Risk and compliance assessments are foundational to enterprise governance — but for the people completing them, they’re often repetitive, time-consuming, and frustrating. Annual refreshes, new regulations, and evolving templates frequently require re...
What is Digital Resilience Incident Reporting with Smart Assessment Engine? Digital Resilience Incident Reporting (DRIR) in ServiceNow Integrated Risk Management (IRM) is a regulation-agnostic module within the Operational Resilience Workspace that...
I recommend bookmarking this article so that you are automatically notified by email when changes are made by me.If you miss any content, please leave it as a comment and I will add it to this article. Table of Contents What is Integrated Risk Man...
ServiceNow Operational Resilience gives you a structured way to measure, test, certify, and remediate the resilience of your business services — and the Smart Assessment Engine quietly powers most of it. If you've ever been handed a request for "evid...
Now Assist for IRM can make your day-to-day risk and compliance work a lot smoother. It's not a separate tool to juggle—it's built right into your ServiceNow Integrated Risk Management (IRM) workflows. The idea is to move beyond manual, time-consumin...
What is IRM’s CRI Profile Accelerator? The Cyber Risk Institute or CRI, a group of 50+ financial institutions and regulators, created an industry-standard approach for cyber risk management. The framework includes: a Profile Core based on NIST CSF 2....
Please join us for the 2025 Q2 Risk Customer Confidential Product Roadmap Webinar! Hello ServiceNow Risk Customer, Thank you for being a ServiceNow Customer. It’s been an incredible year so far, especially with the recent Yokohama rele...
Are you attending Knowledge 26 from 5-7 May in Las Vegas? Expand your Risk knowledge by registering early for Risk sessions (including customer presentations), workshops, and roadmaps before they fill up. And allot time to visit the Expo to converse...
Overview When an issue is raised in GRC, the hardest part often isn't identifying the problem — it's knowing what to do next. Issue owners struggle to identify the right remediation steps and owners, leading to delays in task assignment, prolonged ...
Overview The Optimize GRC Issue Resolution use case works out of the box, but every organization has different data volumes, resolution patterns, and process expectations. This article covers every supported customization — from tuning which past i...
Overview Employees often struggle to report GRC issues with enough detail for triage teams to act on. Vague descriptions lead to back-and-forth, delayed resolution, and inconsistent records. The Report a GRC Issue AI agent solves this by guiding e...
Overview The Report a GRC Issue agent is ready to use out of the box, but most organizations have unique terminology, governance structures, and data models. This article covers every supported customization — from updating a definition in a table...
Hello Community, Have you worked with Advanced Risk in ServiceNow IRM? If yes, you may have come across a configuration/feature called Risk Assessment Methodology (RAM) and wondered what exactly is this, and why do I need it, when I already have ...
Risk Response in ServiceNow IRM is the structured process that kicks in once a risk assessment is complete and the residual risk exceeds your defined appetite. In this implementation article, we will discuss the "now what?" step when your team deci...
Welcome to the Q1 Release for ServiceNow Risk and Resilience! This release delivers meaningful advances across AI governance, integrated risk management, privacy, third-party risk, and sustainability - all designed to help organizations manage comp...
Modern enterprise workflows are becoming increasingly data-driven and decision-heavy — and with that, the need for intelligent assessments has never been more critical. Whether you're measuring service quality, assessing user satisfaction, collecting...
Overview Many organizations using the ServiceNow GRC (Governance, Risk, and Compliance) platform face challenges when customizing the risk assessment component to meet specific business requirements. One common request involves enforcing additional v...
The Problem It Solves In most GRC programs, risk managers identify risks by having managers manually search risk libraries, consult business owners, and review external sources periodically — a slow, inconsistent, and expertise-dependent process. ...
As we mentioned in part 1 of this article, InCountry is the best way for companies to securely store regulated data and stay compliant with local data regulations worldwide. InCountry is unique because the platform has considered all the imaginable s...
Compile all known external regulations, internal policies, control objectives, and risk statements. Review them to understand the scope of your risk and compliance activities and how to group entities (people, places, objects, or things that need to...
Mary Hain
LisaLatour
Sarah Wood
Dan Bruhn
Steph Morillo
