Governance, Risk and Compliance (GRC)

An integrated approach to build operational resilience, mitigate risk, and manage compliance.

Q4 Store Release Highlights for Risk and Resilience
blog

Q4 Store Release Highlights for Risk and Resilience

Welcome to the Q4 Store ...

Rosalind Morvil
Watch the latest Risk demos for the Q4 25 store release
Article

Watch the latest Risk demos for the Q4 25 store release

Grab a few minutes to ge...

Mary Hain
Third-Party Risk Management (TPRM) Smart Assessment Engine (SAE) Migrati...
blog

Third-Party Risk Management (TPRM) Smart Assessment Engine (SAE) Migrati...

kevinluo
New Course Launch - AI Control Tower (AICT) Implementation Bootcamp
blog

New Course Launch - AI Control Tower (AICT) Implementation Bootcamp

Pankaj Kumar Pa
Preparing for your IRM Risk Management adoption
Article

Preparing for your IRM Risk Management adoption

Note: This is a developi...

Mary Hain
How to monitor and maintain awareness of your GRC license usage
Article

How to monitor and maintain awareness of your GRC license usage

Mary Hain
Change Management Lessons from the Field: Real ServiceNow Risk Implement...
blog

Change Management Lessons from the Field: Real ServiceNow Risk Implement...

Shimoli Gandhi
A quick overview of the Zurich release for Risk.
blog

A quick overview of the Zurich release for Risk.

The Zurich Release is He...

Rosalind Morvil
Build your Gen AI skills using our Now Assist for IRM speed learning con...
Article

Build your Gen AI skills using our Now Assist for IRM speed learning con...

Mary Hain
Is your risk program stuck in neutral? Try our new domain guidance to g...
Article

Is your risk program stuck in neutral? Try our new domain guidance to g...

Mary Hain
Get ready for your Third-Party Risk Management (TPRM) Adoption
Article

Get ready for your Third-Party Risk Management (TPRM) Adoption

Mary Hain
Getting Started with Business Continuity Management (BCM): Features and...
Article

Getting Started with Business Continuity Management (BCM): Features and...

Mary Hain
Are you ready to start your implementation journey for a ServiceNow Risk...
Article

Are you ready to start your implementation journey for a ServiceNow Risk...

Mary Hain

Getting Started

Getting Started with Risk Management

Getting Started with Now Assist

Get ready for your Third-Party Risk Management (TPRM) Adoption

Business Continuity Management (BCM): Features and Capabilities

Welcome Guide

Product Checklist

Quickstart Guide

Product Success

Training Path

Build a solid learning path to prepare for your implementation journey

Training Path

FAQ

Process Guides

Measure and Grow

Cyber Risk Domain Guidance

Measuring Business Outcomes

Performance Measurement and Analytics

AI Maturity Index

Connect at events

Live on ServiceNow: What’s new for Privacy Management in the Q4 S...

Online 12/17/25

On-Demand and Live Events

2025 Risk & ESG Events
blog

2025 Risk & ESG Events

2025 Risk & ESG Events Integrated Risk Management (IRM) | Third-party Risk Man...

Emily_Podhajsky

Resources

Digital Operational Resilience Management

DORA

Digital Operational Resilience Management

Release Notes

Essential Checklist for ESG

GRC Terminology

Entitlements

Store

Now Create

Risk Roadmap

This is a private group, invitation only

Risk Roadmap

Risk & ESG PAC

This is a private group, invitation only

Risk & ESG PAC

Accelerate

This is a private group, invitation only

Accelerate

Activity in GRC

Ask a Question

Question status: Question status:

Sorted by:

Featured Q4 Store Release Highlights for Risk and Resilience

Welcome to the Q4 Store Release for ServiceNow Risk and Resilience! This release brings a wave of innovation across risk, resilience, privacy, ESG, and AI governance, empowering organizations to manage complexity, strengthen compliance, and drive ope...

blog

Featured Preparing for your IRM Risk Management adoption

Note: This is a developing series, and we’ll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you’d like to see. Welcome to the Speed Learning Series for IRM Risk Managemen...

Article

Featured 2025 Risk & ESG Events

blog

Featured How to monitor and maintain awareness of your GRC license usage

The GRC Licensing Summary Dashboard enables you to track, forecast, and optimize your GRC usage. As organizations expand their governance, risk, and compliance (GRC) programs, monitoring license consumption becomes important to manage costs, mainta...

Article

Featured Get ready for your Third-Party Risk Management (TPRM) Adoption

Welcome to the Speed Learning series for Third-Party Risk Management (TPRM), where you’ll find everything you need to succeed with ServiceNow TPRM and the IT Vendor Risk domain, which focuses on identifying and managing risks specific to your technol...

Article

Modify Inherent and Residual Assessment Scoring Criteria after RAM is published

Is it possible to modiffy the inherent and residual assessment scoring criteria after the RAM is published? I am not making changes to the factors, just want to change the qualitative scoring criteria.

Question

Can we migrate the Classic assessment assessment responses to Smart assessment responses?

We can leverage the migration tool from the Smart assessment engine to migrate the Classic questionnaire templates and metric categories to Smart questionnaire templates and sections.I want to know if there is a way for us to migrate the Classic asse...

Question

Roles required to view action tasks and smart assessments in GRC DRIR application

I have created an approver group for GRC Digital Resilience Incident Reporting (DRIR) application with roles of "sn_dri_inc_rptg.digital_resilience_incident_user" and "sn_oper_res.user". The approvers need to have Read only access to the DRIR case,...

Question

How to make the clickable link in the workspace list view to download attachment?

Hi Dev, I want to download the attachment directly by clicking the bia.docx link as shown below. right now the record is getting open as per 2nd image.So can some one help me to know how can i download the attachment by directly clicking from list vi...

