In ServiceNow Third-Party Risk Management (TPRM), issues originate from any identified risk or gap in risk assessments, internal investigations, control failures, risk acceptances, or continuous monitoring (e.g., threat intelligence or news alerts).I...
Running a third-party risk management program at scale is complex, especially with limited resources, a growing vendor ecosystem, and rising vendor security concerns. In this article, we will discuss how to implement external risk assessments in Thir...
The Third-Party Portal (formerly the Vendor Portal) is a secure, user-friendly interface that streamlines how third parties, such as vendors, suppliers, and partners, collaborate with your risk teams. It is a major feature of ServiceNow Third-Party R...
When third parties are unable to access the Third-Party Portal or prefer to share information through documents or spreadsheets due to internal policies, ServiceNow Third-Party Risk Management (TPRM) offers intake process alternatives. In this articl...
One of the key features of your third-party risk management program is its ability to be powered by live risk intelligence providers. You can replace periodic, manual assessments with continuous third-party monitoring and ongoing tracking of cyber, s...
The Environmental, Social, and Governance Management (ESGM) Delivery Accreditation is now available in ServiceNow University. Read more about the exam within this knowledge article: Environmental, Social, Governance Management (ESGM) - Exam Blueprint...
To help a bank become DORA (Digital Operational Resilience Act) compliant using the ServiceNow platform, the following practical steps can be taken: Conduct a Readiness Assessment: Assess the bank's current state of compliance with DORA requirements...
GRC: Digital Operational Resilience Management (DORM) Bootcamp is now available on demand in Now Learning. To enroll, log in to Now Learning. The course is free. About this course: Learn how to maintain information registers, assess ICT incidents, ...
Overview Business Continuity Planning is useful for developing continuity and recovery plans for all critical business processes and IT functions. This includes, but is not limited to: Identifying the plan scope.Documenting loss scenarios and busines...
Overview Business Impact Analysis (BIA) enables you to prioritize your organization's business processes and critical IT assets when a disruption occurs. BIAs help you identify the recovery time objectives (RTOs), recovery point objectives (RPOs), ...
In today's complex and interconnected business landscape, disruptions can arise unexpectedly, threatening critical operations and organizational stability. Business Continuity Management (BCM) offers a structured and strategic approach to ensure resi...
ServiceNow IRM (Integrated Risk Management) is a robust solution that provides a number of unique advantages compared to other GRC tools in the market. Here are some key aspects that make ServiceNow IRM stand out: Comprehensive Risk Management: ...
Gen AI Is Now Assist only accessible in the Workspace? All of our new capabilities, including Now Assist, are offered through the Workspace. Can individual clients disable some or all of the Now Assist features? Customers can define which Now Ass...
Hello, Platform Analytics is changing how we've seen reporting on the last few years. Imagine you would like to create a professional SOX (Sarbanes-Oxley) compliance dashboard to streamline reporting and risk management. While most of the components ...
The future of Risk Management and Security Operations is here – and we want YOU to be part of it! ServiceNow Risk and Security Operations customers are invited to join us at the upcoming Connect x Accelerate 2025: The Integrated Risk and Security Sy...
The GRC/IRM Business Unit conducts quarterly roadmap sessions to talk about what is coming in the future. You must be given access to this group. It is a private group. Customers, Partners and employees are welcome. The administrator coordinating th...
Intro to GRC , Authority documents & Citations ServiceNow's Governance, Risk, and Compliance (GRC) module is a comprehensive platform designed to help organizations manage their governance, risk, and compliance processes in a streamlined and effi...
The ServiceNow® Continuous Authorization and Monitoring application (CAM for short) applies a standardized approach to automating NIST's Risk Management Framework (RMF). RMF was mandated by the U.S. Federal government to provide the necessary resili...
I recommend bookmarking this article so that you are automatically notified by email when changes are made by me.If you miss any content, please leave it as a comment and I will add it to this article. Table of Contents What is Third-party Risk Ma...
Compliance with the EU’s Digital Operational Resilience Act (DORA) is an ongoing challenge for global financial services organizations and their service providers operating in the EU. ServiceNow's Risk portfolio continues to provide ongoing features ...
Mary Hain
LisaLatour
Sarah Wood
Steph Morillo
