What is IRM’s CRI Profile Accelerator? The Cyber Risk Institute or CRI, a group of 50+ financial institutions and regulators, created an industry-standard approach for cyber risk management. The framework includes: a Profile Core based on NIST CSF 2....
It's time to accelerate your BCM adoption journey Welcome to the Getting Started page for Business Continuity Management (BCM), where you can find the resources you need to be successful with ServiceNow BCM, including the IT Disaster Recovery domai...
The ServiceNow Exchange YouTube channel is the one place where you can find out what’s new in ServiceNow’s Risk portfolio for each release. These webinars give you practical overviews of new Risk capabilities, including the challenges they solve, new...
Your Integrated Risk Management (IRM) entity framework is doing more work than you realize. It powers risk automation, assessment scoping, Entity-Based Access, and executive reporting. When designed well, it delivers governed intelligence. When desig...
️ 3 min read What's new in ServiceNow Risk for Q2 26 Every release, we post a list of demos of the latest risk and compliance features in our portfolio. Come back as we add more demos as we approach our Q2 release day on June 11. In this articl...
Third-party risk programs are growing in complexity — more vendors, more regulations, more assessments. Managing that complexity with fragmented tools, developer-dependent configurations, and manual review processes doesn't scale. Introduced in Zur...
The IRM Risk Management Workspace is a role-based, single-pane experience built on Now Experience UI for risk professionals. Introduced in the Rome release, it lets risk stakeholders view risk posture, execute assessments, monitor KRIs and KCIs, mana...
Regulatory change is frequent and organizations must constantly adjust policies and procedures to stay compliant. The Policy Authoring & Redlining capability in the IRM Policy and Compliance Management app gives you the ability to connect your poli...
This is one in a series of articles exploring capabilities on the ServiceNow AI Platform that you may not be aware of but could be useful in improving your risk program. (More articles on platform capabilities for Risk products: AI summarization, A...
The ServiceNow Smart Assessment Engine (SAE) application can help your organization reduce the manual burden and costs of your compliance and control effectiveness assessments through automation.In this article, we will explore SAE's exceptional flex...
A new Operational Resilience Mgmt. Implementation Guide has been posted on the ServiceNow Best Practices portal. Effective as of the Australia release, it covers everything you need to know to implement Operational Resilience, starting with instal...
...AD_106... Requirement: Suppose we have a requirement in ServiceNow IRM (Risk assessment) to configure a custom approval with custom logic that approval should get triggered to approver group members except the submitter who is also part of the ap...
Every organization has policies, but many are scattered across SharePoint folders, email threads, and shared drives. The result is weak version control, limited evidence of employee acknowledgment, and no clear link to the controls those policies a...
AI Response Assist is a generative AI capability within the Smart Assessment Engine that helps assessment responders draft answers faster — without replacing their judgment. When a responder invokes Draft Responses with AI, the skill searches prior S...
Risk Management -Prescriptive Guidance: How to best align your entity hierarchy with the CSDM/CMDB to create a robust integrated risk framework. Entities are one of the most important elements in creating a robust risk management framework, but...
ServiceNow’s Continuous Authorization and Monitoring (CAM) app automates the NIST Special Publication 800-37 Risk Management Framework (RMF) for Information Systems and Organizations (rev 4 and rev 5). RMF is mandated by the U.S. Federal government...
Missed the What's New webinars about Risk capabilities in Australia? You can learn about the Australia updates for IRM, Smart Assessment Engine, AI Control Tower, and Third-Party Risk Mgmt. on your own schedule. You can access them using the links ...
Welcome to the Speed Learning series for Third-Party Risk Management (TPRM), where you’ll find everything you need to succeed with your ServiceNow TPRM and the Vendor Risk implementation, which focuses on identifying and managing risks specific to yo...
What is Control Attestation with Smart Assessment Engine? Control Attestation in ServiceNow IRM is the structured process by which control owners validate and attest their responses to the questions for the control they own. The Smart Assessment En...
This is a developing series, and we'll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you'd like to see. Welcome to the Speed Learning Series for the Smart Assessment Eng...
Mary Hain
LisaLatour
Sarah Wood
Steph Morillo
