Management Findings Categorization Details Definition: HSD0001664: Differs from baseline: Script Includes Rating: Recommend Description: These Script Includes have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: ConditionChecks Look on instance Integrations Findings Categorization Details Definition: HSD0004841: Differs from baseline: Installation Exits Rating: Recommend Description: These Installation Exits have been modified from the OOTB baseline. These Installation Exits will not be altered upon an upgrade. Recommendation: Review the changes to these Installation Exits and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Installation Exit [sys_installation_exit]: MultiSSO Look on instance Installation Exit [sys_installation_exit]: MultiSSOLogin Look on instance Installation Exit [sys_installation_exit]: SAML2SingleSignon Look on instance Platform Foundation Findings Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 144 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0004841: Differs from baseline: Installation Exits Rating: Recommend Description: These Installation Exits have been modified from the OOTB baseline. These Installation Exits will not be altered upon an upgrade. Recommendation: Review the changes to these Installation Exits and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Installation Exit [sys_installation_exit]: ValidatePasswordStronger Look on instance Categorization Details Definition: HSD0001666: Differs from baseline: UI Macros and UI Pages Rating: Recommend Description: These UI Macros and UI Pages have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: attachment Look on instance Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: Conditionally Set Type for Surveys Look on instance Categorization Details Definition: HSD0004147: Use of GlideDialogWindow and GlideOverlay Rating: Recommend Description: Checks for the use of GlideDialogWindow and GlideOverlay, which cannot be tested by ATF. Recommendation: You are using GlideDialogWindow and/or GlideOverlay, which is not currently supported by © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 145 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
ATF. It is recommended to use GlideModal instead, which is supported by ATF tests. Documentation Click here for more details Table / Object Details Catalog Client Scripts [sys_script_client]: CMDB_AIR_Support- onLoad Populate Values. 17 Look on instance ACN AMC Findings Categorization Details Definition: HSD0001142: Client-side code should not use DOM manipulation technique Rating: Act Description: This customization technique gives a lot of control, but does frequently cause upgrade challenges. It is recommended not to use jQuery, PrototypeJS, gel and other techniques Recommendation: Avoid Document Object Model (DOM) manipulation if possible. It can cause a maintainability issue when the instance is updated. The only exception is when you are in charge of the DOM: in UI Pages, and the Service Portal. Instead, use the GlideForm API or consider a different approach for the solution. In general, when using DOM manipulation methods, you have to reference an element in the DOM by id or using a CSS selector. When referencing out-of-box DOM elements, there is a risk that the element ID or placement within the DOM could change thus causing the code to stop working and/or generate errors. If DOM manipulation is done, it needs to be done with forethought, caution, and a full understanding of the risk you are incurring. Review these objects and reduce the use of DOM manipulation methods as much as possible. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: onLoad_task. Script:Found on lines 252, 530, 531, 532 and 533 Look on instance Client Script [sys_script_client]: amc_task_onSubmit. Script:Found on line 32 Look on instance UI Script [sys_ui_script]: x_amspi_acn_amc_2.angular-bootstrap-cale. Script:There are lots of matches. Showing the first 10: lines 782, 783, 785, 787, 789, 911, 912, 91 Look on instance UI Script [sys_ui_script]: x_amspi_acn_amc_2.moment 2.17.1. Script:Found on lines 39, 39, 39 and 424 Look on instance Categorization Details Definition: HSD0004146: Use of alert, prompt or confirm Rating: Discuss Description: Checks for the common browser functions alert, prompt or confirm. These can currently not be tested by ATF, so it is recommended to replace them with GlideModal dialogs. Recommendation: You are using the browser functions "alert", "prompt" or "confirm" in your scripts. These are not supported by ATF tests. For testability, it is recommended to use GlideModal dialog windows instead. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 146 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details Catalog Client Scripts [sys_script_client]: amc_onChange_netPromoterScore. 8 Look on instance Client Script [sys_script_client]: amc_task_onSubmit. 6 - 13 - 36 - 16 - 19 - 22 Look on instance Catalog Client Scripts [sys_script_client]: amc_onChange_salesValue. 3 Look on instance Client Script [sys_script_client]: onChange_MMSiD. 58 Look on instance Asset Management Findings Categorization Details Definition: HSD0004749: Differs from baseline: Field Dictionaries Rating: Recommend Description: These Field Dictionaries have been modified from the OOTB baseline. These Field Dictionaries will not be altered upon an upgrade. Recommendation: Review the changes to these Dictionares and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Quantity Look on instance Dictionary Entry [sys_dictionary]: Stockroom owner Look on instance Dictionary Entry [sys_dictionary]: Disposal vendor Look on instance Dictionary Entry [sys_dictionary]: Vendor Look on instance Categorization Details Definition: HSD0001662: Differs from baseline: Business Rules Rating: Recommend Description: These Business Rules have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these Business Rules and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Sync model category Look on instance Business Rule [sys_script]: Merge Records © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 147 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Business Rule [sys_script]: Create asset on model change Look on instance Business Rule [sys_script]: Asset Retirement Look on instance Categorization Details Definition: HSD0004839: Differs from baseline: Access Controls Rating: Recommend Description: These Access Controls have been modified from the OOTB baseline. These Access Controls will not be altered upon an upgrade. Recommendation: Review the changes to these Access Controls and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Access Control [sys_security_acl]: alm_asset.asset_tag Look on instance Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: Set Location from stockroom Look on instance Categorization Details Definition: HSD0004147: Use of GlideDialogWindow and GlideOverlay Rating: Recommend Description: Checks for the use of GlideDialogWindow and GlideOverlay, which cannot be tested by ATF. Recommendation: You are using GlideDialogWindow and/or GlideOverlay, which is not currently supported by ATF. It is recommended to use GlideModal instead, which is supported by ATF tests. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: EAM RMA Substate. 33 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 148 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Service Catalog Findings Categorization Details Definition: HSD0001666: Differs from baseline: UI Macros and UI Pages Rating: Recommend Description: These UI Macros and UI Pages have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: com.glideapp.servicecatalog_checkout_view_v2 Look on instance Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: Hide roles field Look on instance Software Asset Management Findings Categorization Details Definition: HSD0001666: Differs from baseline: UI Macros and UI Pages Rating: Recommend Description: These UI Macros and UI Pages have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: samp_license_workbench_list Look on instance BGC Fortify Findings Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 149 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0001404: Scripts should not directly call Java packages Rating: Act Description: Java packages are effectively unsupported API calls. They should not be used. Recommendation: Run the Package Call Removal Tool, and replace all Java package calls with the Glide alternative Documentation Click here for more details Table / Object Details MID Server Script Include [ecc_agent_script_include]: taleoSqlQuery. Script:There are lots of matches. Showing the first 10: lines 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 Look on instance Script Include [sys_script_include]: BGC_Update_Package_Master_Table. Script: Look on instance Categorization Details Definition: HSD0004147: Use of GlideDialogWindow and GlideOverlay Rating: Recommend Description: Checks for the use of GlideDialogWindow and GlideOverlay, which cannot be tested by ATF. Recommendation: You are using GlideDialogWindow and/or GlideOverlay, which is not currently supported by ATF. It is recommended to use GlideModal instead, which is supported by ATF tests. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: BGC Assign to Changes . 16 Look on instance Cloud Management Findings Categorization Details Definition: HSD0001404: Scripts should not directly call Java packages Rating: Act Description: Java packages are effectively unsupported API calls. They should not be used. Recommendation: Run the Package Call Removal Tool, and replace all Java package calls with the Glide alternative Documentation Click here for more details Table / Object Details MID Server Script Include [ecc_agent_script_include]: AzureStorageManagedDisk. Script:Found on lines 4, 5, 151, 151, 151, 156 and 162. Found on line 4 Look on instance Discovery Findings Categorization Details Definition: HSD0001404: Scripts should not directly call Java packages Rating: Act © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 150 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Java packages are effectively unsupported API calls. They should not be used. Recommendation: Run the Package Call Removal Tool, and replace all Java package calls with the Glide alternative Documentation Click here for more details Table / Object Details Sensor [discovery_sensor]: Windows - Classify. Script:Found on line 104 Look on instance Discovery and Service Mapping Patterns Findings Categorization Details Definition: HSD0001404: Scripts should not directly call Java packages Rating: Act Description: Java packages are effectively unsupported API calls. They should not be used. Recommendation: Run the Package Call Removal Tool, and replace all Java package calls with the Glide alternative Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: CloudVendorWhiteList. Script:Found on lines 15 and 32 Look on instance Automated Testing Framework Findings Categorization Details Definition: HSD0001761: Differs from baseline: UI actions Rating: Recommend Description: These UI actions have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these UI Actions and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Execute Now Look on instance Categorization Details Definition: HSD0004842: Differs from baseline: Email Scripts Rating: Recommend Description: These Email Scripts have been modified from the OOTB baseline. These Email Scripts will not be altered upon an upgrade. Recommendation: Review the changes to these Email Scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 151 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details Email Script [sys_script_email]: suiteCompletion.email Look on instance Change Management Findings Categorization Details Definition: HSD0001761: Differs from baseline: UI actions Rating: Recommend Description: These UI actions have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these UI Actions and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Execute Risk Calculation Look on instance Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Script [sys_ui_script]: change_calendar.vcal.snChangeCabCalendar Look on instance Incident Management Findings Categorization Details Definition: HSD0001761: Differs from baseline: UI actions Rating: Recommend Description: These UI actions have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these UI Actions and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Metrics Timeline Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 152 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
UI Action [sys_ui_action]: Spam Look on instance Categorization Details Definition: HSD0004147: Use of GlideDialogWindow and GlideOverlay Rating: Recommend Description: Checks for the use of GlideDialogWindow and GlideOverlay, which cannot be tested by ATF. Recommendation: You are using GlideDialogWindow and/or GlideOverlay, which is not currently supported by ATF. It is recommended to use GlideModal instead, which is supported by ATF tests. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: P1 Qualifying Questionnaire priority. 30 Look on instance Client Script [sys_script_client]: P1 Qualifying Questionnaire caller. 29 Look on instance Service Portal Designer Findings Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Script [sys_ui_script]: moment-timezone.js Look on instance Event Management Findings Categorization Details Definition: HSD0004842: Differs from baseline: Email Scripts Rating: Recommend Description: These Email Scripts have been modified from the OOTB baseline. These Email Scripts will not be altered upon an upgrade. Recommendation: Review the changes to these Email Scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: service_data_entered Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 153 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Email Script [sys_script_email]: review_service Look on instance Email Script [sys_script_email]: fill_service_data Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 154 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Scorecard User Experience Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 1 5 4 ACN BCTAPP 2 Acn Dir 1 4 2 ACN ESA 1 2 1 ACN Former Employee 1 3 1 ACN GCP 1 6 2 ACN Guided Workflow 1 ACN MyLearning 1 3 ACN NDDO 1 4 ACN PA 1 5 3 ACN SAC 1 3 ACN WFH 4 8 8 ACN WPA 1 11 2 ACN_ASB 2 12 5 ACN_CBMS 1 2 1 ACN_MOBILECP 1 4 2 ACN_PCHW_GPRT 1 4 AEE Ideas 2 6 12 AIA Datalake 1 AP20 Real Estate 1 7 1 Ask HR 2 Ask PM 1 2 Asset & Cost Management 1 Asset Management 2 1 Audit Tax App 1 2 Automated Testing Framework 1 BGC Fortify 2 7 14 Biz Approval 1 3 1 Business Support Request 7 7 Case and Knowledge Management 3 1 Cash Appl 1 4 CDP 1 13 8 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 155 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Change Management 1 Clear Pass 2 6 1 Client Tax Matters 1 7 10 Client Whitelist 1 3 Complaint Management Tool 1 3 Configuration Management Database 4 26 4 CRS 1 4 Data Privacy 3 12 3 Delegation 1 2 Disability 1 4 15 E2E 3 EAM Asset Import 1 3 Ecosystem Supplier Management Support 2 1 Employee Data Change 2 1 EMS 1 4 Enterprise Insight 1 5 2 Fac Compliance 2 10 4 Facilities Service Management 1 Fixed Assets 2 4 1 Fixed Assets Change 1 4 1 Full and Final Exit 1 2 Holiday Payout 1 Hours That Help 1 Idea Innovation 1 4 1 Incident Management 4 2 Integrations 1 Knowledge Management 1 Leave of Absence 2 1 LOC 1 Major Incident Management 2 8 MS Forms 1 4 MS Teams Recording Enablement 1 5 1 PAM Password Rotataion 2 1 Payroll 7 10 Payroll Uploads 2 PIP Probation 2 6 Platform Foundation 40 443 441 Procurement 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 156 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Request Supplementary Pay 2 RTO Pulse Survey 1 Sales and Quality 4 6 Salesforce Integration 1 Service Catalog 3 1 Service Portal Designer 1 Source To Pay 8 11 12 Time Card Management 2 4 Tracker App 1 TRIPP 1 TSEF 1 WS Admin 2 Integrations Findings Categorization Details Definition: HSD0001011: Slow loading forms in the last 30 Days Rating: Discuss Description: For the last 30 days table related forms that by average take longer than 500 milliseconds (0.5 secs) to load, excluding network and other time. Slow loading forms are frustrating to the user. Recommendation: Slow loading forms may occur if there are a lot of fields, scripts, database lookups, ACLs, UI Policies, Business Rules etc. Optimize client side logic and form behaviour. Review transactions in System Diagnostics > Stats > Slow Transactions, and System Logs > Transactions (All user). Documentation Click here for more details Table / Object Details Table [saml2_update1_properties]: 1053 ms Look on instance Platform Foundation Findings Categorization Details Definition: HSD0001011: Slow loading forms in the last 30 Days Rating: Discuss Description: For the last 30 days table related forms that by average take longer than 500 milliseconds (0.5 secs) to load, excluding network and other time. Slow loading forms are frustrating to the user. Recommendation: Slow loading forms may occur if there are a lot of fields, scripts, database lookups, ACLs, UI Policies, Business Rules etc. Optimize client side logic and form behaviour. Review transactions in System Diagnostics > Stats > Slow Transactions, and System Logs > Transactions (All user). Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 157 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table [sys_script]: 1377 ms Look on instance Categorization Details Definition: HSD0002813: Activity Formatter placement Rating: Recommend Description: Put the Activity Formatter placement in a section for a consistent user experience Recommendation: The Activity Formatter should not be part of the title section and instead be moved to a dedicated section. This will provide a consistent user experience and prevent forms from becoming overly long. Documentation Click here for more details Table / Object Details Section Element [x_amspi_acn_mylrn_acn_gn q_requests]: Activity Formatter placement Look on instance Section Element [x_amspi_idea_innov_idea_s ubscription]: Activity Formatter placement Look on instance Section Element [sc_task]: Activity Formatter placement Look on instance Section Element [x_amspi_cash_appl_task]: Activity Formatter placement Look on instance ACN AMC Findings Categorization Details Definition: HSD0001207: Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. Rating: Recommend Description: If more there is a disparity of more than 5 fields (e.g., left has 1, right has 7), we should consider making the form more balanced. This might also indicate some client-side rules are hiding some of these fields if the whitespace is not apparent. Recommendation: Make sure the form is balanced and there is not excessive whitespace on one side or the other. Documentation Click here for more details Table / Object Details Table [sys_ui_element]: x_amspi_acn_amc_2_amc_task table has a discrepency of 8 elements.. x_amspi_acn_amc_2_amc_task.do?sys_id=-1&sysparm_view= - x_amspi_acn_amc_2_amc_task.do?sys_id=-1&sysp Look on instance Categorization Details Definition: HSD0002128: Same field twice on one form © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 158 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: sf_x_amspi_acn_amc_task. not_visible on form 2 times in one or more sections. Look on instance Categorization Details Definition: HSD0001344: Minimize the number of options in a choice field Rating: Discuss Description: Having many options in a choice field often results in a poor user experience. Recommendation: Check if all the options are really required. Try to reduce to less than 15. Consolidate the options down or pick another field type. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Time Needed (GMT) Look on instance Categorization Details Definition: HSD0001372: Too many fields on a form Rating: Recommend Description: Too many fields on forms impact the service experience and leave users frustrated. Performance and ease of management is also impacted. Recommendation: Try to reduce the complexity of the given form to fewer than 30 fields. Use views or calculate fields automatically. Documentation Click here for more details Table / Object Details Form [sf_x_amspi_acn_amc_task]: 32 Look on instance Form [x_amspi_acn_amc_2_amc_t ask]: 69 Look on instance Form [sf_x_amspi_acn_amc_reque st]: 31 Look on instance Form [x_amspi_acn_amc_2_amc_r equest]: 33 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 159 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0002020: Long module titles Rating: Discuss Description: Sometimes customers can use long titles for modules, which end up getting truncated and an ellipsis (...) added to it. When this happens, users do not see the full title and feel compelled to click it so they can see what that module is doing. Even more so, this can impact user experience when there are many similarly named modules. Recommendation: Long module titles will be truncated in the UI or they may overlap with the edit/favorite icons. Consider shortening the titles, making them unique. Or, if there are many with a similar name, consider collating them under a separator and renaming them. Documentation Click here for more details Table / Object Details : Estimated Time to Complete Fullfillment Look on instance : For my Sales Pursuit/key project deliverable, I need assistance with… Look on instance : Estimated Time to Complete Fullfillment s Look on instance ACN BCTAPP Findings Categorization Details Definition: HSD0001207: Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. Rating: Recommend Description: If more there is a disparity of more than 5 fields (e.g., left has 1, right has 7), we should consider making the form more balanced. This might also indicate some client-side rules are hiding some of these fields if the whitespace is not apparent. Recommendation: Make sure the form is balanced and there is not excessive whitespace on one side or the other. Documentation Click here for more details Table / Object Details Table [sys_ui_element]: x_amspi_acn_bctapp_travel_approval table has a discrepency of 5 elements.. x_amspi_acn_bctapp_travel_approval.do?sys_id=-1&sysparm_view= Look on instance Categorization Details Definition: HSD0001372: Too many fields on a form Rating: Recommend Description: Too many fields on forms impact the service experience and leave users frustrated. Performance and ease of management is also impacted. Recommendation: Try to reduce the complexity of the given form to fewer than 30 fields. Use views or calculate fields automatically. