ServiceNow’s Continuous Authorization and Monitoring (CAM) app automates the NIST Special Publication 800-37 Risk Management Framework (RMF) for Information Systems and Organizations (rev 4 and rev 5). RMF is mandated by the U.S. Federal government...
Missed the What's New webinars about Risk capabilities in Australia? You can learn about the Australia updates for IRM, Smart Assessment Engine, AI Control Tower, and Third-Party Risk Mgmt. on your own schedule. You can access them using the links ...
Welcome to the Speed Learning series for Third-Party Risk Management (TPRM), where you’ll find everything you need to succeed with your ServiceNow TPRM and the Vendor Risk implementation, which focuses on identifying and managing risks specific to yo...
ServiceNow's Security & Risk Customer Community Event: Nexus Security & Risk As AI reshapes the security and risk landscape, staying connected with the community tackling these challenges has never been more important. We'd like to invite our Servi...
What is Control Attestation with Smart Assessment Engine? Control Attestation in ServiceNow IRM is the structured process by which control owners validate and attest their responses to the questions for the control they own. The Smart Assessment En...
This is a developing series, and we'll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you'd like to see. Welcome to the Speed Learning Series for the Smart Assessment Eng...
Risk and compliance assessments are foundational to enterprise governance — but for the people completing them, they’re often repetitive, time-consuming, and frustrating. Annual refreshes, new regulations, and evolving templates frequently require re...
What is Digital Resilience Incident Reporting with Smart Assessment Engine? Digital Resilience Incident Reporting (DRIR) in ServiceNow Integrated Risk Management (IRM) is a regulation-agnostic module within the Operational Resilience Workspace that...
I recommend bookmarking this article so that you are automatically notified by email when changes are made by me.If you miss any content, please leave it as a comment and I will add it to this article. Table of Contents What is Integrated Risk Man...
ServiceNow Operational Resilience gives you a structured way to measure, test, certify, and remediate the resilience of your business services — and the Smart Assessment Engine quietly powers most of it. If you've ever been handed a request for "evid...
ServiceNow Otto for IRM (formerly Now Assist for IRM) can make your day-to-day risk and compliance work a lot smoother. It's not a separate tool to juggle—it's built right into your ServiceNow Integrated Risk Management (IRM) workflows. The idea is t...
Please join us for the 2025 Q2 Risk Customer Confidential Product Roadmap Webinar! Hello ServiceNow Risk Customer, Thank you for being a ServiceNow Customer. It’s been an incredible year so far, especially with the recent Yokohama rele...
Are you attending Knowledge 26 from 5-7 May in Las Vegas? Expand your Risk knowledge by registering early for Risk sessions (including customer presentations), workshops, and roadmaps before they fill up. And allot time to visit the Expo to converse...
Overview When an issue is raised in GRC, the hardest part often isn't identifying the problem — it's knowing what to do next. Issue owners struggle to identify the right remediation steps and owners, leading to delays in task assignment, prolonged ...
Overview The Optimize GRC Issue Resolution use case works out of the box, but every organization has different data volumes, resolution patterns, and process expectations. This article covers every supported customization — from tuning which past i...
Overview Employees often struggle to report GRC issues with enough detail for triage teams to act on. Vague descriptions lead to back-and-forth, delayed resolution, and inconsistent records. The Report a GRC Issue AI agent solves this by guiding e...
Overview The Report a GRC Issue agent is ready to use out of the box, but most organizations have unique terminology, governance structures, and data models. This article covers every supported customization — from updating a definition in a table...
Hello Community, Have you worked with Advanced Risk in ServiceNow IRM? If yes, you may have come across a configuration/feature called Risk Assessment Methodology (RAM) and wondered what exactly is this, and why do I need it, when I already have ...
Risk Response in ServiceNow IRM is the structured process that kicks in once a risk assessment is complete and the residual risk exceeds your defined appetite. In this implementation article, we will discuss the "now what?" step when your team deci...
Welcome to the Q1 Release for ServiceNow Risk and Resilience! This release delivers meaningful advances across AI governance, integrated risk management, privacy, third-party risk, and sustainability - all designed to help organizations manage comp...
Mary Hain
LisaLatour
Sarah Wood
Steph Morillo
