The ServiceNow Store Speeds Access to New GRC Applications

[teresalaw]

What happened?

Most of you are familiar with the twice-yearly family releases of the ServiceNow platform and applications. As you can imagine we’re constantly improving the process and finding alternative ways to deliver exciting new features faster.  With the Madrid release that occurred in March, we moved to a store delivery model. 

What does this mean for you?

A store delivery model is great news for you.  It means you can get enhancements sooner since ServiceNow GRC is no longer strictly tied to a twice-yearly schedule. If we have new use case accelerators (our most recent are for NIST RMF and CSF), dashboards, or other functionality we can make much of that available to you between platform releases.  Whatever updates you’ve made between releases will be maintained when you update to the new platform release.

What’s the new process for getting your GRC updates?

Since March the four GRC applications (Policy and Compliance, Risk Management, Audit Management, Vendor Risk Management, plus all the supporting components) became available on the store to be used with the Madrid release.  On the ServiceNow Store, you can easily see what’s available by filtering on GRC.

 

• If you are performing a family release upgrade to Madrid or beyond, all the applications you’ve installed will be upgraded to the minimum required version for that family release.
• If you’re a new customer, you will be required to install the applications from the store. If you need to install in your production environment, you will have to go to the store to complete entitlement and then install the appropriate applications before you can implement your desired aspect of GRC.
• If you are an on-premise customer without store access you will follow the current process to install store applications.

Watch this 5 minute video to see how it’s done: How to get the latest Security Operation and GRC applications on your instance.

Frequently ask questions and troubleshooting information is available in this community blog: How to get the latest Security Operations and GRC applications

ServiceNow documentation is available for GRC and the ServiceNow Store  

Which applications will you find on the store?

All ServiceNow developed applications for GRC will begin with “GRC:”, third-party applications that work with ServiceNow GRC don’t follow this naming convention.  On the store from ServiceNow you’ll find the four ServiceNow GRC applications and new capabilities like Use Case Accelerators, dashboards, etc.  Below is the current list of ServiceNow applications, be sure to check the release the application supports, more are always being added.  You can also peruse the third-party applications that work with GRC to address GDPR, Vendor Risk, or Integrated Risk Management.

1. GRC: Audit Management
2. GRC: Policy and Compliance Management
3. GRC: Risk Management
4. GRC: Profiles (automatically installed with Audit, P&C, or Risk)
5. GRC: Vendor Risk Management
6. GRC: SIG Questionnaire Integration – for the 2017 and 2018 SIG
7. GRC: Performance Analytics Premium Integration (available for customers with Professional and Enterprise licenses)
8. Performance Analytics - GRC: Audit Management (requires PA Premium be installed)
9. Performance Analytics - GRC: Policy and Compliance (requires PA Premium be installed)
10. Performance Analytics - GRC: Risk Management (requires PA Premium be installed)
11. GRC: Compliance UCF - Download regulatory content and automatically map common controls (additional purchase required)
12. GRC: SOX Content Pack
13. GRC: NIST RMF Use Case Accelerator
14. GRC: NIST CSF Use Case Accelerator
15. GRC: RiskLens Integration

If you find it on the store will it support the release your instance is on?

Not necessarily.  When you click on the application, you’ll see on the right of the screen the product information.  You will only be able to import applications that are compatible with the release you are on – in this case it’s Madrid.  We may have GRC feature or core application updates that depend on a specific family release.  These will not appear on the store on the same day as the family or platform release, but we attempt to make them available as close to the family release date as possible; in some cases that is prior to the family release date.

How can you get notified when new applications are available?

Since we are adding new applications on a regular basis, even between family releases, you'll want to stay up to date on what's new. Subscribing to the GRC category so you can be notified via email when a new application is added to that category is the best way to do that. Select the filter next to My Subscriptions then select Governance, Risk, and Compliance from the popup list and hit Save.

To find out more about ServiceNow GRC please visit www.servicenow.com/grc or connect with us on the GRC Community.