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 160 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details Form [x_amspi_acn_bctapp_travel _approval]: 56 Look on instance ACN WFH Findings Categorization Details Definition: HSD0001207: Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. Rating: Recommend Description: If more there is a disparity of more than 5 fields (e.g., left has 1, right has 7), we should consider making the form more balanced. This might also indicate some client-side rules are hiding some of these fields if the whitespace is not apparent. Recommendation: Make sure the form is balanced and there is not excessive whitespace on one side or the other. Documentation Click here for more details Table / Object Details Table [sys_ui_element]: x_amspi_acn_wfh_ph_request table has a discrepency of 5 elements.. x_amspi_acn_wfh_ph_request.do?sys_id=-1&sysparm_view= Look on instance Categorization Details Definition: HSD0001344: Minimize the number of options in a choice field Rating: Discuss Description: Having many options in a choice field often results in a poor user experience. Recommendation: Check if all the options are really required. Try to reduce to less than 15. Consolidate the options down or pick another field type. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: IG Look on instance Dictionary Entry [sys_dictionary]: IG Look on instance ACN WPA Findings Categorization Details Definition: HSD0001207: Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. Rating: Recommend Description: If more there is a disparity of more than 5 fields (e.g., left has 1, right has 7), we should consider making the form more balanced. This might also indicate some client-side rules are hiding some of these fields if the whitespace is not apparent. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 161 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Make sure the form is balanced and there is not excessive whitespace on one side or the other. Documentation Click here for more details Table / Object Details Table [sys_ui_element]: x_amspi_acn_wpa_work_permit_subscription table has a discrepency of 5 elements.. x_amspi_acn_wpa_work_permit_subscription.do?sys_id=-1&sysparm_view= Look on instance Table [sys_ui_element]: x_amspi_acn_wpa_work_permit_task table has a discrepency of 5 elements.. x_amspi_acn_wpa_work_permit_task.do?sys_id=-1&sysparm_view= Look on instance AP20 Real Estate Findings Categorization Details Definition: HSD0001265: Auto-complete to match text in the columns listed in the ref_ac_columns attribute should be enabled. Rating: Discuss Description: Check if dictionary 'ref_ac_columns_search' attribute is set to true in order to enable auto- complete to match text in any column listed in the ref_ac_columns attribute. Recommendation: Set dictionary attribute 'ref_ac_columns_search' to true to enable auto-complete to match text in all reference field columns. By default (or when this attribute is false) auto-complete only matches text in the display value column. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: GeoRegion Look on instance Acn Dir Findings Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: x_amspi_acn_dir_sf_task. not_visible on form 2 times in one or more sections. Look on instance Categorization Details Definition: HSD0001344: Minimize the number of options in a choice field Rating: Discuss Description: Having many options in a choice field often results in a poor user experience. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 162 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Check if all the options are really required. Try to reduce to less than 15. Consolidate the options down or pick another field type. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Lead status Look on instance Dictionary Entry [sys_dictionary]: Reason close Look on instance ACN ESA Findings Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: sf_x_amspi_acn_esa_task. not_visible on form 2 times in one or more sections. Look on instance Categorization Details Definition: HSD0002020: Long module titles Rating: Discuss Description: Sometimes customers can use long titles for modules, which end up getting truncated and an ellipsis (...) added to it. When this happens, users do not see the full title and feel compelled to click it so they can see what that module is doing. Even more so, this can impact user experience when there are many similarly named modules. Recommendation: Long module titles will be truncated in the UI or they may overlap with the edit/favorite icons. Consider shortening the titles, making them unique. Or, if there are many with a similar name, consider collating them under a separator and renaming them. Documentation Click here for more details Table / Object Details : Imp Tmpl X Amspi Acn Acnesa Esa Group Assignment Look on instance ACN Former Employee Findings Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 163 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: x_amspi_acn_former_sf_employee_task. not_visible on form 2 times in one or more sections. Look on instance Categorization Details Definition: HSD0002020: Long module titles Rating: Discuss Description: Sometimes customers can use long titles for modules, which end up getting truncated and an ellipsis (...) added to it. When this happens, users do not see the full title and feel compelled to click it so they can see what that module is doing. Even more so, this can impact user experience when there are many similarly named modules. Recommendation: Long module titles will be truncated in the UI or they may overlap with the edit/favorite icons. Consider shortening the titles, making them unique. Or, if there are many with a similar name, consider collating them under a separator and renaming them. Documentation Click here for more details Table / Object Details : ACN Former Employee Request Templates Look on instance ACN GCP Findings Categorization Details Definition: HSD0002128: Same field twice on one form Rating: Act Description: Check if a given field is placed twice on the same form. If so this will cause issues in saving/scripting etc. Recommendation: Review and remove any duplicate form fields, as this could cause issues with saving. Documentation Click here for more details Table / Object Details Form [sys_ui_form]: x_amspi_acn_gcp_sf_task. not_visible on form 2 times in one or more sections. Look on instance Knowledge Management Findings Categorization Details Definition: HSD0002463: Create actionable feedback task when an article is marked as not helpful should be enabled Rating: Recommend Description: Manage high volumes of article feedback by enabling task generation for negative feedback. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 164 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
When an article is marked as unhelpful, a feedback task is generated and assigned to the author or reviser of the article. Recommendation: 1. Navigate to Knowledge > Administration > Properties. 2. In the Actionable Feedback Properties section, tick the checkbox for "Create actionable feedback task when an article is marked as not helpful." property. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.knowman.feedback.enable_actionable_feedback_for_helpful is set to false!. false Look on instance Incident Management Findings Categorization Details Definition: HSD0002509: Incident Activity Log Rating: Recommend Description: The Incident activity log formatter should be set up to contain a list of commonly used fields. Recommendation: It is recommended to use at least these fields for the Incident Activity Log: - Additional comments - Assigned to - Assignment group - Attachments - Business service - Category - Configuration item - Description - Impact - On hold reason - Priority - Resolution code - Resolution notes - Resolved - Resolved by - Short description - State - Urgency - Work notes Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.ui.incident_activity.fields. assigned_to,location,cmdb_ci,impact,priority,u_category_ref,u_increcategory_item,opened _by,work_note Look on instance Categorization Details Definition: HSD0002508: Remove '5-Planning' from Incident Priority Rating: Discuss Description: The Priority 5 value is not aligned to ITIL and seldom used by customers. It should be discussed with the customer and possibly removed from the lookup table. Recommendation: Discuss with customer and possibly remove Priority 5 from the priority lookup. Documentation Click here for more details Table / Object Details Choice [sys_choice]: Deactivate Priority 5 from incident. 5 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 165 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Manageability Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 6 56 10 ACN BCTAPP 4 4 Acn Dir 4 31 6 ACN Document Builder 1 ACN ESA 4 28 10 ACN Feedback 1 1 ACN Former Employee 4 7 4 ACN GCP 4 9 15 ACN Guided Workflow 8 ACN MyLearning 4 12 12 ACN NDDO 4 20 17 ACN PA 14 32 9 ACN SAC 4 58 3 ACN WFH 4 46 163 ACN WPA 18 6 26 ACN_ASB 4 49 27 ACN_CBMS 4 29 15 ACN_MOBILECP 4 7 60 ACN_PCHW_GPRT 4 9 15 Admin Account Request 5 AEE Ideas 4 3 12 Agile Development 1 9 AIA Datalake 1 1 AP20 Real Estate 4 49 157 APIs and Integration Tools 4 1 122 Ask HR 11 21 Ask PM 1 4 25 Asset Management 39 4 5 Audit Tax App 4 1 13 BGC Fortify 25 73 Biz Approval 4 5 16 BizInquiry PAV 7 Business Support Request 8 30 15 Case and Knowledge Management 38 48 126 Cash Appl 4 29 13 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 166 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
CDP 31 40 58 Change Management 23 7 102 Clear Pass 4 32 23 Client Tax Matters 4 34 18 Client Whitelist 4 7 8 Complaint Management Tool 9 19 8 Configuration Management Database 8 15 20 Contract Management 1 CRS 4 5 21 Custom Application Runtime and Execution 85 Data Privacy 4 4 261 Delegation 2 7 Disability 7 58 42 E2E 5 7 15 EAM Asset Import 4 32 5 Ecosystem Supplier Management Support 1 9 Employee Data Change 9 14 Employee Exit 2 3 EMS 4 1 11 Enterprise Insight 9 10 32 Fac Compliance 7 36 46 Facilities Service Management 1 1 Fixed Assets 4 31 20 Fixed Assets Change 4 28 19 Flexi Work 7 26 Full and Final Exit 9 38 GDPR Recruiting 2 Governance, Risk & Compliance 1 6 Holiday Payout 8 17 Hours That Help 15 35 Idea Innovation 4 10 12 Incident Management 129 19 334 Integrations 1 Knowledge Management 1 141 Leave of Absence 48 60 LOC 7 13 Major Incident Management 1 9 17 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 167 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Mobile Asset 1 1 Mobile ITSM 3 9 MS Forms 4 33 4 MS Teams Recording Enablement 4 44 16 My Access 6 1 Notifications 526 On-Call Scheduling 1 Payroll 8 31 16 Payroll Uploads 14 20 PDF Generator 1 PIP Probation 4 35 57 Platform Foundation 9 1908 1461 Problem Management 17 Reporting 470 1348 Request Supplementary Pay 8 16 RTO Pulse Survey 2 8 Sales and Quality 4 34 14 Salesforce Integration 2 1 Service Catalog 127 390 2038 Service Portal Designer 1 1 ServiceNow NowMobile App – Catalog Screens and Applet Launcher 1 Software Asset Management 2 Source To Pay 8 23 39 Time Card Management 4 33 16 Tracker App 2 5 TRIPP 17 1 TSEF 28 Users, Groups, and Roles 1 VA Adoption Insights 1 2 Walk-up Experience 8 1 Workflow Runtime Engine 2 WS Admin 1 8 xMatters Actionable IT Alerts 1 ACN AMC Findings Categorization Details Definition: HSD0001924: Use Notification Categories Rating: Discuss © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 168 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Notification categories allow your users an easy way to manage their notifications. Recommendation: Associate a notification category with every email notification Documentation Click here for more details Table / Object Details Notification [sysevent_email_action]: Email Notif for CAT Feedback Look on instance Notification [sysevent_email_action]: Email Notif to Due Requests Look on instance Notification [sysevent_email_action]: ACN AMC REQUEST SUBMITTED Look on instance Categorization Details Definition: HSD0001015: Reports should typically not be made public Rating: Act Description: By default, reports that are public are available without logging in. This means that data may be unintentionally exposed and viewable by any user. Recommendation: Instead of publishing a report that is accessible by any user, regardless of whether they are logged in or not, share reports based on Roles, Users and/or Groups. To make a report available only to logged in users, set its Sharing setting to Everyone, but do not publish it. List reports are excluded from this definition as they always apply table level security (ACLs). Documentation Click here for more details Table / Object Details Report [x_amspi_acn_amc_request] : CI maintenance requests by building / space Look on instance Report [x_amspi_acn_amc_task]: CI maintenance tasks by building / space Look on instance Report [x_amspi_acn_amc_request] : Asset maintenance requests by building / space Look on instance Report [x_amspi_acn_amc_task]: Asset maintenance tasks by building / space Look on instance Categorization Details Definition: HSD0001193: Use the condition field in Business Rules Rating: Discuss Description: Business rules should have a condition field, rather than just using "if" in the script. Recommendation: Using the condition field makes it easier to spot when scripts are being evaluated in the session debugger. Also, it is more efficent, since the script does not need to be parsed unless it is going to be executed. Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 169 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Business Rule [sys_script]: Estimated Hours Group Delete. Script:Found on line 8 Look on instance Business Rule [sys_script]: Estimated Hours Group. Script:Found on line 7 Look on instance Business Rule [sys_script]: RequestClosedDate Additional Validation. Script:Found on line 10 Look on instance Business Rule [sys_script]: setReportFIlter. Script:There are lots of matches. Showing the first 10: lines 10, 21, 23, 25, 27, 29, 31, 33, 35, 3 Look on instance Categorization Details Definition: HSD0001275: Scripts should not contain hard-coded IDs Rating: Recommend Description: Hard coding sys_ids makes the system more difficult to manage, and less able to move functionality between instances Recommendation: Create a system property to store the name of the record (not the sys_id) for easier manageability. The script can use gs.getProperty() to retrieve the record and use the sys_id. If the named record was not found, an error can be displayed appropriately. Documentation Click here for more details Table / Object Details Notification [sysevent_email_action]: ACN AMC REQUEST SUBMITTED. Advanced condition:Found on line 9 Look on instance Email Script [sys_script_email]: OPS_Due_Request. Script:Found on lines 13 and 26 Look on instance Script Include [sys_script_include]: getAMCOG. Script:Found on lines 14 and 14 Look on instance Business Rule [sys_script]: Set Service Status to Assigned. Script:Found on line 4 Look on instance Categorization Details Definition: HSD0001278: Before Business Rules should not update() or insert() records on other tables Rating: Recommend Description: Running an insert() or update() in a onBefore BR will cause updates to other tables, even though the update may be cancelled Recommendation: To ensure data integrity, change this business rule to run "after". Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Set Request Status to Assigned. Script:Found on line 6 Look on instance Business Rule [sys_script]: Set Service Status to Assigned. Script:Found on line 5 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 170 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Business Rule [sys_script]: Add activity log for removed attachment. Script:Found on line 11 Look on instance Business Rule [sys_script]: AMC Create Media Child Task. Script:Found on line 65 Look on instance Categorization Details Definition: HSD0001312: Client-side code should not contain the console.log() debugging method Rating: Recommend Description: The client-side function console.log could cause errors in certain browser versions Recommendation: Replace console.log() calls with jslog. The benefits of jslog are that you have to open the JavaScript Debugger Window to view the output, it is compatible with all browsers, and can be left in production since only administrators can open the window. Documentation Click here for more details Table / Object Details Catalog UI Policy [catalog_ui_policy]: Hide fields onload. Execute if true:Found on line 8 Look on instance Client Script [sys_script_client]: onChange_MMSiD. Script:Found on line 216 Look on instance UI Script [sys_ui_script]: x_amspi_acn_amc_2.angular-bootstrap-cale. Script:Found on lines 4142, 4144 and 4146 Look on instance Catalog Client Scripts [catalog_script_client]: amc_onChange_longDescription. Script:Found on line 11 Look on instance Categorization Details Definition: HSD0003083: Scripted REST resource without enabled security Rating: Act Description: Scripted REST services offer 2 security options on resource level: requiring authentication and requiring ACL authorization. At least one of them should be checked. Recommendation: Enable at least authorization, even for scripted REST services that don't alter data. Consider using ACL authorization as well, if data will be altered by the web service. Documentation Click here for more details Table / Object Details Scripted REST Resource [sys_ws_operation]: addNonRequestHours Look on instance Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 171 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Opportunity Pursuit Support Look on instance Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_amc_2.glide.script.block.client.globals. false Look on instance ACN BCTAPP Findings Categorization Details Definition: HSD0001924: Use Notification Categories Rating: Discuss Description: Notification categories allow your users an easy way to manage their notifications. Recommendation: Associate a notification category with every email notification Documentation Click here for more details Table / Object Details Notification [sysevent_email_action]: Travel Approvers - Status is Rejected Look on instance Notification [sysevent_email_action]: Travel Approvers - Status is Approved Look on instance Platform Foundation Findings Categorization Details Definition: HSD0001016: Lots of active tasks more than a month old Rating: Discuss Description: If there are lots of active tasks (more than 10% of the total) that are older than a month, it indicates a process problem. Recommendation: Check your processes to ensure that tasks (Incidents, Problems, Changes, Requests) are being closed as expected, and the active flag is set to false. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 172 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Object: wm_order x_amspi_hpt_request em_remediation_task sc_req_item Categorization Details Definition: HSD0001066: Groups with no users Rating: Recommend Description: A group is a set of users who share a common purpose. Groups without users indicate poor data management. There are some occasions where this would not be the case, for example when groups are used for hierarchy purpose, and there is a logic in place not to pick these groups. In these cases you can also ignore this finding. Recommendation: Ensure that all assignment groups have members. Groups that are redundant should be deactivated. If groups are being created via integration services such as LDAP, then ensure they are necessary and have members. Documentation Click here for more details Table / Object Details Group [sys_user_group]: INFOSEC-MADRID-LOCAL-SUPPORT Look on instance Group [sys_user_group]: HDC3.Tech.ShiftLeads Look on instance Group [sys_user_group]: BusSvs-ExcSup-ES-Madrid 13 Look on instance Group [sys_user_group]: WKSTNSVSGDN-GREATERCHINA-CHN-CHENGDU Look on instance Categorization Details Definition: HSD0002015: Update Sets should be named uniquely Rating: Recommend Description: Where duplicate Update Set names exist, there is a likelihood that the contents of the update sets (customer updates) will also be duplicates. These duplicates may have been manually imported or imported when changing update sources. They can often lead false- positive results on update set previews and update sets being committed in the wrong order. Duplicate update sets should (where possible) be identified and deleted or given a unique name if are being used for current development. Recommendation: Duplicate update sets should be removed or renamed if being used for active development. Documentation Click here for more details Table / Object Details sys_update_set: 2 update sets with duplicate name "SiebelR6.1_FY19_Q2_global_PY_v04" Look on instance sys_update_set: 2 update sets with duplicate name "Business_Support_Fix" Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 173 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
sys_update_set: 2 update sets with duplicate name "ITSM Update Notification Template 6_29" Look on instance sys_update_set: 2 update sets with duplicate name "ACN_ASB_Sprint_1_R2_997499_997498" Look on instance Categorization Details Definition: HSD0001306: Debug properties should be disabled in production Rating: Discuss Description: Having debugging enabled unnecessarily can cause performance issues and possibly leak data. Recommendation: If not actively debugging in production, disable all debug system properties. Documentation Click here for more details Table / Object Details System Property [sys_properties]: queue.manager.debug. true Look on instance System Property [sys_properties]: glide.ldap.debug. true Look on instance Categorization Details Definition: HSD0001338: Business Rules should not be defined on the Global table (Global Business Rule) Rating: Act Description: A global Business Rule is any Business Rule where the selected Table is Global. Any other script can call global Business Rules. Global Business Rules have no condition or table restrictions and load on every page in the system. Recommendation: For the majority of situations, you can use a script include instead of a global business rule. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: sc_req_item_functions Look on instance Business Rule [sys_script]: Get Number Look on instance Business Rule [sys_script]: custom_ProcessFlowList() Look on instance Categorization Details Definition: HSD0001392: Scripts should not use the eval() method Rating: Recommend Description: The eval() function evaluates or executes an argument. Improper use of eval() opens up your code for injection attacks and debugging can be more challenging, as no line numbers are displayed with an error. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 174 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Avoid the use of eval. It encourages the use of untrusted code. If you must execute arbitrary code, use GlideScriptEvaluator which ensures it came from a record. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: acn_UnifiedGatewayReadData. Script:Found on line 320 Look on instance Script Include [sys_script_include]: acn_clone. Script:Found on line 1115 Look on instance UI Page [sys_ui_page]: receive_assetSW_clone. Processing script:There are lots of matches. Showing the first 10: lines 16, 32, 34, 35, 37, 38, 39 Look on instance UI Page [sys_ui_page]: eam_change_model_category. Processing script:Found on lines 9 and 10 Look on instance Categorization Details Definition: HSD0001398: Script Includes with duplicate names Rating: Act Description: When two Script Includes exist with the same name in the same scope, when those script includes are called it is unreliable as to which Script Include will actually be instantiated. Recommendation: Ensure all your Script Includes have unique names. Rename any script include with a duplicate name with a unique name. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: SLAConditionBase Look on instance Script Include [sys_script_include]: u_siebel_askpm_copy_attachment Look on instance Script Include [sys_script_include]: u_siebel_askpm_copy_attachment Look on instance Script Include [sys_script_include]: MyDateTimeAjax Look on instance Categorization Details Definition: HSD0001467: Duplicate foundation/core data found. Rating: Recommend Description: Duplicate foundation data records found in your instance. Recommendation: This could cause confusion from an end user perspective but also from a maintenance perspective. The recommendation is to ensure these records have unique, unambiguous names in the system. Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 175 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
