2024 Q2 How-to: Third-party Risk Management

GRC: Business Continuity Management || Knowledge & Troubleshooting Resources

I recommend bookmarking this article so that you are automatically notified by email when changes are made by me.If you miss any content, please leave it as a comment and I will add it to this article.   Table of Contents What is Business Continuity...

Strengthening Cybersecurity: Understanding the Differences Between DORA and NIS-2

In recent months, the EU has introduced two key pieces of legislation aimed at bolstering cybersecurity: NIS-2 and DORA. While both initiatives might seem similar at first glance, they target different sectors and address distinct security challenges...

Risk Management - Prescriptive Guidance

  Risk Management -Prescriptive Guidance:   How to best align your entity hierarchy with the CSDM/CMDB to create a robust integrated risk framework.   Entities are one of the most important elements in creating a robust risk management framework, but...

Error - Unparseable number: " " " " when trying to create authorization package

Issue after upgrade to San Diego or could be any new future upgrades. When you try to create a record you will see the following error message . In this case The authorization Package - "Unparseable number: """" error while creating new record from t...

Tracking Contract Obligation Compliance to Improve the Bottom Line Growth

Your vendors are crucial to your company's success. However, you may not realize how critical it is to manage your connections with them effectively. Procurement used to be just the department in charge of purchasing products and services—nothing mor...

IRM Implementation On-demand course has been updated and is live

Today, an updated version of the GRC: Integrated Risk Management Implementation course has gone live in Now Learning.  This recorded course is based on the 3-day version of the class. This course is also offered in the instructor-led format. Here is...

Recommended training for GRC

ServiceNow training and certification sets you and your business up for success, which is why it’s critical to make training an essential part of your ServiceNow program. By building the right skills, you can deliver more value more quickly, increase...

Recent news where GRC could have been game changer for customer

In October 2023, the RBI penalized Union Bank of India and RBL Bank for not complying with regulatory standards. Union Bank faced a fine due to insufficient viability assessment of a loan project, a challenge that ServiceNow GRC's advanced risk asses...

How to Expose additional fields on the Attestation

Use Case: When a control owner takes an attestation it does show the name of the control but no other fields are exposed. The solution below allows you to expose fields from the control on the attestation allowing the control owner to view more detai...

ServiceNow's compliance with regulations/standards/etc. SOX1 SOX2

ServiceNow makes available to registered customers and prospects a number of key reports.  Please see below for how to access our SOX1 and other reports. WHAT IS THE CORE The CORE is an extensive repository of ServiceNow documentation located in the ...

Using the GRC: Policy and Compliance integrator to import your entire framework

Hello, If you haven't used the new feature Policy and Compliance Integrator, roll your sleeves up - this is a game changer. Forget about transform maps to import Authority Documents, Citations and Control Objectives, this scripted REST api will do ev...

What is the GRC Entity Framework and how does it work?

Having the right Entity Framework in place is a critical step in setting up the risk and control framework in ServiceNow. This article will cover what entities are, why they are important, and how they work in ServiceNow. (Check out part 2 of this ar...

Training - Instructor-led GRC/IRM Public Training Schedule

Searching for the right course to help you on your career journey, look no further! Find all available courses ServiceNow offers and the class schedules by region that will support your career journey. You can find virtual offerings, In Person Offeri...

GRC Series Article 1: GRC, Security Ops and Security Incident Response

 The Governance, Risk, and Compliance applications The ServiceNow Governance, Risk, and Compliance (GRC) applications help transform inefficient processes across your extended enterprise into an integrated risk program. Through continuous monitoring ...

Mastering Integrated Risk Management with ServiceNow: Transforming the Banking Industry

  Introduction: In today's rapidly changing business environment, organizations, especially in the banking industry, are faced with an increasing number of risks and regulatory challenges. Efficient risk management is crucial to protect against fina...

Solving a Major Pain Point: Streamlining Compliance with UCF Integration in ServiceNow

Introduction: Integrating the Unified Controls Hub (UCF) with ServiceNow can be challenging for organisations with existing control programs. In this blog post, we will provide practical examples for each strategy to successfully implement UCF with ...

Risk Heatmap Workbench

Without a doubt the coolest feature with the SD release, that was also showcased by @UTKARSH JAIN last week, is the heatmap workbench from the Workspace.  There is however something really critical to know if you want to test it out: you need the cor...

Before deploying ServiceNow IRM solutions, customers could ask ServiceNow partners about these

  As a ServiceNow customer planning to implement the Integrated Risk Management (IRM) solution, I would have several questions to ensure a smooth and effective implementation. Here are some questions I might ask:   What are the key features and bene...

BUG FIX: Solution to error message received when trying to generate PDF for BIAs in BCM Workspace

When upgrading the GRC: Business Impact Analysis plugin to version 2.2.2 released on the 18th of November, one of the new features is the ability to generate BIA PDF. But, OOTB doesn't work. I tried it out in one of our company demo instances and in ...