In response to the question “GRC/IRM – How to find entities and controls tied to Authority Documents ” on the ServiceNow Community I wanted to share something I built in the past.
This is exactly where Content Reference comes in. Its designed to tag any type of record defined in GRC that references content packs, integrations, use case accelerators, or new regulations using those records. Once tagged, you can filter by Content Reference to quickly identify which records are part of a given set. For example, you could tag all SOX or NIST content, or generate reports showing which records are linked to specific integrations and accelerators.
The challenge however is that these relationships are not automatic. Yet they are essential for traceability and compliance reporting and creating and maintaining them manually can quickly become time-consuming.
To address this I created an automation that removes the manual effort of building these relationships. The update set leverages Content Reference to:
-
Automatically tie content back to an Authority Document
-
Ensure consistent relationships across GRC objects
-
Save time during framework onboarding and updates
-
Improve traceability and reporting
Download: GRC Content Reference Automation – ServiceNow Share
Feel free to try it out and share your feedback so I can make it even better.