cmn_cost_center: 349516 duplicate record(s) found in table [cmn_cost_center]. NOTE: Only showing first 40 Look on instance core_company: 1069 duplicate record(s) found in table [core_company]. NOTE: Only showing first 40 Look on instance sys_user_group: 4 duplicate record(s) found in table [sys_user_group]. Look on instance cmn_department: 1 duplicate record(s) found in table [cmn_department]. Look on instance Asset Management Findings Categorization Details Definition: HSD0001020: List Report without any columns selected Rating: Discuss Description: List report who has no fields configured in field_list will always fall back to default layout of the lists Recommendation: List report who has no fields configured in field_list will always fall back to the default layout of the lists. If this is expected behavior for this report, you do not have to take any action, else you should configure the fields you want to see in this list report Documentation Click here for more details Table / Object Details Report [sys_report]: EAM-Assets in Stock Look on instance Report [sys_report]: EAM-Assets Pending Disposal >90 days Look on instance Categorization Details Definition: HSD0001187: Minimize logging in production Rating: Discuss Description: Turn debug logging off in production. It can affect performance, and potentially cause data leak challenges Recommendation: Remove the logging functions entirely or control their use with a property. At the minimum, switch to using gs.info and gs.debug Documentation Click here for more details Table / Object Details Business Rule [sys_script]: EAM_Asset_Tag_Generation - Hardware. Script:Found on line 8 Look on instance Access Control [sys_security_acl]: alm_asset.assigned_to. Script:Found on lines 4 and 9 Look on instance Case and Knowledge Management Findings Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 176 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0001020: List Report without any columns selected Rating: Discuss Description: List report who has no fields configured in field_list will always fall back to default layout of the lists Recommendation: List report who has no fields configured in field_list will always fall back to the default layout of the lists. If this is expected behavior for this report, you do not have to take any action, else you should configure the fields you want to see in this list report Documentation Click here for more details Table / Object Details Report [sys_report]: HR Case Identifier Look on instance Report [sys_report]: VENDOR CASE Look on instance Report [sys_report]: PMG Workday Monitoring - Invite Letters Look on instance Custom Application Runtime and Execution Findings Categorization Details Definition: HSD0001106: Applications should use Source Control Rating: Discuss Description: Applications build on the Now platform should be linked to a source control repository Recommendation: Applications build on the Now platform are recommended to be linked to a Source Control Repository. Documentation Click here for more details Table / Object Details Custom Application [sys_app]: Client Whitelist Look on instance Custom Application [sys_app]: Clear Pass Look on instance Custom Application [sys_app]: ACN_ASB Look on instance Custom Application [sys_app]: Disability Look on instance Categorization Details Definition: HSD0001107: JavaScript Mode is not set on ES5 Rating: Discuss Description: To support existing scripts and new scripts developed to the ECMAScript5 standard, the JavaScript engine has two modes. The modes are Compatibility Mode and ES5 Standards Mode. The JavaScript engine dynamically determines which mode to use on a script-by- script basis. ES5 Standards mode is the default when you create new scoped scripts. This mode does not preserve the legacy behaviors in the pre-Helsinki JavaScript engine. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 177 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: All apps created after Helsinki should have ES5 set as the JavaScript mode. For any legacy apps, consider migrating to ES5. For any new apps, ES5 should be selected. Documentation Click here for more details Table / Object Details Custom Application [sys_app]: BizInquiry PAV Look on instance ACN MyLearning Findings Categorization Details Definition: HSD0001153: Hard coded instance URL Rating: Recommend Description: Raises a finding for any hard-coded instance URLs Recommendation: Hard coded URLs to the instance make it difficult to move code between sub-prod and prod environments, causing broken links in at least one of the environments. Instead of hard coding, you might choose to use relative paths such as /incident.do or if you must use the instance URL use gs.getProperty('glide.servlet.uri'). Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: mylrn_surveyLink. Script:Found on line 4 Look on instance ACN WFH Findings Categorization Details Definition: HSD0001153: Hard coded instance URL Rating: Recommend Description: Raises a finding for any hard-coded instance URLs Recommendation: Hard coded URLs to the instance make it difficult to move code between sub-prod and prod environments, causing broken links in at least one of the environments. Instead of hard coding, you might choose to use relative paths such as /incident.do or if you must use the instance URL use gs.getProperty('glide.servlet.uri'). Documentation Click here for more details Table / Object Details Email Script [sys_script_email]: wfh_servicenow. Script:Found on line 3 Look on instance Email Script [sys_script_email]: wfh_BL_Approvals. Script:Found on line 7 Look on instance Email Script [sys_script_email]: wfh_req. Script:Found on line 5 Look on instance Email Script [sys_script_email]: wfh_contributor. Script:Found on line 3 Look on instance Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 178 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0001214: Report assigned to a non-existent group/user Rating: Discuss Description: In case a report is shared with a non-existent group/user, this might be a left over after the group/user was deleted. Admins should consider keeping those records up to date to keep the system manageable Recommendation: Update the report and share it only with valid groups/users known to the system. In the rare case the system creates a group/user with the same orphan sys_id, the report would otherwise immediately shared with the group/user. Documentation Click here for more details Table / Object Details Report Users and Groups [sys_report_users_groups]: WFH PH Reports, Group: 86bbd69bdb89101ce61cd054d4961938 Look on instance Incident Management Findings Categorization Details Definition: HSD0001164: Use state, not Incident State or Problem State Rating: Recommend Description: The task state field is the preferred, baseline method of capturing and changing the state of an incident or problem record. Recommendation: Use the state field, rather than the Incident State or Problem State fields. This may mean involve changes to your process. Documentation Click here for more details Table / Object Details incident [incident]: incident Look on instance problem [problem]: problem Look on instance x_xma_xmatters_xmatters_i ncident [x_xma_xmatters_xmatters_i ncident]: x_xma_xmatters_xmatters_incident Look on instance Agile Development Findings Categorization Details Definition: HSD0001187: Minimize logging in production Rating: Discuss Description: Turn debug logging off in production. It can affect performance, and potentially cause data leak challenges Recommendation: Remove the logging functions entirely or control their use with a property. At the minimum, switch to using gs.info and gs.debug Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 179 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Business Rule [sys_script]: Remove accenture data. Script:Found on line 11 Look on instance AIA Datalake Findings Categorization Details Definition: HSD0001187: Minimize logging in production Rating: Discuss Description: Turn debug logging off in production. It can affect performance, and potentially cause data leak challenges Recommendation: Remove the logging functions entirely or control their use with a property. At the minimum, switch to using gs.info and gs.debug Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: ACNBaseClass. Script:Found on line 39 Look on instance Ask HR Findings Categorization Details Definition: HSD0001187: Minimize logging in production Rating: Discuss Description: Turn debug logging off in production. It can affect performance, and potentially cause data leak challenges Recommendation: Remove the logging functions entirely or control their use with a property. At the minimum, switch to using gs.info and gs.debug Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: acn_askHRQuery. Script:Found on line 207 Look on instance BGC Fortify Findings Categorization Details Definition: HSD0001191: Report shared with a group which has no users Rating: Discuss Description: Report shared with a group which has no users. This definition scans up to 10 level of group hierarchy, in case reports are assigned to functional groups with no users and users are actually maintained on child groups. Recommendation: Check if the report should be really shared with this group and if not adjust the sharing options for it. Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 180 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Report Users and Groups [sys_report_users_groups]: BGC-RPT-RECRTR-SEA, Group: BGC-RPT-RECRTR-SEA Look on instance Report Users and Groups [sys_report_users_groups]: BGC-RPT-RECRTR-ASG, Group: BGC-RPT-RECRTR-ASG Look on instance Report Users and Groups [sys_report_users_groups]: BGC-RPT-RECRTR-Greater China, Group: BGC-RPT-RECRTR-Greater China Look on instance Report Users and Groups [sys_report_users_groups]: BGC-RPT-RECRTR-JPN, Group: BGC-RPT-RECRTR-JPN Look on instance Categorization Details Definition: HSD0001214: Report assigned to a non-existent group/user Rating: Discuss Description: In case a report is shared with a non-existent group/user, this might be a left over after the group/user was deleted. Admins should consider keeping those records up to date to keep the system manageable Recommendation: Update the report and share it only with valid groups/users known to the system. In the rare case the system creates a group/user with the same orphan sys_id, the report would otherwise immediately shared with the group/user. Documentation Click here for more details Table / Object Details Report Users and Groups [sys_report_users_groups]: Background Check Request Dashboard PHL, Group: a5814f00dbbd7344dd3cf5951d961935 Look on instance Report Users and Groups [sys_report_users_groups]: Unprocessed Taleo Records, Group: a5814f00dbbd7344dd3cf5951d961935 Look on instance Reporting Findings Categorization Details Definition: HSD0001202: Report assigned to a user which is not active Rating: Discuss Description: Report assigned to a user which is not active Recommendation: Check if the report should be really shared with this user and if not adjust the sharing options for it. Documentation Click here for more details Table / Object Details sys_report: You have 532 user assigned to reports which are no longer active. Look on instance Categorization Details Definition: HSD0001214: Report assigned to a non-existent group/user Rating: Discuss Description: In case a report is shared with a non-existent group/user, this might be a left over after the © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 181 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
group/user was deleted. Admins should consider keeping those records up to date to keep the system manageable Recommendation: Update the report and share it only with valid groups/users known to the system. In the rare case the system creates a group/user with the same orphan sys_id, the report would otherwise immediately shared with the group/user. Documentation Click here for more details Table / Object Details Report Users and Groups [sys_report_users_groups]: Tickets Assigned to My Group, User: 50ac29cfdb2843c0b6ca562bdc9619bd Look on instance Report Users and Groups [sys_report_users_groups]: Business Data Request Report, Group: 1f11a6682b365a00acd4d1cc27da152d Look on instance Integrations Findings Categorization Details Definition: HSD0001306: Debug properties should be disabled in production Rating: Discuss Description: Having debugging enabled unnecessarily can cause performance issues and possibly leak data. Recommendation: If not actively debugging in production, disable all debug system properties. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.authenticate.multisso.debug. true Look on instance Mobile Asset Findings Categorization Details Definition: HSD0001306: Debug properties should be disabled in production Rating: Discuss Description: Having debugging enabled unnecessarily can cause performance issues and possibly leak data. Recommendation: If not actively debugging in production, disable all debug system properties. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_mobl_asset.mobile.asset.debug. true Look on instance APIs and Integration Tools Findings Categorization Details Definition: HSD0003083: Scripted REST resource without enabled security Rating: Act Description: Scripted REST services offer 2 security options on resource level: requiring authentication © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 182 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
and requiring ACL authorization. At least one of them should be checked. Recommendation: Enable at least authorization, even for scripted REST services that don't alter data. Consider using ACL authorization as well, if data will be altered by the web service. Documentation Click here for more details Table / Object Details Scripted REST Resource [sys_ws_operation]: Update CI Record Look on instance Scripted REST Resource [sys_ws_operation]: updateComment Look on instance Scripted REST Resource [sys_ws_operation]: ipAddressAndLocation Look on instance Scripted REST Resource [sys_ws_operation]: Get Status Look on instance Categorization Details Definition: HSD0002825: glide.import.error_message.generic is not enabled. Rating: Recommend Description: When true, failed imports display a generic error instead of a verbose SQL message. Enabling this property is highly recommended. Recommendation: Enable glide.import.error_message.generic to improve user experience thus limiting exposure to error messages. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.import.error_message.generic Look on instance Categorization Details Definition: HSD0001600: Transform Script that run onBefore should not update() or insert() records on another table Rating: Discuss Description: A finding will be created for each transform script that uses updates or inserts on other tables than the traget table Recommendation: Avoid creating record other than the target table, otherwise the import could take a long time. Typically because the BR loging and potential additional logic will be triggered with every update. In addition, it is hard to find out from where a record was updated. Documentation Click here for more details Table / Object Details Transform Script [sys_transform_script]: onBefore in EAM BuyNow PO. Script:Found on line 26 Look on instance ACN NDDO Findings © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 183 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Network Device Deployment and Onboarding Look on instance ACN WPA Findings Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Work Permit Application Look on instance ACN_ASB Findings Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: MMS Integration Look on instance ACN_MOBILECP Findings Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 184 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Mobile Compliance Request - New Internal App Look on instance Knowledge Management Findings Categorization Details Definition: HSD0002029: Populate Knowledge Base articles fully Rating: Recommend Description: It is important to populate the relevant fields in each Knowledge Base article, so searching and other items work appropriately. Recommendation: All KB articles should have an Author and a Valid to date. A recommended practice would be to have a report or dashboard scheduled to find any offenders after this initial clean up is processed. Documentation Click here for more details Table / Object Details Knowledge [kb_knowledge]: KB0013369 v1.0 Look on instance Knowledge [kb_knowledge]: KB0010484 v1.0 Look on instance Knowledge [kb_knowledge]: KB0084530 v1.0 Look on instance Knowledge [kb_knowledge]: KB0000009 v1.0 Look on instance Categorization Details Definition: HSD0001888: Every Knowledge Base should have at least one Category defined. Rating: Recommend Description: Every Knowledge Base should have at least one Category defined. Recommendation: Every Knowledge Base should have at least one Category defined. Documentation Click here for more details Table / Object Details Knowledge Base [kb_knowledge_base]: Knowledge Base 'ACN WPA Knowledge' should have at least one category defined Look on instance Knowledge Base [kb_knowledge_base]: Knowledge Base 'Hours that Help' should have at least one category defined Look on instance Knowledge Base [kb_knowledge_base]: Knowledge Base 'Field Service Knowledge' should have at least one category defined Look on instance Knowledge Base Knowledge Base 'ClearPass (Accenture Corporate Devices) - Bulk Template' should have at © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 185 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[kb_knowledge_base]: least one category defined Look on instance Acn Dir Findings Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_dir.glide.script.block.client.globals. false Look on instance ACN ESA Findings Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_acnesa.glide.script.block.client.globals. false Look on instance ACN Former Employee Findings Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 186 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_former.glide.script.block.client.globals. false Look on instance ACN GCP Findings Categorization Details Definition: HSD0002688: New globally-scoped client-side scripts don't run in strict mode and DOM access enabled. Rating: Recommend Description: A key feature of scoped applications is their isolation from one-another. The platform enforces this isolation to ensure each applications independence. Along with many other parts of the platform, this enforcement occurs in client-side scripting. Recommendation: Enable system property "glide.script.block.client.globals" if you have no need to to access global JavaScript objects. Documentation Click here for more details Table / Object Details System Property [sys_properties]: x_amspi_acn_gcp.glide.script.block.client.globals. false Look on instance ACN PA Findings Categorization Details Definition: HSD0001600: Transform Script that run onBefore should not update() or insert() records on another table Rating: Discuss Description: A finding will be created for each transform script that uses updates or inserts on other tables than the traget table Recommendation: Avoid creating record other than the target table, otherwise the import could take a long time. Typically because the BR loging and potential additional logic will be triggered with every update. In addition, it is hard to find out from where a record was updated. Documentation Click here for more details Table / Object Details Transform Script [sys_transform_script]: onBefore in ACN PA Bulk Activities Transform. Script:Found on lines 139, 156 and 225. Found on lines 37 and 253 Look on instance Transform Script [sys_transform_script]: onBefore in ACN_PA_Bulk_Projects_Transform. Script:Found on line 109. Found on lines 44 and 69 Look on instance Transform Script [sys_transform_script]: onBefore in ACN PA Activities Map. Script:Found on lines 65, 82 and 150. Found on line 175 Look on instance Transform Script [sys_transform_script]: onBefore in ACN PA Projects List Map. Script:Found on line 48 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 187 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Change Management Findings Categorization Details Definition: HSD0001646: Workflow(s) should not be checked out for an extended time Rating: Discuss Description: A workflow version that is checked out isn't available for general use. Be sure to publish once edits are done. Recommendation: Follow up with owner of the checked out version and ensure the changes were made appropriate and/or remove the checked out version. Documentation Click here for more details Table / Object Details Workflow Version [wf_workflow_version]: Comprehensive Change Look on instance Service Catalog Findings Categorization Details Definition: HSD0001646: Workflow(s) should not be checked out for an extended time Rating: Discuss Description: A workflow version that is checked out isn't available for general use. Be sure to publish once edits are done. Recommendation: Follow up with owner of the checked out version and ensure the changes were made appropriate and/or remove the checked out version. Documentation Click here for more details Table / Object Details Workflow Version [wf_workflow_version]: ns_Transition_Process_subflow_NewProject_Infrastructure Look on instance Workflow Version [wf_workflow_version]: dim_ciw_workflow_v2 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 188 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Performance Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 4 ACN BCTAPP 1 1 ACN Former Employee 1 ACN SAC 4 ACN WFH 2 ACN WPA 1 ACN_ASB 1 1 ACN_MOBILECP 6 1 ACN_PCHW_GPRT 3 4 3 Admin Account Request 1 AEE Ideas 1 Agile Development 1 AIA Datalake 1 AP20 Real Estate 22 1 APIs and Integration Tools 249 35 48 AppEngine 60 Ask PM 1 9 Asset Management 2 7 Audit Tax App 4 Automated Testing Framework 1 BGC Fortify 8 8 25 Biz Approval 1 Case and Knowledge Management 5 10 8 CDP 3 Change Management 3 Clear Pass 1 2 Client Tax Matters 2 Complaint Management Tool 4 Configuration Management Database 7 17 Connect Support 2 Contract Management 1 CRS 2 Data Privacy 1 Disability 1 10 E2E 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 189 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Employee Data Change 2 Employee Exit 1 Enterprise Insight 2 Fac Compliance 7 1 Fixed Assets Change 2 5 Full and Final Exit 6 4 Holiday Payout 3 1 Hours That Help 1 4 Incident Management 1 7 11 Integrations 1 2 Leave of Absence 10 2 Major Incident Management 11 My Access 1 PAM Password Rotataion 1 Payroll 1 Payroll Uploads 1 Performance Analytics 2 PIP Probation 4 Platform Foundation 29 1270 178 Problem Management 2 4 Reporting 1 Salesforce Integration 1 Service Catalog 296 101 Service Portal Designer 1 Software Asset Management 2 Source To Pay 3 1 Time Card Management 1 TSEF 1 Walk-up Experience 4 Case and Knowledge Management Findings Categorization Details Definition: HSD0001022: Excessive Client Scripts Rating: Recommend Description: More than 10 custom Client Scripts on the table is typically unnecessary. Investigate why so much code is being written. Recommendation: Check if the functionality is necessary. Often client side scripts can typically be remade as server side scripts, which will often perform much faster. Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 190 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
