ServiceNow's Security & Risk Customer Community Event: Nexus Security & Risk As AI reshapes the security and risk landscape, staying connected with the community tackling these challenges has never been more important. We'd like to invite our Servi...
Curious to see a demo of the latest ServiceNow Risk capabilities for Q2 26? Every release, we post a list of demos of the latest risk and compliance features in our portfolio. Come back as we add more demos as we approach our Q2 release day on June 1...
You can register here for either or both webinars here. Bookmark this page for on-demand webinars for the date and time of on-demand webinars for Third-Party Risk Management (TPRM) and Business Continuity Management (BCM) / Operational Resilience. C...
Welcome to the Speed Learning series for Third-Party Risk Management (TPRM), where you’ll find everything you need to succeed with your ServiceNow TPRM and the Vendor Risk implementation, which focuses on identifying and managing risks specific to yo...
ServiceNow's Security & Risk Customer Community Event: Nexus Security & Risk As AI reshapes the security and risk landscape, staying connected with the community tackling these challenges has never been more important. We'd like to invite our Servi...
What is Control Attestation with Smart Assessment Engine? Control Attestation in ServiceNow IRM is the structured process by which control owners validate and attest their responses to the questions for the control they own. The Smart Assessment En...
This is a developing series, and we'll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you'd like to see. Welcome to the Speed Learning Series for the Smart Assessment Eng...
Risk and compliance assessments are foundational to enterprise governance — but for the people completing them, they’re often repetitive, time-consuming, and frustrating. Annual refreshes, new regulations, and evolving templates frequently require re...
What is Digital Resilience Incident Reporting with Smart Assessment Engine? Digital Resilience Incident Reporting (DRIR) in ServiceNow Integrated Risk Management (IRM) is a regulation-agnostic module within the Operational Resilience Workspace that...
I recommend bookmarking this article so that you are automatically notified by email when changes are made by me.If you miss any content, please leave it as a comment and I will add it to this article. Table of Contents What is Integrated Risk Man...
ServiceNow Operational Resilience gives you a structured way to measure, test, certify, and remediate the resilience of your business services — and the Smart Assessment Engine quietly powers most of it. If you've ever been handed a request for "evid...
Curious to see a demo of the latest ServiceNow Risk capabilities for Q2 26? Every release, we post a list of demos of the latest risk and compliance features in our portfolio. Come back as we add more demos as we approach our Q2 release day on June 1...
Now Assist for IRM can make your day-to-day risk and compliance work a lot smoother. It's not a separate tool to juggle—it's built right into your ServiceNow Integrated Risk Management (IRM) workflows. The idea is to move beyond manual, time-consumin...
What is IRM’s CRI Profile Accelerator? The Cyber Risk Institute or CRI, a group of 50+ financial institutions and regulators, created an industry-standard approach for cyber risk management. The framework includes: a Profile Core based on NIST CSF 2....
Please join us for the 2025 Q2 Risk Customer Confidential Product Roadmap Webinar! Hello ServiceNow Risk Customer, Thank you for being a ServiceNow Customer. It’s been an incredible year so far, especially with the recent Yokohama rele...
The IRM Risk Management Workspace is a role-based, single-pane experience built on Now Experience UI for risk professionals. Introduced in the Rome release, it lets risk stakeholders view risk posture, execute assessments, monitor KRIs and KCIs, mana...
Are you attending Knowledge 26 from 5-7 May in Las Vegas? Expand your Risk knowledge by registering early for Risk sessions (including customer presentations), workshops, and roadmaps before they fill up. And allot time to visit the Expo to converse...
Overview When an issue is raised in GRC, the hardest part often isn't identifying the problem — it's knowing what to do next. Issue owners struggle to identify the right remediation steps and owners, leading to delays in task assignment, prolonged ...
Overview The Optimize GRC Issue Resolution use case works out of the box, but every organization has different data volumes, resolution patterns, and process expectations. This article covers every supported customization — from tuning which past i...
Overview Employees often struggle to report GRC issues with enough detail for triage teams to act on. Vague descriptions lead to back-and-forth, delayed resolution, and inconsistent records. The Report a GRC Issue AI agent solves this by guiding e...
Overview The Report a GRC Issue agent is ready to use out of the box, but most organizations have unique terminology, governance structures, and data models. This article covers every supported customization — from updating a definition in a table...
Hello Community, Have you worked with Advanced Risk in ServiceNow IRM? If yes, you may have come across a configuration/feature called Risk Assessment Methodology (RAM) and wondered what exactly is this, and why do I need it, when I already have ...
Mary Hain
LisaLatour
Sarah Wood
Dan Bruhn
Steph Morillo
