[Video tutorial] Controls: Attestations, Indicators and Control Tests explained

[Eric Feron]

17 minutes to clarify and disambiguate once and for all the concepts and terminology around Controls, Attestations and Tests.

These are so important to make the best of ServiceNow's GRC solution.This video tutorial is essential before GRC Fundamentals training, after training, before implementation and even if you feel that you mastered it all already.

Guest speakers:

Scott Ferguson, Director, Outbound Product Management, Risk, ServiceNow.

Jan Spurlin: Senior Implementation Trainer, TACO, ServiceNow.

Video contents:

00:01 Introductions

00:42 Why do we need to talk about Controls: Attestations, Indicators, Tests.

02:03 Refreshers: Maturity journey, The get-started tutorials series

02:39 The five-step life-cycle of a Control: Owners, Attestations, Indicators, Tests.

05:02 How it works in ServiceNow: Attestations (Draft, Attest, Review, Monitor. Retire)

06:31 Indicators (Monitor)

08:38 Test

10:30 Common mistakes: just don't do this!

14:16 Please do this right now

16:42 Conclusions

Download the PDF version of the slides:

[Eric Feron]

The new episode of the GRC tutorials series is now available in the community area dedicated to new Policy Compliance & Risk customers

Enjoy! 😉 

How to efficiently manage IT Compliance with ServiceNow: 70% faster!

[Eric Feron]

Hello all,

getting started with GRC is not straightforward and the path to success can sometimes appear a little elusive.

Since February of this year, we have started putting together a series of video tutorials aimed at guiding, step-by-step, the new members of the GRC community. We all want them / you to be very successful, fast.

Now that we have a strong (and still growing) program of (FREE) tutorials to help our friends get started, we have packaged them into a simple one-place-to-go.

I am pleased to announce the launch of the new community area for new users of Policy & Compliance. If you are getting started with Policy & Compliance, you simply cannot afford to not review ALL the tutorials available and follow the guidance and tips shared by our specialists.

And "what about VRM" you may ask? Fear not, the same format is on the way.

Enjoy and engage.

Thank you all.

EF

[Eric Feron]

Here is the current list of "get started" tutorials for new customers:

For Policy, Compliance and Risk:

• Prepare to implement Policy, Compliance and Risk
• Implement Policy, Compliance and Risk
• Find the right partner for your implementation
• What training is right for you?
• Profiles (Entities) for Governance, Risk and Compliance: why you need them and how to set them up.
• UCF - Why and how.
• Entities (fka Profiles) in a few words: All places, people and things that...
• Controls: Attestations, Indicators and Control Tests.
• IT compliance.
• Become a GRC athlete.
• GRC implementation checklist.

For Vendor Risk Management:

• Get started with Vendor Risk Management - Product demo.
• Find the right partner for your implementation
• What training is right for you?
• Solve IT Vendor Risk.
• The Vendor Portal in 5 minutes: What it does, how to use it.