hr_case: 64 Look on instance Categorization Details Definition: HSD0001347: Client-side code should not use GlideRecord Rating: Discuss Description: The client side GlideRecord object is often inefficent, because it returns lots of unecessary data. GlideRecord and g_form.getReference are both involved. Recommendation: Use client data as much as possible to eliminate the need for time-consuming server lookups. The top ways to get information from the server are g_scratchpad, and asynchronous GlideAjax lookup. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: u_HRCM_CS_EscalationSubject. Script:Found on line 9 Look on instance Client Script [sys_script_client]: u_HRCM_CS_hide_attachments. Script:Found on line 16 Look on instance Client Script [sys_script_client]: u_HRCM_CS_EscalationOpenedfor. Script:Found on line 8 Look on instance Change Management Findings Categorization Details Definition: HSD0001022: Excessive Client Scripts Rating: Recommend Description: More than 10 custom Client Scripts on the table is typically unnecessary. Investigate why so much code is being written. Recommendation: Check if the functionality is necessary. Often client side scripts can typically be remade as server side scripts, which will often perform much faster. Documentation Click here for more details Table / Object Details change_request: 25 Look on instance Incident Management Findings Categorization Details Definition: HSD0001022: Excessive Client Scripts Rating: Recommend Description: More than 10 custom Client Scripts on the table is typically unnecessary. Investigate why so much code is being written. Recommendation: Check if the functionality is necessary. Often client side scripts can typically be remade as © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 191 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
server side scripts, which will often perform much faster. Documentation Click here for more details Table / Object Details incident: 51 Look on instance Platform Foundation Findings Categorization Details Definition: HSD0001022: Excessive Client Scripts Rating: Recommend Description: More than 10 custom Client Scripts on the table is typically unnecessary. Investigate why so much code is being written. Recommendation: Check if the functionality is necessary. Often client side scripts can typically be remade as server side scripts, which will often perform much faster. Documentation Click here for more details Table / Object Details psp_bulk_share: 33 Look on instance alm_license: 16 Look on instance Categorization Details Definition: HSD0001049: Avoid Global UI Scripts Rating: Recommend Description: Global UI scripts are loaded on every single page/form in ServiceNow even if the code within them is not called. Recommendation: Make the UI Script non-global, and include the UI Script on the appropriate page by referencing the script as needed Documentation Click here for more details Table / Object Details UI Script [sys_ui_script]: PIWIK Tracking Code Look on instance UI Script [sys_ui_script]: BroadcastChannel Look on instance UI Script [sys_ui_script]: Service Portal Catalog Checkout Redirect Look on instance UI Script [sys_ui_script]: Hide Filters Look on instance Categorization Details Definition: HSD0001085: LDAP Server definition should limit attributes retrieved © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 192 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Recommend Description: By default, the system loads all of the attributes for each object that it has permission to read from your LDAP server. Using the Attributes field, you can specify and thereby limit the attributes the LDAP query returns. Using this approach for large LDAP imports can greatly improve the speed of those imports. Recommendation: Consider using the attributes property to limit retrieved LDAP fields to those that are used in the transform (map and scripts). See link for details. Documentation Click here for more details Table / Object Details LDAP Server [ldap_server_config]: LDAPACNMANACCSServer Look on instance LDAP Server [ldap_server_config]: AccentureLDAPAMRDC Look on instance Categorization Details Definition: HSD0001124: Index Suggestions for Slow Queries should be reviewed Rating: Discuss Description: The Index Suggestion Engine generates index suggestions for slow queries. Recommendation: Review index suggestions and create new indexes based on the recommendations: - Index Suggestions should be reviewed and the appropriate action should be taken. - The Slow Query log should be reviewed, and the Index Suggestion Engine be utilized. Documentation Click here for more details Table / Object Details sys_index_suggestion: There were no Index Suggestions created in the last 30 days. However, there are currently 2333 slow queries that regularly run for more than a second, these should be reviewed regulary. Use the Index Suggestion Engine to optimize Slow Queries. Look on instance Categorization Details Definition: HSD0001627: Do not query audit log in your custom integrations and code. Rating: Recommend Description: The audit log is typically very large and inefficient queries will cause performance issues. Recommendation: Determine if querying the audit log is strictly necessary, and remove as appropriate. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: EAMSAMSurrenderLicense. Script:Found on line 564 Look on instance Script Include [sys_script_include]: PerspectiumJournalField. Script:Found on line 14 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 193 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001632: Long running (slow) scripts Rating: Recommend Description: The instance detects scripts that take a long time to execute and records them in the sys_script_pattern table. You can access the table by navigating to System Diagnosis > Stats > Slow Scripts. Recommendation: This script has been identified as slow running. It should be evaluated for reasons why, and optimizations made as appropriate. Documentation Click here for more details Table / Object Details Slow Scripts [sys_script_pattern]: sys_transform_script:onBefore Look on instance Slow Scripts [sys_script_pattern]: sys_script:update BGC Tasks Look on instance Slow Scripts [sys_script_pattern]: sysevent_in_email_action:Update HR Exit Request Look on instance Slow Scripts [sys_script_pattern]: sys_script:Perspectium Replicate Look on instance Reporting Findings Categorization Details Definition: HSD0001034: Reports with very long execution times Rating: Recommend Description: Reports which take a long time to execute might run with inefficient filter conditions and perform operations on large data sets. Recommendation: Investigate Report Statistics for long running reports and review conditions used in the longest running queries. Remove inefficient queries using "is one of" or "contains"/"does not contain" and replace them with more efficient conditions like "starts with"/"ends with". Documentation Click here for more details Table / Object Details report_stats: You have 7632 reports running longer on average as 10000 milliseconds. Look on instance ACN WPA Findings Categorization Details Definition: HSD0001128: Client-side code should not use synchronous AJAX methods Rating: Recommend Description: Code that uses synchronous AJAX feels very slow. It is detrimental to the user experience. Recommendation: For data that can change during the user experience, replace g_form.getReference with GlideAjax, a callback function, and a custom function in a Script Include that returns only the needed information. For data that remains the same after the form loads and can be determined before the form loads, replace g_form.getReference with a Display Business Rule and g_scratchpad. If using getXMLWait, replace with getXML and a callback function. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 194 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: WPA Preview document dialog. Client script:Found on line 101 Look on instance ACN_PCHW_GPRT Findings Categorization Details Definition: HSD0001128: Client-side code should not use synchronous AJAX methods Rating: Recommend Description: Code that uses synchronous AJAX feels very slow. It is detrimental to the user experience. Recommendation: For data that can change during the user experience, replace g_form.getReference with GlideAjax, a callback function, and a custom function in a Script Include that returns only the needed information. For data that remains the same after the form loads and can be determined before the form loads, replace g_form.getReference with a Display Business Rule and g_scratchpad. If using getXMLWait, replace with getXML and a callback function. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: pchw_gprt_deactivate_invitation_modal. Client script:Found on line 10 Look on instance UI Page [sys_ui_page]: pchw_gprt_programC_excludeUser_modal. Client script:Found on line 14 Look on instance UI Page [sys_ui_page]: pchw_gprt_programC_addSelected_modal. Client script:Found on line 14 Look on instance UI Page [sys_ui_page]: pchw_gprt_programC_sendInvitation_modal. Client script:Found on line 16 Look on instance Categorization Details Definition: HSD0001347: Client-side code should not use GlideRecord Rating: Discuss Description: The client side GlideRecord object is often inefficent, because it returns lots of unecessary data. GlideRecord and g_form.getReference are both involved. Recommendation: Use client data as much as possible to eliminate the need for time-consuming server lookups. The top ways to get information from the server are g_scratchpad, and asynchronous GlideAjax lookup. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: pchw_gprt_deactivate_invitation_modal. Client script:Found on line 26 Look on instance APIs and Integration Tools Findings Categorization Details Definition: HSD0001268: Fields used to coalesce in a Table Transform Maps should be indexed © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 195 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Recommend Description: Importing data is system intensive. Coalesced fields should have indexes on to improve performance. Recommendation: When possible, coalesce on a field that is unique and indexed. Use the options in the transform map to add an index if necessary. Documentation Click here for more details Table / Object Details Field Map [sys_transform_entry]: tm_mrdr_costcenterhierarchy_delta: u_hierarchycd Look on instance Field Map [sys_transform_entry]: ACNMRDRRoleValidation: u_rolecd Look on instance Field Map [sys_transform_entry]: ACNMRDRXWorkForceCareerLevel: u_xworkforcecareerlevelcd Look on instance Field Map [sys_transform_entry]: EAM BuyNow PO Line Item: u_pol_line Look on instance Categorization Details Definition: HSD0001546: Table Transform Maps generally do not need "Run business rules" enabled Rating: Discuss Description: This option may cause the transform to take longer than expected, or cause the instance to slow down. Recommendation: Unless you need business rules to run during the transform, un-check the 'Run business rules' checkbox on the Table Transform Map when transforming large amounts of data (or high volume data). Documentation Click here for more details Table / Object Details Table Transform Map [sys_transform_map]: tm_mrdr_contract Look on instance Table Transform Map [sys_transform_map]: EAM SAP Scrap Invoice ZF127 Look on instance Table Transform Map [sys_transform_map]: ACNMRDRJob Look on instance Table Transform Map [sys_transform_map]: ds_dsrm_vlan_ticketDetail_transformMap Look on instance Categorization Details Definition: HSD0001554: JDBC Data Sources should have the "Use last run datetime" option checked Rating: Act Description: Repeatedly importing data that has not changed leads to many skipped rows and unnecessarily bounds system resources. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 196 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Ensure that each import is not importing all records every time by using the 'Use Last Run Datetime' option. If you are running a JDBC import, use the last run datetime option in your import set Data Source. For a type of File import, be sure that whatever is generating your files is only adding data that is new, or has been changed. Documentation Click here for more details Table / Object Details Data Source [sys_data_source]: EAM SAP ZA02 Look on instance Data Source [sys_data_source]: tbl_ITSM_CurrentDeltaV2 Look on instance Data Source [sys_data_source]: ACNFNMSLoadBalancerLoad Look on instance Data Source [sys_data_source]: CRA.Preprod.SCCM.Network Look on instance BGC Fortify Findings Categorization Details Definition: HSD0001347: Client-side code should not use GlideRecord Rating: Discuss Description: The client side GlideRecord object is often inefficent, because it returns lots of unecessary data. GlideRecord and g_form.getReference are both involved. Recommendation: Use client data as much as possible to eliminate the need for time-consuming server lookups. The top ways to get information from the server are g_scratchpad, and asynchronous GlideAjax lookup. Documentation Click here for more details Table / Object Details Catalog Client Scripts [catalog_script_client]: Check if the Request is present. Script:Found on line 49 Look on instance ACN BCTAPP Findings Categorization Details Definition: HSD0001358: Server-side code should not use GlideRecord.getRowCount() to count records Rating: Recommend Description: The GlideRecord.getRowCount() works by getting the whole result set without using the build-in arithmetic functions of the database. GlideAggregate does use the database, therefore is often drastically faster. The exception to this recommendation is if you intend to loop through the records and process them anyway. Recommendation: Replace GlideRecord with GlideAggregate and a 'COUNT' aggregate to improve performance. This could make a large impact when working on tables with a high record count Documentation Click here for more details Table / Object Details Scheduled Script Execution acn_ptat_fix_stuck_workflow_task. Run this script:Found on lines 5 and 21 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 197 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[sysauto_script]: Look on instance Categorization Details Definition: HSD0001561: Client Scripts should check for isLoading and return Rating: Discuss Description: Try to minimise the amount of scripts that run on load. Recommendation: The isLoading flag is the simplest way to prevent unnecessary code from taking up browser time in onChange scripts. The isLoading flag should be used at the beginning of any script that is not required to run when the form is loading. Add "if (isLoading) return;" as the first statement of the onChange function. Documentation Click here for more details Table / Object Details Catalog Client Scripts [sys_script_client]: BCTAPP : Auto Set Home Office Country Look on instance ACN Former Employee Findings Categorization Details Definition: HSD0001358: Server-side code should not use GlideRecord.getRowCount() to count records Rating: Recommend Description: The GlideRecord.getRowCount() works by getting the whole result set without using the build-in arithmetic functions of the database. GlideAggregate does use the database, therefore is often drastically faster. The exception to this recommendation is if you intend to loop through the records and process them anyway. Recommendation: Replace GlideRecord with GlideAggregate and a 'COUNT' aggregate to improve performance. This could make a large impact when working on tables with a high record count Documentation Click here for more details Table / Object Details Scheduled Script Execution [sysauto_script]: Daily Report For Workday Ops Team - Address Update. Condition:Found on line 13 Look on instance ACN SAC Findings Categorization Details Definition: HSD0001358: Server-side code should not use GlideRecord.getRowCount() to count records Rating: Recommend Description: The GlideRecord.getRowCount() works by getting the whole result set without using the build-in arithmetic functions of the database. GlideAggregate does use the database, therefore is often drastically faster. The exception to this recommendation is if you intend to loop through the records and process them anyway. Recommendation: Replace GlideRecord with GlideAggregate and a 'COUNT' aggregate to improve performance. This could make a large impact when working on tables with a high record count Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 198 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details Scripted REST Resource [sys_ws_operation]: getSoftwareADPermissions. Script:Found on line 37 Look on instance Script Include [sys_script_include]: SACV2_Utils. Script:Found on lines 819 and 1143 Look on instance Widget [sp_widget]: SAC Search box. Server script:Found on line 45 Look on instance AppEngine Findings Categorization Details Definition: HSD0002068: current.update() in script workflow activity Rating: Act Description: The Run Script activity runs the specified script in the scope of the workflow version. All changes to current are automatically updated. There is no need to call current.update(). This may cause issues. Recommendation: You don't need to use current.update() in a run script. All changes into current is automatically updated. Documentation Click here for more details Table / Object Details Workflow Activity [wf_activity]: Geographic Unit Approved. 32 Look on instance Workflow Activity [wf_activity]: Ogranization Entity Approved. 32 Look on instance Workflow Activity [wf_activity]: Set Date Closed. 3 Look on instance Workflow Activity [wf_activity]: Set Cancelled Values. 