UPDATED 3-9-26 Curious about the latest ServiceNow Risk capabilities, including Now Assist? On this page, we will post demos of our new risk and compliance features in anticipation of the May 5 general availability date for the Australia release. ...
Now Assist for IRM can make your day-to-day risk and compliance work a lot smoother. It's not a separate tool to juggle—it's built right into your ServiceNow Integrated Risk Management (IRM) workflows. The idea is to move beyond manual, time-consumin...
What is Control Attestation with Smart Assessment Engine? Control Attestation in ServiceNow IRM is the structured process by which control owners validate and attest their responses to the questions for the control they own. The Smart Assessment En...
This is a developing series, and we'll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you'd like to see. Welcome to the Speed Learning Series for the Smart Assessment Eng...
What is IRM’s CRI Profile Accelerator? The Cyber Risk Institute or CRI, a group of 50+ financial institutions and regulators, created an industry-standard approach for cyber risk management. The framework includes: a Profile Core based on NIST CSF 2....
Risk and compliance assessments are foundational to enterprise governance — but for the people completing them, they’re often repetitive, time-consuming, and frustrating. Annual refreshes, new regulations, and evolving templates frequently require re...
Please join us for the 2025 Q2 Risk Customer Confidential Product Roadmap Webinar! Hello ServiceNow Risk Customer, Thank you for being a ServiceNow Customer. It’s been an incredible year so far, especially with the recent Yokohama rele...
The IRM Risk Management Workspace is a role-based, single-pane experience built on Now Experience UI for risk professionals. Introduced in the Rome release, it lets risk stakeholders view risk posture, execute assessments, monitor KRIs and KCIs, mana...
Are you attending Knowledge 26 from 5-7 May in Las Vegas? Expand your Risk knowledge by registering early for Risk sessions (including customer presentations), workshops, and roadmaps before they fill up. And allot time to visit the Expo to converse...
Overview When an issue is raised in GRC, the hardest part often isn't identifying the problem — it's knowing what to do next. Issue owners struggle to identify the right remediation steps and owners, leading to delays in task assignment, prolonged ...
Overview The Optimize GRC Issue Resolution use case works out of the box, but every organization has different data volumes, resolution patterns, and process expectations. This article covers every supported customization — from tuning which past i...
Overview Employees often struggle to report GRC issues with enough detail for triage teams to act on. Vague descriptions lead to back-and-forth, delayed resolution, and inconsistent records. The Report a GRC Issue AI agent solves this by guiding e...
Overview The Report a GRC Issue agent is ready to use out of the box, but most organizations have unique terminology, governance structures, and data models. This article covers every supported customization — from updating a definition in a table...
Hello Community, Have you worked with Advanced Risk in ServiceNow IRM? If yes, you may have come across a configuration/feature called Risk Assessment Methodology (RAM) and wondered what exactly is this, and why do I need it, when I already have ...
Risk Response in ServiceNow IRM is the structured process that kicks in once a risk assessment is complete and the residual risk exceeds your defined appetite. In this implementation article, we will discuss the "now what?" step when your team deci...
Welcome to the Q1 Release for ServiceNow Risk and Resilience! This release delivers meaningful advances across AI governance, integrated risk management, privacy, third-party risk, and sustainability - all designed to help organizations manage comp...
Modern enterprise workflows are becoming increasingly data-driven and decision-heavy — and with that, the need for intelligent assessments has never been more critical. Whether you're measuring service quality, assessing user satisfaction, collecting...
Overview Many organizations using the ServiceNow GRC (Governance, Risk, and Compliance) platform face challenges when customizing the risk assessment component to meet specific business requirements. One common request involves enforcing additional v...
The Problem It Solves In most GRC programs, risk managers identify risks by having managers manually search risk libraries, consult business owners, and review external sources periodically — a slow, inconsistent, and expertise-dependent process. ...
As we mentioned in part 1 of this article, InCountry is the best way for companies to securely store regulated data and stay compliant with local data regulations worldwide. InCountry is unique because the platform has considered all the imaginable s...
Compile all known external regulations, internal policies, control objectives, and risk statements. Review them to understand the scope of your risk and compliance activities and how to group entities (people, places, objects, or things that need to...
Mary Hain
LisaLatour
Sarah Wood
Dan Bruhn
Steph Morillo
