Fundamental Building Block of GRC

Understanding GRC Terms

In case if you want to know GRC terms used in ServiceNow and industry

IRM Implementations course - new 3 day version debuts July 6-8th

The GRC: Integrated Risk Management Implementations course is changing! The new course will be 3-days.  The course includes several of the new features released in the May store release. First course will be taught by me on July 6th thru the 8th.  An...

Maximum number of Indicator Tasks

Introduction: Many of our customers are using SN GRC/IRM applications and they are getting advantages more and more. One of the powerful components is Indicators, enabling the customer to automate evaluation of KPI/KRIs, and many other use cases like...

How to create custom tabs on workspace record pages

Hi, As part of this recording i will show you how to create custom tabs on a record page component. Something like how we developed overview pages in Risk workspace https://youtu.be/3V8yWfdAf48 Thanks, Naveen

2022 Risk Product Store Release Summary

Hello GRC Community!  I hope everyone had a great Q1. The risk BU was busy gearing up for our March 2022 store release. Now that we have completed this task, we will resume our store release summaries in the GRC Store Release Updates sub-forum. Pleas...

March 2022 Risk Store Release Summary

March 2022  Hello GRC Community! Now that we have carried out our first store release of 2022, it's time to recap the awesome capabilities that came with it! Below is a quick summary of the new capabilities based on the GRC application. Where applica...

IRM Important Fundamentals

Hi All I have been learning about IRM (Old GRC) for sometime, and it look me sometime to get my head around it. I started building this infographic as a way for me visualize and understad nuts and bolts (of IRM), and realized that it may help others ...

Compliance isn’t easy: it’s expensive, time-consuming - Can AI and Automation help?

Compliance isn’t easy: it’s expensive, time-consuming, and constantly changing regulations. A study from Ponemon Institute revealed that non-compliance costs more than twice the cost of maintaining or meeting compliance requirements.   #Issue-1:  M...

The Unified Compliance Framework (UCF) and ServiceNow. Get started.

For users and practitioners of the ServiceNow Governance, Risk and Compliance applications. An overview and get-started guide of the Unified Compliance Framework (UCF) in a 21 minutes video tutorial by Ben Forrest, Principal Technical Trainer, Servic...

InCountry platform vs Edge Encryption

In the second part of our series, we explored how the InCountry platform can address the compliance issues in ServiceNow with minimal effort from your side. To remove any confusion out there, we want to compare our solution to the ServiceNow Edge Enc...

Get started with Vendor Risk Management - Product demo

If you are a Vendor Risk Manager or a Vendor Manager, this tutorial will show you a step-by-step in-product guide to get started and quickly get value from your ServiceNow Vendor Risk Management application. In 19 minutes, Donna Johnson, Advisory Sol...

September 2021 Release Summary

Hello GRC family! We have had a busy year all leading up to this release. The following is a summary of what was released in September. In short, we released a new product as well as a new user experience. Please note, all capabilities mentioned (pri...

Replicating CI Relationships in GRC with Flow Designer

While entity type filters and entity class rules can automatically create entities and assign them to classes, what about the relationships between entities? How can we replicate CI relations between their corresponding entities? These questions came...

Why P&C, and not Risk, can be a great first step for many clients

Ever since the (partial) renaming rebranding of GRC to IRM, it has bugged me that the focus is so heavily put on the Risk solution. The P&C module is so much more versatile and fits a lot of use cases which can form the entry into the IRM concept for...

How to: Audits in ServiceNow. The example of SOX (with a link to a free online class).

Learn how to set the whole of your GRC infrastructure in motion to save time with this episode of the "Get started with GRC" on audits. Controls, Entities, Indicators etc. all come together in this beautiful conclusion of your compliance or risk jour...

Empty Numbers - and how to solve it

Have you ever seen Controls and Risks generated with Empty numbers?   The problem is simply due to scope, and the lack of global prefix in the default value of the number field on the base sn_grc_item table. The same exists on sn_grc_document, so it ...

June 2021 Store Release Summary

Hello GRC Community! We had a successful release this past month. Here is what you should look out for in the store.   SIG Questionnaire Integration (VRM) The ServiceNow GRC: SIG Questionnaire Integration application provides integration of the Santa...

GRC Business User Role - v 12.x - new updates you want to know about

A couple of months ago @Rafael Cardoso posted a very good article on this role - but things have changed.  I will put a link to his article at the end of this article. The intent and purpose has not changed, however what happens during an upgrade has...

Read before upgrading your plugins to version 11.0.3 - "GRC Business Users"

Hello all, I was trying to search for comments or posts around this plugin upgrade version (11.0.3) but it seems it did slipper somehow.   ServiceNow introduced the new role "GRC Business User" in the latest release (11.0.3) and added to all users in...