4 Look on instance Biz Approval Findings Categorization Details Definition: HSD0001452: GlideRecord in calculated fields Rating: Discuss Description: GlideRecord should be avoided in a calculated field Recommendation: GlideRecord queries in a calculated field may cause performance issues since the script is run very frequently. Instead, consider using Function Fields Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Attachments Look on instance CDP Findings © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 199 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001452: GlideRecord in calculated fields Rating: Discuss Description: GlideRecord should be avoided in a calculated field Recommendation: GlideRecord queries in a calculated field may cause performance issues since the script is run very frequently. Instead, consider using Function Fields Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Operating Group Look on instance Dictionary Entry [sys_dictionary]: Operating Group Look on instance Disability Findings Categorization Details Definition: HSD0001452: GlideRecord in calculated fields Rating: Discuss Description: GlideRecord should be avoided in a calculated field Recommendation: GlideRecord queries in a calculated field may cause performance issues since the script is run very frequently. Instead, consider using Function Fields Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: First Name Look on instance Dictionary Entry [sys_dictionary]: Date of Escalation Look on instance ACN AMC Findings Categorization Details Definition: HSD0001561: Client Scripts should check for isLoading and return Rating: Discuss Description: Try to minimise the amount of scripts that run on load. Recommendation: The isLoading flag is the simplest way to prevent unnecessary code from taking up browser time in onChange scripts. The isLoading flag should be used at the beginning of any script that is not required to run when the form is loading. Add "if (isLoading) return;" as the first statement of the onChange function. Documentation Click here for more details Table / Object Details Catalog Client Scripts [sys_script_client]: amc_onChange_SupportType Look on instance Catalog Client Scripts onChange_effortCostVisibility © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 200 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[sys_script_client]: Look on instance Catalog Client Scripts [sys_script_client]: amc_onChange_RequestType Look on instance Catalog Client Scripts [sys_script_client]: amc_onChange_salesValue Look on instance ACN_ASB Findings Categorization Details Definition: HSD0001623: Read ACLs (Security rules) should not have GlideRecord/GlideAggregate in script Rating: Act Description: Read ACLs are frequently executed. Having complex database lookups can harm performance. Recommendation: Avoid database lookups in Access Control rules, as this can significantly impact performance. Documentation Click here for more details Table / Object Details Access Control [sys_security_acl]: x_amspi_acn_asb_request. Script:Found on lines 13, 49 and 58 Look on instance ACN_MOBILECP Findings Categorization Details Definition: HSD0001623: Read ACLs (Security rules) should not have GlideRecord/GlideAggregate in script Rating: Act Description: Read ACLs are frequently executed. Having complex database lookups can harm performance. Recommendation: Avoid database lookups in Access Control rules, as this can significantly impact performance. Documentation Click here for more details Table / Object Details Access Control [sys_security_acl]: x_amspi_acn_mobile_compliance_publishing.opened_by. Script:Found on line 3 Look on instance Access Control [sys_security_acl]: x_amspi_acn_mobile_ext_mobile_compliance_publishing.opened_by. Script:Found on line 3 Look on instance Access Control [sys_security_acl]: x_amspi_acn_mobile_update_mobile_compliance_publishing.opened_by. Script:Found on line 3 Look on instance Access Control [sys_security_acl]: x_amspi_acn_mobile_ext_mobile_compliance_publishing. Script:Found on line 3 Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 201 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Security Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss Platform 1 Platform Foundation 1 8 2 Platform Foundation Findings Categorization Details Definition: HSD0003331: SNC Access Control plugin allows customers to control access by ServiceNow Customer Support Rating: Discuss Description: The SNC Access Control plugin allows customers to control access by ServiceNow Customer Support to their instances. The default configuration for the ServiceNow platform allows Customer Support to access customer instances through an internal process that creates short-term support credentials. Although all access is audited, some customers prefer to control this access. Recommendation: Activate and configure SNC Access Control as per documentation, to allow for added security of who can access the instance. Documentation Click here for more details Table / Object Details : Custom Finding Look on instance Categorization Details Definition: HSD0004060: Only allow acceptable file extensions to be uploaded during file attachment Rating: Recommend Description: The glide.attachment.extensions property restricts the file extensions that are permissible to upload as attachments. Use this property to improve security by preventing users from uploading harmful files, such as viruses, as attachments. Additionally, this functionality can prevent the use of incompatible file types. For example, Internet Explorer does not support icons in .png format. Note that this property does not restrict files based on the actual file type, but only based on the extension. If no extensions are specified, then all extensions are allowed. However, if any extensions are specified, all unlisted extensions are restricted. Note: This property is prerequisite for '6.5 Upload MIME Type Restriction' as only those extensions specified within this property will be checked for MIME type during upload. Recommendation: Add file extensions that can be uploaded to the instance. For example: xls,xlsx,doc,docx,pdf Documentation Click here for more details Table / Object Details : Custom Finding Look on instance Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 202 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0004448: Allow Entity Validation with Whitelisting Rating: Recommend Description: This remediation control needs to be enabled to defend against XML External Entity attacks. Recommendation: This remediation control needs to be enabled to defend against XML External Entity attacks. The system property 'glide.stax.whitelist_enabled' allows the processing (using XMLDocument2) of external entities that are whitelisted. Prerequisite: 'glide.xml.entity.whitelist.enabled' set to 'true' & 'glide.xml.entity.whitelist' that defines allowed entity path Documentation Click here for more details Table / Object Details : glide.stax.whitelist_enabled Look on instance Categorization Details Definition: HSD0003041: Convert Inbound Email HTML Rating: Recommend Description: The system displays broken cid (content ID) links in place of images received when glide.email.inbound.convert_html_inline_attachment_references property is to false. Verifies this property is true. This property specifies whether to convert inbound email HTML so email images appear in the email HTML body preview. The format in which the system displays an email image depends on the property setting at the time the email is received, not the current property setting. Recommendation: https://docs.servicenow.com/bundle/london-servicenow- platform/page/administer/reference-pages/concept/c_EmailProperties.html https://docs.servicenow.com/bundle/london-servicenow- platform/page/administer/reference-pages/reference/r_InboundMailConfiguration.html Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.email.inbound.convert_html_inline_attachment_references. true Look on instance Categorization Details Definition: HSD0003385: Restrict Emails by Domain Rating: Recommend Description: Trusts domains when creating users from incoming emails. Specifies the comma-separated list of trusted domains for creating users from incoming emails. By default, an asterisk (*) is used to trust all domains. Specific domains should be provided if it is not required to allow email from every domain. The instance ignores incoming email from other domains unless it is from an existing user's address. The instance will not create guest users from untrusted domains. Recommendation: Restrict domains from which emails would automatically create users. Trusted domains can be entered as a comma separated list in the glide.user.trusted_domain system property. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 203 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Table / Object Details System Property [sys_properties]: glide.user.trusted_domain. * Look on instance Categorization Details Definition: HSD0001354: Upload MIME Type Restriction should be enabled Rating: Recommend Description: This property must be set to activate MIME type checking for uploads . Enables (true) or disables (false) mime type validation for file attachments. File extensions configured via glide.attachment.extensions are checked for MIME type during upload. Check if glide.security.file.mime_type.validation is set to false and recommend set to true Recommendation: Enable Upload MIME Type Restriction Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.security.file.mime_type.validation. false Look on instance Categorization Details Definition: HSD0004442: Disable Entity Expansion Rating: Act Description: This remediation control needs to be enabled to defend against XML Entity Expansion/Billion Laugh attack. If the customization does not require entity expansion, use this property to completely disable the external entity expansion. The XML will complete parsing but will not include any internal or external entities. True: All external entities will attempt resolve/expand subject to glide.stax.whitelist_enabled. False: Blocks all entity resolution/expansion. (Recommended) Recommendation: Set value of the system property 'glide.stax.allow_entity_resolution' to 'false' to defend against XML Entity Expansion/Billion Laugh attack. If the customization does require entity expansion, set this property to 'true' and follow the steps mentioned at https://hi.service- now.com/kb_view.do?sysparm_article=KB0550654#10.4.2.2 External Reference: https://en.wikipedia.org/wiki/Billion_laughs_attack | https://cwe.mitre.org/data/definitions/776.html Documentation Click here for more details Table / Object Details sys_properties: glide.stax.allow_entity_resolution Look on instance Categorization Details Definition: HSD0002959: Disable SQL error messages Rating: Recommend Description: Administrators can create a new system property that prevents raw SQL error messages from rendering on the browser © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 204 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Create the glide.db.loguser system property with a value of 'false'. No sensitive SQL information should be allowed to display as a part of error message on a webpage that could help an attacker. This setting does not impact functionality. Documentation Click here for more details Table / Object Details sys_properties: glide.db.loguser Look on instance Categorization Details Definition: HSD0003030: Enable Privacy on Client-Callable Script Includes Rating: Recommend Description: The glide.script.ccsi.ispublic provides privacy control over client-callable script includes that are accessed by public pages. When this property is set to false, all client-callable script includes are private. This property can be added to provide control over all client callable script includes. Recommendation: Add the "glide.script.ccsi.ispublic" property and set the value to false. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.script.ccsi.ispublic Look on instance Categorization Details Definition: HSD0001557: Enforce strong passwords Rating: Recommend Description: Ensure that strong passwords are being used to improve isntance security. Recommendation: Enable "Enforce Strong Passwords" installation exit Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.enable.password_policy Look on instance Categorization Details Definition: HSD0001635: Disable Embedded HTML Code property Rating: Discuss Description: Check of a system property (glide.ui.security.allow_codetag) according to ServiceNow instance hardening customer security document Recommendation: Disable the Allow Embedded HTML Code property. There is an associated security risk. If the glide.ui.security.allow_codetag property is set to true, any malicious user can write harmful HTML JS code that may be executed on a different client browser after the journal fields are rendered. ServiceNow Security recommends setting this property to false so that administrators can prevent journal fields from rendering HTML code by disabling support © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 205 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
for the [code] tag. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.ui.security.allow_codetag. true Look on instance Platform Findings Categorization Details Definition: HSD0001639: Enable IP Range Based Authentication Rating: Discuss Description: One way to secure a web-based application is to restrict access based on the IP address. You can block access to a specific address or range of addresses that you suspect belong to malicious individuals. The instance allows you to control access by IP address. Recommendation: Navigate to System Security > IP Address Access Control to manage the list of IP address that you want to allow or deny. Documentation Click here for more details Table / Object Details ip_access: No entry in the IP Address Access Control Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 206 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Upgradeability Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 5 ACN BCTAPP 1 Acn Dir 1 ACN Document Builder 3 ACN Guided Workflow 1 ACN PA 2 ACN SAC 4 ACN WFH 1 ACN_PCHW_GPRT 7 Admin Account Request 1 AEE Ideas 1 AP20 Real Estate 8 Asset & Cost Management 1 Asset Management 5 Automated Testing Framework 1 BGC Fortify 6 Business Support Request 1 Case and Knowledge Management 13 8 CDP 1 Change Management 1 3 Clear Pass 2 Client Tax Matters 2 Cloud Management 1 Contract Management 1 Data Privacy 9 Disability 3 Discovery 1 1 Discovery and Service Mapping Patterns 1 Event Management 1 Facilities Service Management 1 Financial Reporting 1 Fixed Assets Change 1 Holiday Payout 1 Incident Management 2 5 Instance Security Dashboard (PA) 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 207 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Integrations 1 1 Knowledge Management 3 Major Incident Management 1 Managed documents 1 MS Teams Recording Enablement 1 My Access 7 On-Call Scheduling 4 PDF Generator 2 PIP Probation 1 Platform Foundation 139 17 Procurement 1 Query stats 1 Service Catalog 262 5 Service Level Management 2 Service Mapping 1 Service Portal Designer 1 1 Software Asset Management 5 Source To Pay 3 Task-Outage Relationship 1 Time Card Management 1 2 TRIPP 2 Workflow 2 Workflow Runtime Engine 3 Asset & Cost Management Findings Categorization Details Definition: HSD0001664: Differs from baseline: Script Includes Rating: Recommend Description: These Script Includes have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: ModelAndCategoryFilters Look on instance Case and Knowledge Management Findings Categorization Details Definition: HSD0001664: Differs from baseline: Script Includes © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 208 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Recommend Description: These Script Includes have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: hr_Task Look on instance Script Include [sys_script_include]: GeneralHRForm Look on instance Script Include [sys_script_include]: hr_Case Look on instance Categorization Details Definition: HSD0001662: Differs from baseline: Business Rules Rating: Recommend Description: These Business Rules have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these Business Rules and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Restrict query Look on instance Categorization Details Definition: HSD0001761: Differs from baseline: UI actions Rating: Recommend Description: These UI actions have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these UI Actions and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Ready for Work Look on instance Contract Management Findings Categorization Details Definition: HSD0001664: Differs from baseline: Script Includes © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 209 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Recommend Description: These Script Includes have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: ConditionChecks Look on instance ACN AMC Findings Categorization Details Definition: HSD0001142: Client-side code should not use DOM manipulation technique Rating: Act Description: This customization technique gives a lot of control, but does frequently cause upgrade challenges. It is recommended not to use jQuery, PrototypeJS, gel and other techniques Recommendation: Avoid Document Object Model (DOM) manipulation if possible. It can cause a maintainability issue when the instance is updated. The only exception is when you are in charge of the DOM: in UI Pages, and the Service Portal. Instead, use the GlideForm API or consider a different approach for the solution. In general, when using DOM manipulation methods, you have to reference an element in the DOM by id or using a CSS selector. When referencing out-of-box DOM elements, there is a risk that the element ID or placement within the DOM could change thus causing the code to stop working and/or generate errors. If DOM manipulation is done, it needs to be done with forethought, caution, and a full understanding of the risk you are incurring. Review these objects and reduce the use of DOM manipulation methods as much as possible. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: onLoad_task. Script:Found on lines 252, 530, 531, 532 and 533 Look on instance Client Script [sys_script_client]: amc_task_onSubmit. Script:Found on line 32 Look on instance UI Script [sys_ui_script]: x_amspi_acn_amc_2.angular-bootstrap-cale. Script:There are lots of matches. Showing the first 10: lines 782, 783, 785, 787, 789, 911, 912, 91 Look on instance UI Script [sys_ui_script]: x_amspi_acn_amc_2.moment 2.17.1. Script:Found on lines 39, 39, 39 and 424 Look on instance Asset Management Findings Categorization Details Definition: HSD0001662: Differs from baseline: Business Rules Rating: Recommend Description: These Business Rules have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 210 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Recommendation: Review the changes to these Business Rules and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Business Rule [sys_script]: Sync model category Look on instance Business Rule [sys_script]: Merge Records Look on instance Business Rule [sys_script]: Create asset on model change Look on instance Business Rule [sys_script]: Asset Retirement Look on instance Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: Set Location from stockroom Look on instance Platform Foundation Findings Categorization Details Definition: HSD0001666: Differs from baseline: UI Macros and UI Pages Rating: Recommend Description: These UI Macros and UI Pages have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: attachment Look on instance Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 211 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: Conditionally Set Type for Surveys Look on instance Service Catalog Findings Categorization Details Definition: HSD0001666: Differs from baseline: UI Macros and UI Pages Rating: Recommend Description: These UI Macros and UI Pages have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: com.glideapp.servicecatalog_checkout_view_v2 Look on instance Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: Hide roles field Look on instance Software Asset Management Findings Categorization Details Definition: HSD0001666: Differs from baseline: UI Macros and UI Pages Rating: Recommend Description: These UI Macros and UI Pages have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these scripts and revert to the baseline version if appropriate. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 212 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Page [sys_ui_page]: samp_license_workbench_list Look on instance BGC Fortify Findings Categorization Details Definition: HSD0001404: Scripts should not directly call Java packages Rating: Act Description: Java packages are effectively unsupported API calls. They should not be used. Recommendation: Run the Package Call Removal Tool, and replace all Java package calls with the Glide alternative Documentation Click here for more details Table / Object Details MID Server Script Include [ecc_agent_script_include]: taleoSqlQuery. Script:There are lots of matches. Showing the first 10: lines 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 Look on instance Script Include [sys_script_include]: BGC_Update_Package_Master_Table. Script: Look on instance Cloud Management Findings Categorization Details Definition: HSD0001404: Scripts should not directly call Java packages Rating: Act Description: Java packages are effectively unsupported API calls. They should not be used. Recommendation: Run the Package Call Removal Tool, and replace all Java package calls with the Glide alternative Documentation Click here for more details Table / Object Details MID Server Script Include [ecc_agent_script_include]: AzureStorageManagedDisk. Script:Found on lines 4, 5, 151, 151, 151, 156 and 162. Found on line 4 Look on instance Discovery Findings Categorization Details Definition: HSD0001404: Scripts should not directly call Java packages Rating: Act Description: Java packages are effectively unsupported API calls. They should not be used. Recommendation: Run the Package Call Removal Tool, and replace all Java package calls with the Glide alternative © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 213 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Documentation Click here for more details Table / Object Details Sensor [discovery_sensor]: Windows - Classify. Script:Found on line 104 Look on instance Discovery and Service Mapping Patterns Findings Categorization Details Definition: HSD0001404: Scripts should not directly call Java packages Rating: Act Description: Java packages are effectively unsupported API calls. They should not be used. Recommendation: Run the Package Call Removal Tool, and replace all Java package calls with the Glide alternative Documentation Click here for more details Table / Object Details Script Include [sys_script_include]: CloudVendorWhiteList. Script:Found on lines 15 and 32 Look on instance Automated Testing Framework Findings Categorization Details Definition: HSD0001761: Differs from baseline: UI actions Rating: Recommend Description: These UI actions have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these UI Actions and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Execute Now Look on instance Change Management Findings Categorization Details Definition: HSD0001761: Differs from baseline: UI actions Rating: Recommend Description: These UI actions have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these UI Actions and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Execute Risk Calculation © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 214 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Script [sys_ui_script]: change_calendar.vcal.snChangeCabCalendar Look on instance Incident Management Findings Categorization Details Definition: HSD0001761: Differs from baseline: UI actions Rating: Recommend Description: These UI actions have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these UI Actions and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Action [sys_ui_action]: Metrics Timeline Look on instance UI Action [sys_ui_action]: Spam Look on instance Service Portal Designer Findings Categorization Details Definition: HSD0001665: Differs from baseline: Client Scripts (and UI Scripts) Rating: Recommend Description: These client side scripts have been modified from the OOTB baseline. These scripts will not be altered upon an upgrade. Recommendation: Review the changes to these client-side scripts and revert to the baseline version if appropriate. Otherwise, thoroughly test after an upgrade. Documentation Click here for more details Table / Object Details UI Script [sys_ui_script]: moment-timezone.js Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 215 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
© 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 216 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Configuration Review for ITSM Manageability Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 5 1 ACN BCTAPP 1 ACN ESA 1 ACN GCP 1 ACN MyLearning 4 ACN NDDO 1 1 ACN SAC 3 ACN WFH 4 ACN WPA 2 1 ACN_ASB 7 1 ACN_CBMS 1 ACN_MOBILECP 3 3 Admin Account Request 2 AEE Ideas 2 Agile Development 1 AP20 Real Estate 4 Audit Tax App 4 BGC Fortify 1 Biz Approval 3 Business Support Request 1 Case and Knowledge Management 52 Cash Appl 1 CDP 3 Change Management 637 6 Clear Pass 3 2 Client Tax Matters 1 Client Whitelist 1 Complaint Management Tool 2 Configuration Management Database 2 48 CRS 3 1 Data Privacy 14 1 Disability 11 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 217 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
