Note: This is a developing series, and we’ll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you’d like to see. Welcome to the Speed Learning Series for IRM Risk Managemen...
The GRC Licensing Summary Dashboard enables you to track, forecast, and optimize your GRC usage. As organizations expand their governance, risk, and compliance (GRC) programs, monitoring license consumption becomes important to manage costs, mainta...
The Risk Zurich release is here! Get a first look at the new Risk GenAI-powered capabilities to improve your risk team’s productivity and efficiency. Here are the latest demos for Now Assist in our Risk portfolio. Now Assist for IRM: Common Contro...
Welcome to the Speed Learning series for Third-Party Risk Management (TPRM), where you’ll find everything you need to succeed with ServiceNow TPRM and the IT Vendor Risk domain, which focuses on identifying and managing risks specific to your technol...
To learn more about implementing IRM Risk Management, including setting up libraries, visit our IRM Risk Management Speed Learning Series on YouTube. Risk libraries contain your organization’s risk frameworks and risk statements. In short, they enabl...
To learn more about implementing IRM Risk Management, including the different types of assessments, visit our IRM Risk Management Speed Learning Series on YouTube. ServiceNow provides two approaches to risk assessments that support organizations a...
Note: This is a developing series, and we’ll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you’d like to see. Welcome to the Speed Learning Series for IRM Risk Managemen...
The GRC Licensing Summary Dashboard enables you to track, forecast, and optimize your GRC usage. As organizations expand their governance, risk, and compliance (GRC) programs, monitoring license consumption becomes important to manage costs, mainta...
Compliance does not work when it lives in spreadsheets and inboxes. It needs clear ownership, real-time status, and a direct line from requirements to evidence. That is why I use the ServiceNow Policy and Compliance Workspace as the command center fo...
Modern enterprise workflows are becoming increasingly data-driven and decision-heavy — and with that, the need for intelligent assessments has never been more critical. Whether you're measuring service quality, assessing user satisfaction, collecting...
Now Assist for IRM can make your day-to-day risk and compliance work a lot smoother. It's not a separate tool to juggle—it's built right into your ServiceNow Integrated Risk Management (IRM) workflows. The idea is to move beyond manual, time-consumin...
One of the most overlooked parts of IRM implementations is the taxonomy that sits underneath everything. We often talk about Authority Documents (regulations, frameworks, standards) and Risk Statements (potential events that may impact objectives) ...
In response to the question “GRC/IRM – How to find entities and controls tied to Authority Documents ” on the ServiceNow Community I wanted to share something I built in the past. This is exactly where Content Reference comes in. Its designed to tag ...
Original article was placed as a question in the GRC forum. Thanks @Rafael Cardoso for your suggestion. Dear All, Docs doesn't elaborate much on how to use code snippet for Smart Assessment and at times customers find it confusing. For one of my ...
The Risk Zurich release is here! Get a first look at the new Risk GenAI-powered capabilities to improve your risk team’s productivity and efficiency. Here are the latest demos for Now Assist in our Risk portfolio. Now Assist for IRM: Common Contro...
You've come to the right place. In this article, we list resources for you to get started, in your adoption journey, regardless of which risk product you have invested in. It’s all in the Welcome Guide for Risk and ESG Customers (also attached belo...
Introduction The ServiceNow AI Control Tower is a centralized platform designed to govern, manage, secure, and optimize AI agents, models, and workflows across an enterprise. This blueprint outlines how the AI Control Tower supports organizations in ...
Hello Community Members, I have been working on GRC for quite sometime and prepared this presentation to introduce the GRC to our users to give them overview and confidence to start with GRC. This covers most of the basic aspects of GRC and various t...
Scoring Configuration for Model Risk Assessments Required role: To configure scoring for model risk assessments, the sn_model_risk_mgmt.admin role is required. Note: The scoring in model risk assessments is done only for model risk task of type "...
Every organization has information silos, with scattered third-party data--from contact details to risk data and criticality levels--across multiple, disconnected sources. When managing thousands of third parties and engagements, the risk team will l...
ServiceNow’s new Digital Operational Resilience Management app enables customers to manage their activities associated with new operational resilience regulations such as the EU Digital Operational Resilience Act (DORA). (A PDF version is available...
Overview Crisis management enables you to effectively manage recovery during disruptions and adverse events within your organization. Crisis management may include: Monitoring upcoming and ongoing threatsIdentifying the line of impact and critical as...
Welcome to the Speed Learning series for Third-Party Risk Management (TPRM), where you’ll find everything you need to succeed with ServiceNow TPRM and the IT Vendor Risk domain, which focuses on identifying and managing risks specific to your technol...
Tiering Assessments and Inherent Risk Questionnaire (IRQ) help organizations apply the right level of due diligence based on the risk a third party poses by defining the scope and aiding in prioritization. These tools are essential in building a scal...
Mary Hain
Lisa Latour
Dan Bruhn
Steph Morillo
