I have some questions regarding aspects of GRC, specifically CIS mappings to ServiceNow. I am currently only looking at the CIS controls that pertain to software. These are located in section 2 of the CIS controls. I need best practices as they pertain to GRC within Service-Now specifically CIS section 2 mappings.