E2E 1 Employee Exit 1 EMS 1 Enterprise Insight 6 Fac Compliance 1 Fixed Assets 1 Fixed Assets Change 1 Flexi Work 7 Hours That Help 7 Incident Management 3 5 Knowledge Management 181 Major Incident Management 1 MS Teams Recording Enablement 3 2 My Access 4 PAM Password Rotataion 3 Payroll 1 PIP Probation 1 Problem Management 1 1 Purginator 1 Sales and Quality 1 Service Catalog 727 256 Source To Pay 5 1 Time Card Management 1 Tracker App 1 Walk-up Experience 4 WS Admin 1 Incident Management Findings Categorization Details Definition: HSD0001908: Core fields to be read-only. Rating: Recommend Description: The following fields should always be read-only on Incident: - Number - Opened - Opened by - Updated by - Resolved - Resolved by - Closed - Closed by Recommendation: The following fields should always be read-only on Incident: - Number - Opened - Opened by - Updated by - Resolved by - Closed - Closed by Documentation Click here for more details Table / Object Details incident: System fields on Incident should be read-only and auto-populated Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 218 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0004526: Active P1 Incidents should have an Assignment Group Rating: Act Description: This will generate fidnings if a Active P1 Incident does not have an assignment Group Recommendation: Unassigned P1 Incidents can cause major disruption to service. Documentation Click here for more details Table / Object Details Incident [incident]: INC25454863 Look on instance Incident [incident]: INC25454992 Look on instance Incident [incident]: INC25453677 Look on instance Categorization Details Definition: HSD0001164: Use state, not Incident State or Problem State Rating: Recommend Description: The task state field is the preferred, baseline method of capturing and changing the state of an incident or problem record. Recommendation: Use the state field, rather than the Incident State or Problem State fields. This may mean involve changes to your process. Documentation Click here for more details Table / Object Details incident [incident]: incident Look on instance problem [problem]: problem Look on instance x_xma_xmatters_xmatters_i ncident [x_xma_xmatters_xmatters_i ncident]: x_xma_xmatters_xmatters_incident Look on instance Categorization Details Definition: HSD0002044: Incident Management - Core (plugin) Rating: Recommend Description: Check that the "Incident Management - Core" plugin is active. It contains the updated State model. Recommendation: Active the "Incident Management - Core" plugin to use the updated State model Documentation Click here for more details Table / Object Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 219 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
v_plugin: Incident Management - Core Look on instance Configuration Management Database Findings Categorization Details Definition: HSD0001025: Check custom fields on the CMDB and verify they are on the right table (i.e. not all on cmdb_ci if they are only used on some sub-classes). Rating: Recommend Description: Look for custom fields on all cmdb tables first and then determine which level they are currently being used for. Eg. If customfield1 found to be only used on low level sub class but defined higher up, then this should be a finding. Recommendation: If customfield1 found to be only used on low level sub class and not other subclasses, because it's been defined higher up, then this should be a finding. This customfield1 should be defined on this lower level sub class only Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: CI Manager Look on instance Dictionary Entry [sys_dictionary]: CAB Approvers Look on instance Categorization Details Definition: HSD0001206: CMDB attributes on right level Rating: Discuss Description: Check for attributes that should have been placed higher in the CMDB hierarchy. E.g. the customer defined three separate "Warranty duration" attributes on Computer, suggest it be added further up Recommendation: Multiple attributes defined on separate tables at the same level should instead be defined only once at a table higher in the hierarchy. Documentation Click here for more details Table / Object Details Dictionary Entry [sys_dictionary]: Field added: cmdb_ci_appl.u_technical_architecture Look on instance Dictionary Entry [sys_dictionary]: Field added: u_tool_management.u_device_type Look on instance Dictionary Entry [sys_dictionary]: Field added: cmdb_ci_comm.u_device_type Look on instance Dictionary Entry [sys_dictionary]: Field added: cmdb_ci_netgear.u_os_version Look on instance Categorization Details Definition: HSD0001702: Custom CMDB tables begin with "u_cmdb_ci" © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 220 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Discuss Description: Custom CMDB tables should begin with "u_cmdb_ci" so they can be easily identified as being part of the CMDB. Recommendation: Custom CMDB tables should begin with "u_cmdb_ci" so they can be easily identified as being part of the CMDB. Documentation Click here for more details Table / Object Details Table [sys_db_object]: Network Circuit. u_network_circuit Look on instance Table [sys_db_object]: AIR Applications. u_air_applications Look on instance Table [sys_db_object]: Service Offering dSRM. u_service_offering_dsrm Look on instance Table [sys_db_object]: SCOM Service. u_scom_service Look on instance Problem Management Findings Categorization Details Definition: HSD0001978: Business Service or CI field mandatory. Rating: Recommend Description: Business Service or CI field mandatory. Recommendation: Make Business Service and/or CI fields mandatory. Documentation Click here for more details Table / Object Details sys_dictionary: Field should be mandatory Look on instance Categorization Details Definition: HSD0001979: Inactivity Monitors should be configured for Problem table Rating: Discuss Description: Inactivity monitors help to move along stagnant tasks Recommendation: An Inactivity Monitor should be configured to run on the Problem table. Documentation Click here for more details Table / Object Details : Custom Finding Look on instance Knowledge Management Findings Categorization Details Definition: HSD0002058: Articles that should have been made inactive are still accessible in the KB © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 221 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Rating: Recommend Description: Published knowledge articles with a "valid to" date before today OR not updated in more than a year. Recommendation: Knowledge contributors can create and edit knowledge articles within a knowledge base to share information across your organization. The "Published" date is set when the article is published. The "Valid to" date should be set to when the article expires. Articles do not appear in search results after the valid to date, or if the valid to date is empty. It is important to periodically review knowledge articles and update when necessary or retire them if appropriate. https://docs.servicenow.com/bundle/kingston-servicenow- platform/page/product/knowledge-management/task/t_CreateAKnowledgeArticle.html Documentation Click here for more details Table / Object Details kb_knowledge: 6201 Look on instance Categorization Details Definition: HSD0002056: Knowledge articles older than 12 months may be unduly aging Rating: Recommend Description: Active Knowledge articles > 12 months old are highlighted for review to ensure knowledge base is being actively managed, and not allowing articles to age. Recommendation: Active Knowledge articles > 12 months old are highlighted for review to ensure knowledge base is being actively managed, and not allowing articles to age. Documentation Click here for more details Table / Object Details kb_knowledge: Number of published articles not updated in more than a year:5499 Look on instance Categorization Details Definition: HSD0002029: Populate Knowledge Base articles fully Rating: Recommend Description: It is important to populate the relevant fields in each Knowledge Base article, so searching and other items work appropriately. Recommendation: All KB articles should have an Author and a Valid to date. A recommended practice would be to have a report or dashboard scheduled to find any offenders after this initial clean up is processed. Documentation Click here for more details Table / Object Details Knowledge [kb_knowledge]: KB0013369 v1.0 Look on instance Knowledge [kb_knowledge]: KB0010484 v1.0 Look on instance Knowledge [kb_knowledge]: KB0084530 v1.0 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 222 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Knowledge [kb_knowledge]: KB0000009 v1.0 Look on instance Categorization Details Definition: HSD0001888: Every Knowledge Base should have at least one Category defined. Rating: Recommend Description: Every Knowledge Base should have at least one Category defined. Recommendation: Every Knowledge Base should have at least one Category defined. Documentation Click here for more details Table / Object Details Knowledge Base [kb_knowledge_base]: Knowledge Base 'ACN WPA Knowledge' should have at least one category defined Look on instance Knowledge Base [kb_knowledge_base]: Knowledge Base 'Hours that Help' should have at least one category defined Look on instance Knowledge Base [kb_knowledge_base]: Knowledge Base 'Field Service Knowledge' should have at least one category defined Look on instance Knowledge Base [kb_knowledge_base]: Knowledge Base 'ClearPass (Accenture Corporate Devices) - Bulk Template' should have at least one category defined Look on instance Categorization Details Definition: HSD0002053: Each Knowledge Base has Categories defined Rating: Recommend Description: Make sure each Knowledge Base is using Categories. Needed to help organize, search and navigate the Knowledge Base. Recommendation: Each Knowledge Base should have Categories defined to help organize, search and navigate the Knowledge Base. Documentation Click here for more details Table / Object Details kb_knowledge_base: No categories found Look on instance kb_knowledge_base: No categories found Look on instance kb_knowledge_base: No categories found Look on instance kb_knowledge_base: No categories found Look on instance Change Management Findings Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 223 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0001969: Change Task mandatory fields Rating: Recommend Description: Make the following fields mandatory on the Change Task table: - Configuration Item - Planned Start Date - Planned End Date - Assignment Group - Short Description - Description Recommendation: Make the following fields on the Change Task table: - Configuration Item - Planned Start Date -Planned End Date - Assignment Group - Short Description -Description Documentation Click here for more details Table / Object Details change_task: Core fields on Change Task should be mandatory Look on instance Categorization Details Definition: HSD0003972: Percent of Changes associated with a CI Rating: Discuss Description: # of Changes with a CI in last 90 days / Total # of Changes last 90 days. Recommendation: A Ci should be required for the Change Management process to proceed properly. Documentation Click here for more details Table / Object Details change_request: UserID created 2 changes w/o CIs:abhinav.sengar Look on instance Table [sys_db_object]: Score: 98.62 Look on instance Categorization Details Definition: HSD0001936: More than 3 Change types Rating: Discuss Description: Too many Change types indicates overly complex processes, which will likely mean a complex implementation. Recommendation: Concider using no more than 3 Change Request Types to avoid excessive complexities in your processes and instance configuration. Documentation Click here for more details Table / Object Details sys_choice: 16 Look on instance Categorization Details Definition: HSD0003238: Cannot Implement before Planned start date Rating: Recommend © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 224 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Ensure the State field cannot be set to Implement if the Planned start date has not yet been reached. Recommendation: Ensure the State field cannot be set to Implement if the Planned start date has not yet been reached. Documentation Click here for more details Table / Object Details Change Request [change_request]: CHG0712908 Look on instance Change Request [change_request]: CHG0831475 Look on instance Change Request [change_request]: CHG0659550 Look on instance Change Request [change_request]: CHG0862438 Look on instance ACN AMC Findings Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Opportunity Pursuit Support Look on instance Categorization Details Definition: HSD0001919: Workflow names should contain Company prefix and product Rating: Recommend Description: Admins can easily identify custom workflows using customer prefix and product: HLT-REQ- Hardware Recommendation: https://docs.servicenow.com/bundle/london-servicenow-platform/page/product/managed- documents/reference/r_DefiningNameFormats.html Documentation Click here for more details Table / Object Details Workflow [wf_workflow]: acn_AMC_v2 Look on instance Workflow [wf_workflow]: acn_AMC_SC_PR_approval Look on instance Workflow [wf_workflow]: AMC Closed Request Status © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 225 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Workflow [wf_workflow]: acn_AMC Look on instance ACN NDDO Findings Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Network Device Deployment and Onboarding Look on instance ACN WPA Findings Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Work Permit Application Look on instance ACN_ASB Findings Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: MMS Integration Look on instance ACN_MOBILECP Findings © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 226 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0001349: Catalog Items should have at least a Name and a Short description Rating: Discuss Description: Look for Catalog Items with no Name or Short description Recommendation: Populate the Name and Short description on all Catalog Items so that self-service users can easily identify what the Item is for. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Mobile Compliance Request - New Internal App Look on instance Service Catalog Findings Categorization Details Definition: HSD0001350: Catalog Items should not have the same name Rating: Discuss Description: Catalog Items should have unique names so they can be easily identified in reference fields and search results. Recommendation: Catalog Items should have unique names so they can be easily identified in reference fields and search results. Documentation Click here for more details Table / Object Details Software Catalog [sc_cat_item]: UiPath Look on instance Software Catalog [sc_cat_item]: IBM IHS Server Look on instance Content Item [sc_cat_item]: Microsoft Project Look on instance Software Catalog [sc_cat_item]: IBM WebSphere Application Server Look on instance Categorization Details Definition: HSD0001441: Service Catalog Variable names should be descriptive Rating: Recommend Description: Variable names should not be shorter than 4 characters. The variable name should allow you to identify the question it represents and allow easy usage in scripting. Recommendation: The variable name should allow you to identify the question it represents and allow easy usage in scripting. Review variable names to make sure that no placeholder names are used. Documentation Click here for more details Table / Object Details : Custom Finding © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 227 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 228 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
User Experience Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 1 ACN WFH 3 Agent Workspace 1 AP20 Real Estate 1 BGC Fortify 1 Case and Knowledge Management 1 CDP 1 Change Management 1 Clear Pass 1 Client Tax Matters 4 Disability 1 Discovery 1 E2E 1 Flexi Work 1 Full and Final Exit 1 Incident Management 50 1 Knowledge Management 3 5 Platform Foundation 289 Problem Management 1 Service Catalog 1 92 2 Source To Pay 1 Knowledge Management Findings Categorization Details Definition: HSD0002464: Inactive Knowledge Author Rating: Act Description: Evaluate whether any knowledge articles authors are inactivated for any active articles in any of the following workflow steps: "Draft", "Review" or "Published". If so, this is something that the organization should update to be an active ServiceNow user so that if a knowledge article's author's name is displayed anywhere it is not an inactive user. Recommendation: Update the Knowledge Author using the link provided in the finding to an active user. Documentation Click here for more details Table / Object Details kb_knowledge: 310 article(s) with inactive Author Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 229 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0002466: Knowledge Article Categories Rating: Recommend Description: Evaluate whether any knowledge articles do not have a category. If articles do not have category they would never be found when navigating through the portal. Recommendation: Select a catalog when viewing the knowledge article in the platform. Documentation Click here for more details Table / Object Details kb_knowledge: 3573 Knowledge articles without category. Look on instance Categorization Details Definition: HSD0002684: Create actionable feedback task when an article is rated low should be enabled Rating: Recommend Description: Manage high volumes of article feedback by enabling task generation for negative feedback. When an article is rated poorly, a feedback task is generated and assigned to the author or reviser of the article. Recommendation: 1. Navigate to Knowledge > Administration > Properties. 2. In the Actionable Feedback Properties section, update the system property with Label "Create actionable feedback task when an article is rated at or lower than this value. 0 or no value indicates that actionable feedback tasks are not enabled for Rating type feedback." Documentation Click here for more details Table / Object Details sys_properties: glide.knowman.feedback.enable_actionable_feedback_for_rating is set between 1 to 5 Look on instance Categorization Details Definition: HSD0002481: Activate 'Can Read' and 'Cannot read' fields on Knowledge Article form Rating: Recommend Description: In order to take maximum advantage of the User and HR Criteria on a KA, the 'Can Read' and 'Cannot read' fields on the Knowledge Article form need to be activated. Recommendation: To maximize the use of User and HR Criteria, we recommend to enable the 'Can Read' and 'Cannot read' fields on the Knowledge Article form. This will provide a leverage to put the security/control on the article level and provide more options for the customer. Documentation Click here for more details Table / Object Details sys_ui_element: Enable 'Can Read' and 'Cannot read' fields on the Knowledge Article ' Look on instance Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 230 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0002463: Create actionable feedback task when an article is marked as not helpful should be enabled Rating: Recommend Description: Manage high volumes of article feedback by enabling task generation for negative feedback. When an article is marked as unhelpful, a feedback task is generated and assigned to the author or reviser of the article. Recommendation: 1. Navigate to Knowledge > Administration > Properties. 2. In the Actionable Feedback Properties section, tick the checkbox for "Create actionable feedback task when an article is marked as not helpful." property. Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.knowman.feedback.enable_actionable_feedback_for_helpful is set to false!. false Look on instance Categorization Details Definition: HSD0002482: Activate the 'Meta' field on the Knowledge article form Rating: Recommend Description: In order to utilise KA searching to the maximum, the 'Meta' field on the Knowledge article form should activated Recommendation: Activate the 'Meta' field on the Knowledge article form Documentation Click here for more details Table / Object Details sys_ui_element: Enable 'Meta' field on the Knowledge Article ' Look on instance Categorization Details Definition: HSD0002467: Knowledge Articles Valid To Date Populated Rating: Act Description: Identify all knowledge articles that do not have a 'Valid To' date input. It's important that all knowledge gets reviewed regularly and without a Valid To date then no reminders or system-supported processes can be used that would enable regular review and updates to knowledge articles - rarely would an article be valid for infinity. Recommendation: Update the field to be required on the Knowledge Article form and update all knowledge articles to have a valid to date that is at a reasonable date in the future. Documentation Click here for more details Table / Object Details kb_knowledge: 35 Knowledge articles without 'valid to' date. Look on instance Categorization Details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 231 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition: HSD0002465: Knowledge Articles with Valid to date in the past Rating: Act Description: Evaluate whether any Knowledge Articles have passed their "Valid To" Date but have not been Retired. This should be done to review and update the "Valid To" date on any knowledge articles that don't need to be retired and to Retire any knowledge articles that are out of date and should be taken down. Note that articles passed their "Valid to" date will no longer appear in the Knowledge Base or return in search. Recommendation: Review any identified knowledge articles in this situation and update the "Valid To" Date or retire the knowledge article. Documentation Click here for more details Table / Object Details kb_knowledge: 4733 Knowledge Article(s) with past 'Valid to' date Look on instance ACN AMC Findings Categorization Details Definition: HSD0003516: Multiple Catalog UI Policies with the same action for the variable Rating: Recommend Description: The variable has multiple Catalog UI Policies acting on it and making the same changes (Mandatory, Visible, Read-Only), with at least one of those policies being marked as "Reverse if false". This typically causes unpredictable behaviour and should be avoided. Recommendation: Ensure the Catalog UI Policies do not interfere with one another. If more than one policy is required for the same field for the same action (Mandatory, Visible or Read-Only), consider removing the "Reverse if false" flag on all those policies, and ensure the order has been set accordingly. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Opportunity Pursuit Support. UI Policy Action(s): Visible Look on instance ACN WFH Findings Categorization Details Definition: HSD0003516: Multiple Catalog UI Policies with the same action for the variable Rating: Recommend Description: The variable has multiple Catalog UI Policies acting on it and making the same changes (Mandatory, Visible, Read-Only), with at least one of those policies being marked as "Reverse if false". This typically causes unpredictable behaviour and should be avoided. Recommendation: Ensure the Catalog UI Policies do not interfere with one another. If more than one policy is required for the same field for the same action (Mandatory, Visible or Read-Only), consider removing the "Reverse if false" flag on all those policies, and ensure the order has been set accordingly. Documentation Click here for more details Table / Object Details Record Producer Checklist. UI Policy Action(s): Mandatory - UI Policy Action(s): Mandatory © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 232 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
