Third-party risk programs are growing in complexity — more vendors, more regulations, more assessments. Managing that complexity with fragmented tools, developer-dependent configurations, and manual review processes doesn't scale. Introduced in Zur...
The IRM Risk Management Workspace is a role-based, single-pane experience built on Now Experience UI for risk professionals. Introduced in the Rome release, it lets risk stakeholders view risk posture, execute assessments, monitor KRIs and KCIs, mana...
Regulatory change is frequent and organizations must constantly adjust policies and procedures to stay compliant. The Policy Authoring & Redlining capability in the IRM Policy and Compliance Management app gives you the ability to connect your poli...
This is one in a series of articles exploring capabilities on the ServiceNow AI Platform that you may not be aware of but could be useful in improving your risk program. (More articles on platform capabilities for Risk products: AI summarization, A...
The ServiceNow Smart Assessment Engine (SAE) application can help your organization reduce the manual burden and costs of your compliance and control effectiveness assessments through automation.In this article, we will explore SAE's exceptional flex...
A new Operational Resilience Mgmt. Implementation Guide has been posted on the ServiceNow Best Practices portal. Effective as of the Australia release, it covers everything you need to know to implement Operational Resilience, starting with instal...
...AD_106... Requirement: Suppose we have a requirement in ServiceNow IRM (Risk assessment) to configure a custom approval with custom logic that approval should get triggered to approver group members except the submitter who is also part of the ap...
Every organization has policies — but most live scattered across SharePoint folders, email threads, and drives, with no version control, no proof that anyone read them, and no clear connection to the controls they're supposed to enforce. Policy Li...
AI Response Assist is a generative AI capability within the Smart Assessment Engine that helps assessment responders draft answers faster — without replacing their judgment. When a responder invokes Draft Responses with AI, the skill searches prior S...
Risk Management -Prescriptive Guidance: How to best align your entity hierarchy with the CSDM/CMDB to create a robust integrated risk framework. Entities are one of the most important elements in creating a robust risk management framework, but...
ServiceNow’s Continuous Authorization and Monitoring (CAM) app automates the NIST Special Publication 800-37 Risk Management Framework (RMF) for Information Systems and Organizations (rev 4 and rev 5). RMF is mandated by the U.S. Federal government...
Missed the What's New webinars about Risk capabilities in Australia? You can learn about the Australia updates for IRM, Smart Assessment Engine, AI Control Tower, and Third-Party Risk Mgmt. on your own schedule. You can access them using the links ...
Welcome to the Speed Learning series for Third-Party Risk Management (TPRM), where you’ll find everything you need to succeed with your ServiceNow TPRM and the Vendor Risk implementation, which focuses on identifying and managing risks specific to yo...
What is Control Attestation with Smart Assessment Engine? Control Attestation in ServiceNow IRM is the structured process by which control owners validate and attest their responses to the questions for the control they own. The Smart Assessment En...
This is a developing series, and we'll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you'd like to see. Welcome to the Speed Learning Series for the Smart Assessment Eng...
Risk and compliance assessments are foundational to enterprise governance — but for the people completing them, they’re often repetitive, time-consuming, and frustrating. Annual refreshes, new regulations, and evolving templates frequently require re...
What is Digital Resilience Incident Reporting with Smart Assessment Engine? Digital Resilience Incident Reporting (DRIR) in ServiceNow Integrated Risk Management (IRM) is a regulation-agnostic module within the Operational Resilience Workspace that...
I recommend bookmarking this article so that you are automatically notified by email when changes are made by me.If you miss any content, please leave it as a comment and I will add it to this article. Table of Contents What is Integrated Risk Man...
ServiceNow Operational Resilience gives you a structured way to measure, test, certify, and remediate the resilience of your business services — and the Smart Assessment Engine quietly powers most of it. If you've ever been handed a request for "evid...
ServiceNow Otto for IRM (formerly Now Assist for IRM) can make your day-to-day risk and compliance work a lot smoother. It's not a separate tool to juggle—it's built right into your ServiceNow Integrated Risk Management (IRM) workflows. The idea is t...
Mary Hain
LisaLatour
Sarah Wood
Steph Morillo
