Unraveling risk terminology...GRC, BCM, IRM, TPRM...

[Mary Hain]

If you are just getting started with ServiceNow’s GRC and ESG technology, you are sure to encounter a new collection of acronyms and terminology around regulations, certifications, and industry risk.

That's why we’ve compiled a list of key resources to help you quickly find and understand the new terminology you encounter during your ServiceNow adoption journey. Be sure to bookmark this page for future reference and add your own personal favorites in the Comments.

ServiceNow

• ServiceNow GRC Terminology
• ServiceNow CMDB Glossary

Industry references

• ENISA (EU Agency for Cybersecurity) Glossary
• ISACA Glossary
• ISO Risk Glossary
• OCEG GRC Glossary

 Authority Agencies, Documents, and Associated Sites

• BIS -  Basel Committee on Banking Supervision
• CISA - Cybersecurity Information Sharing Act
• COBIT - Control Objectives for Information and Related Technology
• DHS - U.S. Department of Homeland Security
• EU Banking, Insurance & Pensions - Home
• FCA - Financial Conduct Authority
• FISMA - Federal Information Security Modernization Act
• GDPR - General Data Protection Regulation
• HIPAA - Health Insurance Portability and Accountability Act
• ITIL - Framework
• NIST - National Institute for Standards and Technology
• NSA - National Security Agency
• PCI DSS - Payment Card Industry Data Security Standard
• SOX - Sarbanes-Oxley Act

[jimp1]

Bait and Switch?

BCM is in the heading -- but not mentioned in the materials.

[John Gilaspy1]

Perhaps an oversight. "Bait and Switch" is a bit harsh. BCM is considered part of IRM, and has its own section in Docs under GRC, as a simple search for it shows.