[sc_cat_item]: Look on instance Record Producer [sc_cat_item]: Work From Home. UI Policy Action(s): Mandatory, Visible - UI Policy Action(s): Mandatory, Visible - UI Policy Action Look on instance Record Producer [sc_cat_item]: Work From Home - Global Operations(India). UI Policy Action(s): Mandatory, Visible - UI Policy Action(s): Mandatory - UI Policy Action(s): Mand Look on instance AP20 Real Estate Findings Categorization Details Definition: HSD0003516: Multiple Catalog UI Policies with the same action for the variable Rating: Recommend Description: The variable has multiple Catalog UI Policies acting on it and making the same changes (Mandatory, Visible, Read-Only), with at least one of those policies being marked as "Reverse if false". This typically causes unpredictable behaviour and should be avoided. Recommendation: Ensure the Catalog UI Policies do not interfere with one another. If more than one policy is required for the same field for the same action (Mandatory, Visible or Read-Only), consider removing the "Reverse if false" flag on all those policies, and ensure the order has been set accordingly. Documentation Click here for more details Table / Object Details Record Producer [sc_cat_item]: Approval to Commit. UI Policy Action(s): Visible Look on instance Service Catalog Findings Categorization Details Definition: HSD0002498: Catalog UI Policies - Default Mandatory Variable Rating: Act Description: Catalog variables set as mandatory is no longer required to have a UI Policy configuring the "Mandatory" field. It is irrelevant and will cause issue when having a "Reverse if False" condition Recommendation: It is no longer required to configure a catalog UI Policy configuring the "Mandatory" field if the catalog variables itself is set as "Mandatory" Documentation Click here for more details Table / Object Details catalog_ui_policy_action: 208 UI Policy Item Records(s) affected Look on instance Categorization Details Definition: HSD0002514: Catalog items whose meta field contains keywords can improve the search result when a user search for a catalog item by a keyword. Rating: Discuss © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 233 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Description: Catalog items whose meta field contains keywords can improve the search result when a user search for a catalog item by a keyword. Check for meta field usage in catalog items to improve user experience. Recommendation: Discuss and add keywords to catalog item meta fields to improve search capabilities and user experience. Documentation Click here for more details Table / Object Details sc_cat_item: Number of catalog items with no meta data: 1429 Look on instance Categorization Details Definition: HSD0002896: Catalog Items that have not been ordered but are still active Rating: Discuss Description: The Service Catalog should be up to date and aligned with user demand. Recommendation: Catalog Items that have not been ordered for more than a year should be reviewed and if applicable deactivated. Documentation Click here for more details Table / Object Details : Custom Finding Look on instance Discovery Findings Categorization Details Definition: HSD0001304: Disable Help the Helpdesk Rating: Recommend Description: 'Help the Helpdesk' under Self-Service is frequently not used, but can can confuse users. If it isn't used, disable it. Recommendation: 'Help the Helpdesk' is not being used; disable the module in the menu to streamline the user interface. Documentation Click here for more details Table / Object Details Module [sys_app_module]: Help the Help Desk Look on instance Agent Workspace Findings Categorization Details Definition: HSD0003220: Agent Workspace should be used for Incident Management Rating: Recommend Description: Agent Workspace for ITSM enables agents to get their work done faster and improve the fulfiller experience by integrating the platform functionality specific to ITSM tier 1 agents © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 234 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
and putting these features into an easy-to-navigate interface. Recommendation: Activate the Agent Workspace for ITSM plugin (com.snc.agent_workspace.itsm) to get the functionality of Agent Workspace for ITSM. Make sure that Agent Workspace role (workspace_agent) has been granted to agents, that workspace forms and list are set up and that at least one module in the navigator allows to access the Agent Workspace. Documentation Click here for more details Table / Object Details System Plugin [v_plugin]: ITSM Workspace Look on instance Change Management Findings Categorization Details Definition: HSD0001937: Intercepter matches number of change types Rating: Discuss Description: Compare the number of lines in the Change Request Interceptor to the number of Change Types. Recommendation: Users should be able to manually create a Change Request of any type using the "Create New" module. Documentation Click here for more details Table / Object Details sys_wizard: Change Request Look on instance Incident Management Findings Categorization Details Definition: HSD0003991: Change Management - Auto Close Related Incidents on Change completion Rating: Recommend Description: When a Change has one or more related Incidents that are in On Hold / Awaiting Change state, they should be automatically set to Resolved state when the Change is completed successfully. Recommendation: Write a business rule on change request table that will automatically resolve all the incidents under it or else develop a process to close all incidents once the change request is completed. Documentation Click here for more details Table / Object Details Incident [incident]: INC27107260 Look on instance Incident [incident]: INC11841279 Look on instance Incident [incident]: INC9228192 Look on instance Incident [incident]: INC8738322 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 235 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Look on instance Categorization Details Definition: HSD0002509: Incident Activity Log Rating: Recommend Description: The Incident activity log formatter should be set up to contain a list of commonly used fields. Recommendation: It is recommended to use at least these fields for the Incident Activity Log: - Additional comments - Assigned to - Assignment group - Attachments - Business service - Category - Configuration item - Description - Impact - On hold reason - Priority - Resolution code - Resolution notes - Resolved - Resolved by - Short description - State - Urgency - Work notes Documentation Click here for more details Table / Object Details System Property [sys_properties]: glide.ui.incident_activity.fields. assigned_to,location,cmdb_ci,impact,priority,u_category_ref,u_increcategory_item,opened _by,work_note Look on instance Categorization Details Definition: HSD0002508: Remove '5-Planning' from Incident Priority Rating: Discuss Description: The Priority 5 value is not aligned to ITIL and seldom used by customers. It should be discussed with the customer and possibly removed from the lookup table. Recommendation: Discuss with customer and possibly remove Priority 5 from the priority lookup. Documentation Click here for more details Table / Object Details Choice [sys_choice]: Deactivate Priority 5 from incident. 5 Look on instance Categorization Details Definition: HSD0002512: Related lists on Incident form Rating: Recommend Description: Related Lists: - Task SLAs - incidents by Same Caller - Affected CIs - Impacted Services/CIs - Child Incidents - Attached knowledge Recommendation: Configure the recommended related lists for Incident: - Task SLAs - incidents by Same Caller - Affected CIs - Impacted Services/CIs - Child Incidents - Attached knowledge - Outages Documentation Click here for more details Table / Object Details incident: Related Lists on Incident form Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 236 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0003965: Percent of Incidents associated with a CI Rating: Recommend Description: Percent of all Incidents created in the last 6 months that have a CI associated to the Incident record. Recommendation: Percent of all Incidents created in the last 6 months that have a CI associated to the Incident record. Documentation Click here for more details Table / Object Details Table [sys_db_object]: Score: 99.00 Look on instance Platform Foundation Findings Categorization Details Definition: HSD0002813: Activity Formatter placement Rating: Recommend Description: Put the Activity Formatter placement in a section for a consistent user experience Recommendation: The Activity Formatter should not be part of the title section and instead be moved to a dedicated section. This will provide a consistent user experience and prevent forms from becoming overly long. Documentation Click here for more details Table / Object Details Section Element [x_amspi_time_exp_task]: Activity Formatter placement Look on instance Section Element [x_amspi_cwhite_workstn_ mgnmt]: Activity Formatter placement Look on instance Section Element [x_amspi_entinsight_rar]: Activity Formatter placement Look on instance Section Element [x_amspi_acn_asb_project_d efinition]: Activity Formatter placement Look on instance Problem Management Findings Categorization Details Definition: HSD0003978: Problem Overview Dashboard plugin should be active Rating: Recommend Description: Problem Overview Dashboard Performance Analytics Content for Problem should be active Recommendation: Use the Performance Analytics widgets on the dashboard to visualize data over time, analyze your business processes, and identify areas of improvement. With solutions, you can get value from Performance Analytics for your application with minimal setup. Documentation Click here for more details © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 237 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Object: System Plugin [v_plugin] © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 238 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Security Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss ACN AMC 15 ACN BCTAPP 4 Acn Dir 5 ACN Document Builder 1 ACN ESA 6 ACN Former Employee 1 ACN GCP 6 ACN Guided Workflow 1 ACN MyLearning 4 ACN NDDO 28 ACN PA 3 ACN SAC 2 ACN WFH 16 ACN WPA 7 ACN_CBMS 1 ACN_MOBILECP 7 ACN_PCHW_GPRT 18 Admin Account Request 1 AEE Ideas 1 AP20 Real Estate 9 Ask HR 8 Ask PM 23 Asset Management 4 BGC Fortify 32 Business Support Request 2 Case and Knowledge Management 4 Cash Appl 5 CDP 11 Change Management 5 Clear Pass 7 Client Tax Matters 15 Client Whitelist 1 Configuration Management Database 5 CRS 1 Data Privacy 117 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 239 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Delegation 1 Disability 9 E2E 6 Ecosystem Supplier Management Support 11 Employee Data Change 20 Employee Exit 3 EMS 2 Enterprise Insight 17 Fac Compliance 10 Fixed Assets 1 Fixed Assets Change 10 Full and Final Exit 1 Holiday Payout 4 Hours That Help 1 Idea Innovation 3 Incident Management 1487 Knowledge Management 48 Leave of Absence 4 LOC 10 Major Incident Management 4 MS Forms 1 MS Teams Recording Enablement 17 My Access 2 Payroll 3 Payroll Uploads 5 PIP Probation 2 Platform Foundation 9 Problem Management 4 Request Supplementary Pay 10 Sales and Quality 1 Salesforce Integration 2 Service Catalog 41 Source To Pay 20 Time Card Management 2 Tracker App 1 WS Admin 5 ACN AMC Findings © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 240 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Categorization Details Definition: HSD0004731: Enclose client script in functions Rating: Recommend Description: Client Scripts without a function cause issues with variable scope. This is why Client Scripts are enclosed in a function by default. When code is not enclosed in a function, variables and other objects are available and shared to all other client-side scripts. If you're using the same variable names, it is possible they could collide. This can lead to unexpected consequences that are difficult to troubleshoot. Recommendation: When code is not enclosed in a function, variables and other objects are available and shared to all other client-side scripts. This can lead to unexpected consequences that are difficult to troubleshoot. Documentation Click here for more details Table / Object Details Client Script [sys_script_client]: amc_task_onSubmit. 1 Look on instance Client Script [sys_script_client]: onChange_dateNeeded. 1 Look on instance Client Script [sys_script_client]: onLoad_industry. 1 Look on instance Client Script [sys_script_client]: amc_request_onSubmit. 1 Look on instance Knowledge Management Findings Categorization Details Definition: HSD0002052: Can Contribute / Cannot Contribute user criteria to be defined on each knowledge base Rating: Act Description: Each knowledge base should have either Can Contribute or Cannot Contribute user criteria defined. Otherwise, any user can contribute content to a knowledge base with no Contribute criteria defined. Recommendation: Define Can Contribute or Cannot Contribute user criteria for each knowledge base - otherwise, any user will be able to contribute content. Documentation Click here for more details Table / Object Details Knowledge Base [kb_knowledge_base]: Alerts Look on instance Knowledge Base [kb_knowledge_base]: MS Teams Knowledge Look on instance Knowledge Base [kb_knowledge_base]: Operating System Exception Look on instance Knowledge Base [kb_knowledge_base]: ACN WPA Knowledge Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 241 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Upgradeability Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss Configuration Management Database 19 Configuration Management Database Findings Categorization Details Definition: HSD0002199: List all custom CI tables created by users Rating: Discuss Description: In order to ensure a smooth back to baseline experience, it's recommended to utilise CI Classes that are shipped with the product. In the CMDB review, we want to look for tables that extend cmdb_ci, and were created by the user. 1. Look for any table starting with u_ under cmdb_ci, and list it. Recommendation: In order to ensure a smooth back to baseline experience, it's recommended to utilise CI Classes that are out-of-the-box. Documentation Click here for more details Table / Object Details Table [sys_db_object]: Network Circuit. u_network_circuit Look on instance Table [sys_db_object]: Business Service OSe. u_cmdb_ci_service_ose Look on instance Table [sys_db_object]: AIR Applications. u_air_applications Look on instance Table [sys_db_object]: Service Offering OSe. u_service_offering_ose Look on instance © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 242 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Performance Each of the findings by in this category have been further broken down by products in the table below. Again, you can see the findings by rating. Product Act Recommend Discuss AppEngine 60 Service Catalog 162 AppEngine Findings Categorization Details Definition: HSD0002068: current.update() in script workflow activity Rating: Act Description: The Run Script activity runs the specified script in the scope of the workflow version. All changes to current are automatically updated. There is no need to call current.update(). This may cause issues. Recommendation: You don't need to use current.update() in a run script. All changes into current is automatically updated. Documentation Click here for more details Table / Object Details Workflow Activity [wf_activity]: Geographic Unit Approved. 32 Look on instance Workflow Activity [wf_activity]: Ogranization Entity Approved. 32 Look on instance Workflow Activity [wf_activity]: Set Date Closed. 3 Look on instance Workflow Activity [wf_activity]: Set Cancelled Values. 4 Look on instance Service Catalog Findings Categorization Details Definition: HSD0004555: LookupSelect Variables should not point to tables with more than 100 records Rating: Discuss Description: Background on this issue is in PRB1237697. Using Select Box to have more than 20 records is a bad design. Select Box is a dropdown with options. If there is more than 100 options which the user has to go through and select one of them, it is a bad design. The correct variable to use is reference variable if the rows returned is more. The fix for PRB tries to make some intelligent guesses to reduce the performance for those wrongly used lookup select. This fix will not eliminate the slowness, but will try to improve it with calculated guesses, and if not cant it will go back to the old behavior. So don't rely on this PRB fix, better use the correct variable for the use case Recommendation: If there is more than 100 options which the user has to go through and select one of them, the correct variable to use is reference variable. Documentation Click here for more details Object: question_choice © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 243 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
question_choice question_choice question_choice © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 244 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
© 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 245 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
© 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 246 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Appendices All Statistical Definition Results Statistics provide contextual information gathered from the instance. Definition Description Result HSD0002440 Too many configurations in the Default update sets 0 HSD0002686 Users with cross-domain visibility 16 HSD0004645 User preferences stored for inactive users not active for more than 90 days 0 HSD0001293 Number of custom scripts 16519 HSD0001524 Number of skipped items in last upgrade 0 HSD0001378 Reports not run for 3 months 37220 HSD0001449 Minimise the number of errors per day 243347 HSD0001549 Number of changes in last 30 days 142498 HSD0002692 Restrict reporting on non domain separated tables to limit cross contamination 65 HSD0001018 Fields without hints 35901 HSD0001288 Incident Autoclose threshold is high 1416 HSD0002696 SLA's should only trigger for their domain 22 HSD0001105 No pending Cross Scope Privileges 8 HSD0001212 Lines of custom code 1296969 HSD0001254 Number of in progress update sets 6 HSD0002130 Valid To dates set to reasonable values (rather than the default of 2020- 01-01 for all) 0 HSD0001937 Intercepter matches number of change types 1 HSD0002668 All Catalog Tasks should be linked to Requested Items and Requests. 1398909 HSD0002639 Requested Items without a parent Request 2817 HSD0002997 Percent of Incidents associated with a CI 99 HSD0001067 Number of active tasks 9086941 HSD0001391 Number of users with the admin role 100 HSD0001170 Platform version 0 HSD0001509 Number of active plugins 1057 HSD0001551 Number of Workflows 62 HSD0001900 Number of HR groups that do not have a type of human_resources 0 HSD0001866 HR Service should have a Fulfillment Instruction 0 HSD0002207 Check for invalid insert attempts 0 HSD0002175 Consider adding meta data in the HR Record Producers 0 HSD0005130 Regression testing for ATF Quick Start Test 'Financial Management' 0 HSD0005072 Regression testing for ATF Quick Start Test 'Predictive Intelligence' 0 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 247 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result HSD0005243 Regression testing for ATF Quick Start Test 'Problem Management' 0 HSD0002127 Applications should have an Application Category defined 0 HSD0005137 Regression testing for ATF Quick Start Test 'Problem Management' 0 HSD0005126 Regression testing for ATF Quick Start Test 'Essential SAFe' 0 HSD0002126 Applications should have an Application Family defined 0 HSD0005121 Regression testing for ATF Quick Start Test 'Change Management' 0 HSD0005250 Regression testing for ATF Quick Start Test 'Test Management 2.0' 0 HSD0005135 Regression testing for ATF Quick Start Test 'Knowledge Management' 0 HSD0001896 Grant HR Administrator with Delegated Developer for HR Scope Application 0 HSD0001675 Applications should have an IT Owner assigned 0 HSD0005249 Regression testing for ATF Quick Start Test 'Skills Management' 0 HSD0001475 Entitlements without duration (start and end date) 0 HSD0005134 Regression testing for ATF Quick Start Test 'Incident Management' 0 HSD0005081 Regression testing for ATF Quick Start Test 'Assessments and Surveys' 0 All Automated Definition Results This provides an aggregated findings total from every executed definition that returned results. Definition Description Result HSD0001635 Disable Embedded HTML Code property 1 HSD0002015 Update Sets should be named uniquely 307 HSD0002068 current.update() in script workflow activity 60 HSD0001556 For domain separated instances, admins should be at the top level domain instead of Global 4 HSD0001702 Custom CMDB tables begin with "u_cmdb_ci" 13 HSD0001969 Change Task mandatory fields 1 HSD0002056 Knowledge articles older than 12 months may be unduly aging 1 HSD0002128 Same field twice on one form 126 HSD0001666 Differs from baseline: UI Macros and UI Pages 3 HSD0001936 More than 3 Change types 1 HSD0002111 Default ACLs on custom tables not modified 1001 HSD0001597 Auto check: Prefer strict equality (===) and inequality (!==) operators over normal (== and !