GRC relation with CMDB

[Anshul Shrivast]

How the GRC have dependency in CMDB. If we importing CMDB manually in ServiceNow so what fields we should keep in our data that can be used in GRC in future.

As CMDB will manually handled so we want know is there any field level relationship with GRC ?

Let me know if need more information.

[Community Alums]

Hi @Anshul Shrivast ,

CMDB is the main aspect of performing Risk Management / Compliance / Auditing purposes.

To understand the dependency of CMDB, You must know what is Entity, which is nothing but anything like people, process,objects, locations, applications, etc.. on which you want to check the compliance . An Entity could be a Application called Internal apllication for employee, which is stored in cmdb_ci_Business_applications, so you are calling this application from CMDB.

How, it's all connected , for that you will need to undersatnd what is Entity scoping.

Which you can learn from : Entity scoping in GRC 

[Anshul Shrivast]

Hi Sandeep,

Thank you for the information it really help.

Is there any chance that if we missed some fields data of CMDB and we implement GRC, It will impact or not ?

[Community Alums]

Hi @Anshul Shrivast ,

It depends on what fields you are missing, are are important to access the compliance and risk, that's important.

[Anshul Shrivast]

Hi @Community Alums ,

So that means ServiceNow not provide any OOTB field level relationship or any mapping with GRC.

Is that correct ?