Getting started with SERVICENOW IRM - POA&M/Issue Management - Authorization Package Plan of Action

[Mohammed Kemal]

ServiceNow's Governance, Risk, and Compliance (GRC) provides detection and assessment of risks in real time, streamlines and operationalizes compliance controls and accelerates the time to mitigate risks. By leveraging the built-in Audit management one can automatically create an Audit Engagement linked to their Authorization Package. Audit Tasks are automatically created for Security Control Assessors (SCAs), allowing them to manage, perform, and report on control design and operational effectiveness tests within the platform. Non-compliant controls also called ineffective controls automatically generate an Issue. Each Issue tracked as a Plan of Action & Milestones (POA&M) along with their associated remediation tasks. One can create Issue before even an Engagement is generated for a given Authorization Package by clicking new under the Issue tab. In this demo Mohammed Kemal demonstrated how to create an issue and also managing the Plan of Action & Milestones for a given Authorization package. Feel free to drop your comments or suggestions you might have in the comments bellow. Also, considering subscribing to my YouTube channels where I usually do similar video's just like this on ServiceNow and related topics. Stay tuned for the upcoming sessions.