=) operators 8565 HSD0001646 Workflow(s) should not be checked out for an extended time 3 HSD0001919 Workflow names should contain Company prefix and product 914 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 248 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result HSD0002029 Populate Knowledge Base articles fully 85 HSD0002686 Users with cross-domain visibility 16 HSD0002514 Catalog items whose meta field contains keywords can improve the search result when a user search for a catalog item by a keyword. 1 HSD0002813 Activity Formatter placement 289 HSD0002479 Group must not have an inactive Member 1 HSD0002637 Any orphaned change tasks without a parent 696 HSD0002700 Active Scheduled Job run by Deleted User 1 HSD0002804 Active task with Closed Date 33 HSD0002154 Don't use $rootScope.$on in a widget's client script. 205 HSD0002464 Inactive Knowledge Author 1 HSD0002602 List Layout with more than one List Element on the same position 2 HSD0002694 Get the number of Requested Approval for more than 10 Days. 1 HSD0002827 All events should have a description 1 HSD0002896 Catalog Items that have not been ordered but are still active 1 HSD0003965 Percent of Incidents associated with a CI 99 HSD0001066 Groups with no users 225 HSD0001124 Index Suggestions for Slow Queries should be reviewed 1 HSD0002959 Disable SQL error messages 1 HSD0003084 Scripted REST without a REST resource 2 HSD0003331 SNC Access Control plugin allows customers to control access by ServiceNow Customer Support 1 HSD0003516 Multiple Catalog UI Policies with the same action for the variable 110 HSD0004448 Allow Entity Validation with Whitelisting 1 HSD0004531 System does not support LDAP password authentication through a MID Server 4 HSD0004595 Email notifications with missing users, groups (no members), user/groups 150 HSD0004749 Differs from baseline: Field Dictionaries 47 HSD0001034 Reports with very long execution times 1 HSD0001107 JavaScript Mode is not set on ES5 1 HSD0003079 Unintentional Cross Scope privileges 57 HSD0004442 Disable Entity Expansion 1 HSD0004723 Incative User Criteria should not be used for "Available" related list 68 HSD0001025 Check custom fields on the CMDB and verify they are on the right table (i.e. not all on cmdb_ci if they are only used on some sub-classes). 2 HSD0003041 Convert Inbound Email HTML 1 HSD0003448 Export limit property glide.xml.export.limit not set as per OOB 1 HSD0001183 Report shared with a specific role which does not exist 4 HSD0001293 Number of custom scripts 16519 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 249 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result HSD0001206 CMDB attributes on right level 11 HSD0001347 Client-side code should not use GlideRecord 178 HSD0001378 Reports not run for 3 months 37220 HSD0001449 Minimise the number of errors per day 243347 HSD0001507 There is a dedicated integration user that runs actions in place of the default admin user 868 HSD0004819 Journal fields in export records 1 HSD0004897 Set the maximum display size for journal fields 1 HSD0001268 Fields used to coalesce in a Table Transform Maps should be indexed 38 HSD0001338 Business Rules should not be defined on the Global table (Global Business Rule) 3 HSD0001413 Run SLAs Business Rule Executed Synchronously 1 HSD0001549 Number of changes in last 30 days 142498 HSD0005001 Roles without any user 1220 HSD0001191 Report shared with a group which has no users 1122 HSD0001358 Server-side code should not use GlideRecord.getRowCount() to count records 613 HSD0001398 Script Includes with duplicate names 6 HSD0001538 Workflow activity references an empty or invalid group 22 HSD0001614 A before Business Rule should alter the current object. Otherwise it can be done async. 145 HSD0001665 Differs from baseline: Client Scripts (and UI Scripts) 6 HSD0001594 Enable and use Application Administration in scoped applications 83 HSD0001908 Core fields to be read-only. 1 HSD0001561 Client Scripts should check for isLoading and return 191 HSD0001632 Long running (slow) scripts 659 HSD0002067 Don't use $rootScope.$broadcast in widgets 285 HSD0001554 JDBC Data Sources should have the "Use last run datetime" option checked 250 HSD0001627 Do not query audit log in your custom integrations and code. 2 HSD0001888 Every Knowledge Base should have at least one Category defined. 57 HSD0002053 Each Knowledge Base has Categories defined 38 HSD0002467 Knowledge Articles Valid To Date Populated 1 HSD0002509 Incident Activity Log 1 HSD0002697 Confirm Workflows will only trigger for their domain 168 HSD0002833 List with a reference field as the first column 61 HSD0002463 Create actionable feedback task when an article is marked as not helpful should be enabled 1 HSD0002692 Restrict reporting on non domain separated tables to limit cross contamination 65 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 250 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result HSD0002825 glide.import.error_message.generic is not enabled. 1 HSD0002888 Avoid using gs.sleep on workflow activities 5 HSD0002437 Check if strict mode for GlideRecord queries is active 1 HSD0002569 GlideRecord query on non-existent column should not return all table rows 1 HSD0002684 Create actionable feedback task when an article is rated low should be enabled 1 HSD0002199 List all custom CI tables created by users 19 HSD0002482 Activate the 'Meta' field on the Knowledge article form 1 HSD0002740 Active Tasks with Inactive 'Opened By' User 56 HSD0001106 Applications should use Source Control 84 HSD0002917 Update Set should have Description field populated 1 HSD0003076 Basic authentication credentials on SOAP Message definition 93 HSD0001022 Excessive Client Scripts 6 HSD0001085 LDAP Server definition should limit attributes retrieved 2 HSD0003238 Cannot Implement before Planned start date 629 HSD0003978 Problem Overview Dashboard plugin should be active 1 HSD0004365 Cache flushed as part of scripts 27 HSD0001018 Fields without hints 35901 HSD0001071 Custom Tables in global scope 353 HSD0004150 UI Actions with complex scripted conditions should be managed differently 1226 HSD0001060 Use UI Policies Instead of Client Scripts 4788 HSD0003083 Scripted REST resource without enabled security 7 HSD0003461 System properties modified excessively 10 HSD0004526 Active P1 Incidents should have an Assignment Group 3 HSD0004731 Enclose client script in functions 2105 HSD0001153 Hard coded instance URL 24 HSD0001195 Tables without ACLs 103 HSD0001265 Auto-complete to match text in the columns listed in the ref_ac_columns attribute should be enabled. 1 HSD0001365 LDAP Server record does not use attributes field 2 HSD0001496 Active workflow context older than 30 days 1606 HSD0001546 Table Transform Maps generally do not need "Run business rules" enabled 74 HSD0004842 Differs from baseline: Email Scripts 29 HSD0004997 Remote Table Max Entry Size 1 HSD0001190 Transform map coalesces on non-indexed field(s) 49 HSD0001235 Avoid Dynamic JEXL Expressions in an Evaluate 38 HSD0001306 Debug properties should be disabled in production 4 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 251 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result HSD0001214 Report assigned to a non-existent group/user 92 HSD0001288 Incident Autoclose threshold is high 1416 HSD0001350 Catalog Items should not have the same name 44 HSD0001467 Duplicate foundation/core data found. 5 HSD0001167 Disable list-edit for all fields that have UI Policies and Client script on them. For example, in the list view it s possible to assign an Incident to someone 9009 HSD0001204 Map sources should have a location field referenced 1 HSD0001278 Before Business Rules should not update() or insert() records on other tables 273 HSD0001344 Minimize the number of options in a choice field 176 HSD0001441 Service Catalog Variable names should be descriptive 1 HSD0001979 Inactivity Monitors should be configured for Problem table 1 HSD0001552 Avoid 2-way AngularJS bindings {{options.myVar}} for the non-dynamic options variables, use one-way instead {{::options.myVar}} 156 HSD0002052 Can Contribute / Cannot Contribute user criteria to be defined on each knowledge base 48 HSD0001602 Number maintenance fields unique 113 HSD0001664 Differs from baseline: Script Includes 35 HSD0001926 Specify group types 1 HSD0002044 Incident Management - Core (plugin) 1 HSD0001639 Enable IP Range Based Authentication 1 HSD0002020 Long module titles 409 HSD0002071 Verify that system properties have a value (blank may be a valid value but still good to check this) 118 HSD0002683 Approvers listed are no longer active 1 HSD0002402 Check Table Rotations against OOTB version for the same version 1 HSD0002481 Activate 'Can Read' and 'Cannot read' fields on Knowledge Article form 1 HSD0002512 Related lists on Incident form 1 HSD0002737 UI Actions displayed as a button should be short and precise 79 HSD0002808 Scripts without description 10547 HSD0002331 Coding practices: Reading field values (e.g. gr.incident) in a Script Include 1389 HSD0002466 Knowledge Article Categories 1 HSD0002508 Remove '5-Planning' from Incident Priority 1 HSD0002607 Enable pagination for search sources 5 HSD0002696 SLA's should only trigger for their domain 22 HSD0002830 Notifications with recipients who are not active 28 HSD0002498 Catalog UI Policies - Default Mandatory Variable 1 HSD0002592 Dictionary entries present for a table that does not exist 16 HSD0002688 New globally-scoped client-side scripts don't run in strict mode and DOM 44 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 252 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result access enabled. HSD0001016 Lots of active tasks more than a month old 112 HSD0003086 Scripted REST service and its resources should have a short description 411 HSD0003625 Script code in Business Rules should be encapsulated in the executeRule method 661 HSD0004147 Use of GlideDialogWindow and GlideOverlay 69 HSD0001058 Scoped app uses logging utils or depreciated methods for logging rather than the verbosity method. 38 HSD0003082 Enable Scripted REST API versioning 58 HSD0004060 Only allow acceptable file extensions to be uploaded during file attachment 1 HSD0004726 Debugger should not be used in client scripts 28 HSD0001011 Slow loading forms in the last 30 Days 2 HSD0001105 No pending Cross Scope Privileges 8 HSD0003452 Export limit property glide.excel.export.limit not set as per OOB 1 HSD0004555 LookupSelect Variables should not point to tables with more than 100 records 162 HSD0003030 Enable Privacy on Client-Callable Script Includes 1 HSD0003220 Agent Workspace should be used for Incident Management 1 HSD0003437 Setting default related list loading 1 HSD0004354 Scheduled jobs that fail or produce errors 90 HSD0004489 LDAP Listener is active 4 HSD0004650 Transform maps should not have boolean fields in their import set table 6 HSD0001128 Client-side code should not use synchronous AJAX methods 420 HSD0001212 Lines of custom code 1296969 HSD0001286 No coalesce field set for transform map 903 HSD0001349 Catalog Items should have at least a Name and a Short description 243 HSD0001454 Business Rules do not have when checkbox (insert, update, insert, query) checked 13 HSD0008070 Synchronous outbound calls in should be carefully used in Business Rules and UI Actions 2 HSD0001164 Use state, not Incident State or Problem State 3 HSD0001203 Reports should not be shared with roles that have no users 73 HSD0004817 SOAP request connection timeout 1 HSD0006666 Check if current.update() is used in a business rule 230 HSD0001193 Use the condition field in Business Rules 528 HSD0001254 Number of in progress update sets 6 HSD0001320 Don't use a variable called gr in scripts 3079 HSD0001404 Scripts should not directly call Java packages 71 HSD0001490 Business rules firing outbound SOAP/REST should be async 3 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 253 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result HSD0004804 Inactive Integration session timeout settings 1 HSD0004841 Differs from baseline: Installation Exits 4 HSD0004992 Remote Table Max Data Cache Size 1 HSD0001304 Disable Help the Helpdesk 1 HSD0001392 Scripts should not use the eval() method 13 HSD0001600 Transform Script that run onBefore should not update() or insert() records on another table 129 HSD0001662 Differs from baseline: Business Rules 28 HSD0001761 Differs from baseline: UI actions 10 HSD0001924 Use Notification Categories 3841 HSD0002016 Server scripts in widgets should use GlideRecordSecure instead of GlideRecord 509 HSD0001557 Enforce strong passwords 1 HSD0001978 Business Service or CI field mandatory. 1 HSD0002058 Articles that should have been made inactive are still accessible in the KB 1 HSD0001623 Read ACLs (Security rules) should not have GlideRecord/GlideAggregate in script 63 HSD0001937 Intercepter matches number of change types 1 HSD0002122 Coding practices: Reading field values (e.g. gr.incident) in a Business Rule 1486 HSD0002465 Knowledge Articles with Valid to date in the past 1 HSD0002606 Process Flow placement 3 HSD0002695 Unassigned Tasks created 5 days or more 161 HSD0002828 All events should have the "fired by" field populated 1 HSD0002909 Do not use nested GlideRecord queries 185 HSD0002454 Business rules with complex scripted conditions should be managed differently 60 HSD0002582 Child group does not contain all parent roles 874 HSD0002687 Weekday schedules should have holiday includes 507 HSD0002419 Coding practices: Reading field values (e.g. gr.incident) in a UI Action 412 HSD0002668 All Catalog Tasks should be linked to Requested Items and Requests. 1398909 HSD0002814 Draft or New task older than 1 month 91 HSD0002397 Review updates left in a default update set 61 HSD0002480 Group should not have an inactive Manager 1 HSD0002639 Requested Items without a parent Request 2817 HSD0002701 Active Scheduled Job run by Inactive User 1 HSD0001095 Clone target should not be enabled in production 1 HSD0003054 Activate plugin 'Contextual Security: Role Management V2' 1 HSD0003451 Export limit property glide.xlsx.export.limit not set as per OOB 1 HSD0003991 Change Management - Auto Close Related Incidents on Change 47 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 254 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result completion HSD0001020 List Report without any columns selected 539 HSD0002997 Percent of Incidents associated with a CI 99 HSD0003385 Restrict Emails by Domain 1 HSD0003972 Percent of Changes associated with a CI 99 HSD0004352 Scheduled Jobs that run longer than their recurrence interval 2 HSD0001015 Reports should typically not be made public 1095 HSD0001067 Number of active tasks 9086941 HSD0004146 Use of alert, prompt or confirm 1344 HSD0004449 Custom Watermarks on notification emails 1 HSD0001049 Avoid Global UI Scripts 14 HSD0003081 Basic authentication credentials on REST Message definition 4 HSD0004724 Incative User Criteria should not be used for "Not Available" and "Available" related list 69 HSD0001312 Client-side code should not contain the console.log() debugging method 920 HSD0004802 All Proccessors of type - SCRIPT must be protected with CSRF Token. 10 HSD0004839 Differs from baseline: Access Controls 174 HSD0004991 Control how exported CSV data appears in Notepad 1 HSD0001142 Client-side code should not use DOM manipulation technique 428 HSD0001187 Minimize logging in production 1336 HSD0001302 Application navigator application menu with only one module. 15 HSD0001354 Upload MIME Type Restriction should be enabled 1 HSD0001391 Number of users with the admin role 100 HSD0001126 Unnecessary dot walking to sys_id from current object 310 HSD0001207 Form layout whitespace: make sure layout split does not have large empty areas because only one side contains fields. 73 HSD0001281 getMessage() called in Client Script without preloading message key 39 HSD0001348 Duplicate task numbers 10 HSD0001452 GlideRecord in calculated fields 15 HSD0001509 Number of active plugins 1057 HSD0004820 Specifies the maximum number of recipients the instance can list in the To 1 HSD0008013 Check for scheduled imports running at the same time. 123 HSD0001202 Report assigned to a user which is not active 1 HSD0001275 Scripts should not contain hard-coded IDs 1955 HSD0001372 Too many fields on a form 399 HSD0001551 Number of Workflows 62 HSD0004814 The maximum number of redirects the server sends to the client before the soap request is timed out. 1 HSD0005017 Enable Update set tables to be audited 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 255 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition Description Result HSD0005687 Too many fields and/or large fields can cause database storage issues 1 © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 256 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Explanation of terms Portfolio A portfolio is a group of best practice checks that are in scope for this Config Review. They are typically aligned to a product suite. For example, the Configuration Review for ITSM portfolio contains all the definitions that will produce findings and statistics pertaining to the ITSM product suite. Products The products in this document are aligned to those on the ServiceNow product page , with the addition of any custom applications. Category The category represents which of the design criteria areas the best practice check is most aligned with. Category Description Manageability This relates to the management of configuration and data. These best practices help you spend less time on administrative activities. Performance An instance that feels fast and is responsive to the user provides a better user experience and helps maximize efficiency. Upgrades ServiceNow recommends that you upgrade frequently. This category includes any impediments that may affect a successful upgrade. User Experience Certain configuration and customization choices negatively impact a user’s experience with the ServiceNow applications, making the system more frustrating to use. Security This category highlights items that you should consider for a more secure system. Insights HealthScan automatically analyses the findings of definitions and generates an overview of how they are impacting a category. For example, there are performance related definitions that check for coding best practices. During the scanning process HealthScan analyses the findings and provides a high-level recommendation on how to improve development methods. © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 257 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Definition A definition is a best practice check. HealthScan analyzes an instance using many hundreds of definitions to identify potential misalignment from best practice or items that may impact instance health. When a definition is executed during an instance scan, it can generate a finding or a statistic. Finding A finding is an output of an instance inspection. It represents an object that is misaligned to best practices and may need to be corrected. Findings may be automatically produced by ServiceNow HealthScan. Statistic A statistic provides information on the makeup of an instance, giving extra context to the health of the system. This may include information such as the number of lines of custom code. It is often inappropriate to directly “correct” these items, but do still give information on instance health and alignment to best practices. Ratings Scan findings have a rating, linked to the definition recommendation. There are 3 ratings, listed below in order of importance. The higher the rating is, the fewer potential reasons to ignore the finding. Category Description Act Instance health is being impacted. The finding recommendation should be followed to align to best practices. Recommend Its good practice to follow the recommendation but there may be extenuating circumstances that need to be reviewed. Discuss Follow the recommendation where possible but evaluate and discuss surrounding circumstances © 2018 ServiceNow, Inc. All rights reserved. CONFIDENTIAL 258 ServiceNow, the ServiceNow logo, Now, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc., in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help

Related Documents

Bachelor's Degree in Data Science _ Embry-Riddle Aeronautical University.pdf
Final Exam BUSN 333.docx
serviceMap.pdf
multi-tenancy-domains.pdf
Media-Release-Stolen-ATV-Blount.pdf
platform-management-practices.pdf
ServiceNow Security Best Practices Guide v1.19.pdf
Why ServiceNow - Rome v1.docx
Oracle_Sql_Cheatsheet.xlsx
SQL QUERY-ASSIGNMENT-PART1.doc
INFM109 M01 Pre-Course Assessment .docx
Money Risk Control Standards Endgames.docx

Browse Popular Homework Q&A

Q: Function f(x)=x²-9x + 21 Number Type
Q: The mass of an electron is 9.10938356×10-31 kg. The determination of the structure of molecules is…
Q: Determine the cost of merchandise sold for each sale and the inventory balance after each sale,…
Q: ow do I put this work in the answer to the second part of the question? Do I have to write 2…
Q: Problem 5: UP 9.31 Consider a wire of circular cross-section with a radius of R = 3.00 mm. The…
Q: 1. Find the probability of locating the electron between (2)ao and (3/2)ao when in the ground state…
Q: Integrate both sides of this equation. 015 -=[ye-41] = (4t+5) e-4t e-41 = S(4t+5) e-4¹dt ye -4t. =…
Q: The next three Parts are based on the table below which shows a payments schedule for a hypothetical…
Q: Let E = {e₁,e₂, e3} be the standard basis for R³, B = {b₁,b₂, b3} be a basis for a vector space V,…
Q: Solutions of sodium acetate and acetic acid are combined in equal volume to produce a buffer.…
Q: Problem 11.4_4 Use partial fractions to invert the following Fourier transform. لياة (1 + i)(1+2iw)
Q: Refer to the Article Summary. Implementing a negative interest rate policy, as is discussed in the…
Q: Write down all elements of {I, J, K} x {W, X}. (Enter your answer in set notation.)
Q: * 00 F. Consider the following polynomial function. f(x) = x4 - 7x3+ 7x² + 21x – 30 Step 3 of 4:…
Q: What are the pros and cons of adding this product to the “big three” strategic cola brands,…
Q: If the slope of the graph of f (same as slope of tangent line to graph of f ), at the point (1,2) ,…
Q: I already tried the answer 5.27 N. I got feedback from my professor explaining that the question…
Q: Remmel Corporation has provided the following contribution format income statement. Assume that the…
Q: How do you currently describe the business climate globally? What are the implications for the…
Q: 5)  Before transferring the rod into the graduated cylinder, the cylinder tipped and some of the…
Q: 1. Solve the following differential equations using variation of parameters. If no solution is given…
Q: In order to sketch the graph of f'(x), we must have a formula for f(x). O True O False
Q: In the circuit below the value of the resistance 14 Ω and the value of the capacitance is 2.0 µF.…
Q: Suppose population 1 consists of all students who picked up all the tests they completed prior to…
Q: QUESTION 6 Write the equation of the line with slope =0 that passes through the point (5, 7) y=7 O O…