Question
Compliance Management

Export with a Generate PDF UI action on BCM module

Hello Team, There is a scenario, where Smart Assessment and Legacy assessment have a different set of contents, hence user wanted when he/she will click on "Generate PDF" button then if it is Legacy assessment then it should give different content an...

Question

Entity Based Access

Hello experts,I’m setting up Entity-Based Access in GRC and running into a weird issue. I’ve done the following so far:Installed the Entity-Based Access pluginEnabled the property: sn_grc_ent_access.enable_entity_based_accessCreated an Entity Acces...

Question
Integrated Risk Management (IRM)

Reassign button customization for Smart Assessments

Hi Everyone,I am currently working with Smart Assessments for BCM (Business continuity management) scope, and we have a requirement to customize the Reassign button on the Smart assessment to pull in a filtered list of users only.I am not able to loc...

Question

Heatmap with multiple colour

I have heatmap, where i can use two colors to define them which is available in out - of - box configurationbut i need to define multiple colours to define heatmap.this is the heatmap which is was createdbut i want to replicate in this way can anyon...

Question
risk management

Default query in GRC ServiceNow

Hello, Unable to find backend configuration for attached filter. This filter is visible to all user and users are unable to remove the filter.Could you please help me like where i can see the backend configuration for this as i need to remove this fi...

Question

GRC : Guidance on UFC Spoke Plugin and ISO 2022 Controls

Hello everyone,I need some help regarding the UFC Spoke plugin in ServiceNow. Could someone explain the technical steps required to download the controls and ISO 2022 citations?Do I need to create an account somewhere?Is this feature free or paid?Aft...

Question

Watch the latest Risk demos for the Q4 25 store release

Grab a few minutes to get a firsthand look at demos of the latest from ServiceNow Risk capabilities, including Now Assist (#GenAI) and Agentic AI capabilities that dramatically change the effectiveness of your any risk team. Bookmark this page as mor...

Article

KRI dashboard IRM

Can someone tell me IRM ootb KRI Dashboards names. Which includes KRI details

Question

TPRM - Engagement calculation

Hi all, Client is moving from VRM to TPRM and they want to estimate how many engagements will be needed.How can I calculate engagements? I assume that I should consider number of vendors, assessments per vendor and contracts per vendor.How can I cal...

Question

Q4 Store Release Highlights for Risk and Resilience

blog

Resolved! What is the best approach for moving Smart Assessment Templates between environments?

As we are starting our journey to convert classic attestations to new attestations using the Smart Assessment engine we found ourselves at a decision point on how we migrate the templates between the environments. Background: we cannot build the temp...

Question

Ask a Question

Top Helpful Authors

User

Count

Unanswered questions

Subject

Author

Posted

TPRM - Engagement calculation

Thursday

Workflow Data Fabric and GRC Indicators

a week ago

Smart Assessment Essentials

a week ago

What are the automation or scripting options avail...

a week ago

Get proper inherent risk score using 6x6 risk matr...

2 weeks ago

Connect at events

Live on ServiceNow: What’s new for Privacy Management in the Q4 S...

Online 12/17/25

Let's connect together

Join us to make our over 900K member community even better. Create your free account and make the world work better for everyone.

Join the Community

Governance, Risk and Compliance (GRC)

Hot Topics

Q4 Store Release Highlights for Risk and Resilience

Rosalind Morvil

Watch the latest Risk demos for the Q4 25 store release

Mary Hain

Third-Party Risk Management (TPRM) Smart Assessment Engine (SAE) Migrati...

kevinluo

New Course Launch - AI Control Tower (AICT) Implementation Bootcamp

Pankaj Kumar Pa

Preparing for your IRM Risk Management adoption

Mary Hain

How to monitor and maintain awareness of your GRC license usage

Mary Hain

Change Management Lessons from the Field: Real ServiceNow Risk Implement...

Shimoli Gandhi

A quick overview of the Zurich release for Risk.

Rosalind Morvil

Build your Gen AI skills using our Now Assist for IRM speed learning con...

Mary Hain

Is your risk program stuck in neutral? Try our new domain guidance to g...

Mary Hain

Get ready for your Third-Party Risk Management (TPRM) Adoption

Mary Hain

Getting Started with Business Continuity Management (BCM): Features and...

Mary Hain

Are you ready to start your implementation journey for a ServiceNow Risk...

Mary Hain

Getting Started

Getting Started with Risk Management

Getting Started with Now Assist

Get ready for your Third-Party Risk Management (TPRM) Adoption

Business Continuity Management (BCM): Features and Capabilities

Welcome Guide

Product Checklist

Quickstart Guide

Product Success

Training Path

FAQ

Process Guides

Measure and Grow

Cyber Risk Domain Guidance

Measuring Business Outcomes

Performance Measurement and Analytics

AI Maturity Index

Live on ServiceNow: What’s new for Privacy Management in the Q4 S...

On-Demand and Live Events

2025 Risk & ESG Events

Emily_Podhajsky

Resources

Digital Operational Resilience Management

Release Notes

Essential Checklist for ESG

GRC Terminology

Entitlements

Store

Now Create

Risk Roadmap

Risk & ESG PAC

Accelerate

Related Products

Security Operations

Employee Center

CMDB

Source-to-Pay Operations

Featured Q4 Store Release Highlights for Risk and Resilience

Featured Preparing for your IRM Risk Management adoption

Featured 2025 Risk & ESG Events

Featured How to monitor and maintain awareness of your GRC license usage

Featured Get ready for your Third-Party Risk Management (TPRM) Adoption

Resolved! What is the best approach for moving Smart Assessment Templates between environments?

Live on ServiceNow: What’s new for Privacy Management in the Q4 S...

Let's connect together