Please join us for the 2025 Q2 Risk Customer Confidential Product Roadmap Webinar! Hello ServiceNow Risk Customer, Thank you for being a ServiceNow Customer. It’s been an incredible year so far, especially with the recent Yokohama rele...
Are you attending Knowledge 26 from 5-7 May in Las Vegas? Expand your Risk knowledge by registering early for Risk sessions (including customer presentations), workshops, and roadmaps before they fill up. And allot time to visit the Expo to converse...
Overview When an issue is raised in GRC, the hardest part often isn't identifying the problem — it's knowing what to do next. Issue owners struggle to identify the right remediation steps and owners, leading to delays in task assignment, prolonged ...
Overview The Optimize GRC Issue Resolution use case works out of the box, but every organization has different data volumes, resolution patterns, and process expectations. This article covers every supported customization — from tuning which past i...
Overview Employees often struggle to report GRC issues with enough detail for triage teams to act on. Vague descriptions lead to back-and-forth, delayed resolution, and inconsistent records. The Report a GRC Issue AI agent solves this by guiding e...
Overview The Report a GRC Issue agent is ready to use out of the box, but most organizations have unique terminology, governance structures, and data models. This article covers every supported customization — from updating a definition in a table...
Hello Community, Have you worked with Advanced Risk in ServiceNow IRM? If yes, you may have come across a configuration/feature called Risk Assessment Methodology (RAM) and wondered what exactly is this, and why do I need it, when I already have ...
Risk Response in ServiceNow IRM is the structured process that kicks in once a risk assessment is complete and the residual risk exceeds your defined appetite. In this implementation article, we will discuss the "now what?" step when your team deci...
Welcome to the Q1 Release for ServiceNow Risk and Resilience! This release delivers meaningful advances across AI governance, integrated risk management, privacy, third-party risk, and sustainability - all designed to help organizations manage comp...
Modern enterprise workflows are becoming increasingly data-driven and decision-heavy — and with that, the need for intelligent assessments has never been more critical. Whether you're measuring service quality, assessing user satisfaction, collecting...
Overview Many organizations using the ServiceNow GRC (Governance, Risk, and Compliance) platform face challenges when customizing the risk assessment component to meet specific business requirements. One common request involves enforcing additional v...
The Problem It Solves In most GRC programs, risk managers identify risks by having managers manually search risk libraries, consult business owners, and review external sources periodically — a slow, inconsistent, and expertise-dependent process. ...
As we mentioned in part 1 of this article, InCountry is the best way for companies to securely store regulated data and stay compliant with local data regulations worldwide. InCountry is unique because the platform has considered all the imaginable s...
Compile all known external regulations, internal policies, control objectives, and risk statements. Review them to understand the scope of your risk and compliance activities and how to group entities (people, places, objects, or things that need to...
UPDATED 3-9-26 Curious about the latest ServiceNow Risk capabilities, including Now Assist? On this page, we will post demos of our new risk and compliance features in anticipation of the May 5 general availability date for the Australia release. (...
The future of Risk Management and Security Operations is here – and we want YOU to be part of it! ServiceNow Risk and Security Operations customers are invited to join us at the upcoming Nexus 2026 conference. When - March 11-12, 2026 Where - Pos...
Inherent Risk Questionnaire (IRQ) and Risk Tiering Assessments help organizations apply the right level of due diligence based on the risk a third party poses by defining the scope and aiding in prioritization. These tools are essential in building ...
Every organization must decide how much risk it's willing to accept within its operations. But without a way to document, track, and act on those boundaries, risk appetite remains a concept rather than an actionable process. It doesn't drive decision...
Image by Laura Montagnani from Pixabay Stay Ahead: Preparing for AI, Risk & Security in the Next Regulatory Wave If you are a ServiceNow Risk and Security customer interested in practical insights and best practices to help you improve risk an...
Mary Hain
LisaLatour
Sarah Wood
Steph Morillo
