Seeking Input from ServiceNow Community on GRC Module Enhancements

[amitta]

Hello everyone,

I have recently delved into the ServiceNow GRC module, exploring its various applications such as policy, control, issue, risk, and more. After installing all the plugins, I am now eager to implement GRC in my ServiceNow PDI and seek real-time enhancements and stories that mimic actual project scenarios. Specifically, I am interested in extending the Out-of-the-Box (OOB) life cycle of the GRC module.

Could the community provide me with real-time enhancement ideas and stories that align with practical projects? These enhancements should focus on expanding the default life cycle of GRC applications, such as policy, control, issue, and risk.

Thank you in advance for your valuable insights

[Community Alums · Accepted solution]

Hi @amitta ,

I would advice not to think over enhancements right away, as it's going to be too early for you and moreover focus on how OOTB Lifecycles of each terminologies works, example, Policy Lifecycle, Control Lifecycle, Risk Lifecycle, Engagement Lifecycle, etc..

Also, There are many Scheduled jobs runs in the backend , example the ones which moves the controls to monitor/Draft state, then control generation using entity types, so on..

[Community Alums · Accepted solution]

Hi @amitta ,

I would advice not to think over enhancements right away, as it's going to be too early for you and moreover focus on how OOTB Lifecycles of each terminologies works, example, Policy Lifecycle, Control Lifecycle, Risk Lifecycle, Engagement Lifecycle, etc..

Also, There are many Scheduled jobs runs in the backend , example the ones which moves the controls to monitor/Draft state, then control generation using entity types, so on..

[Community Alums · Accepted solution]

Hi @amitta ,

[amitta]

Hello Sandeep, Thanks for last query.

I need small info, As a newcomer to ServiceNow GRC, I've been exploring the modules such as Policies, Risks, Controls, Issues, Policy Exceptions, Remediation Tasks, and Audits. While I've grasped the basic lifecycle stages of these components in the out-of-the-box (OOB) setup – typically encompassing stages like Draft, Review, Approval, Published, and Retired for Policies – I'm curious to understand how these lifecycle stages vary across different projects within ServiceNow GRC implementations.

Could you kindly share insights or experiences regarding the lifecycle stages observed in your projects for each of the mentioned modules? Understanding these variations will greatly assist me in comprehending the practical application and customization of GRC processes within ServiceNow.

[amitta]

Hello  @Community Alums  , Thanks for last query.

I need small info, As a newcomer to ServiceNow GRC, I've been exploring the modules such as Policies, Risks, Controls, Issues, Policy Exceptions, Remediation Tasks, and Audits. While I've grasped the basic lifecycle stages of these components in the out-of-the-box (OOB) setup – typically encompassing stages like Draft, Review, Approval, Published, and Retired for Policies – I'm curious to understand how these lifecycle stages vary across different projects within ServiceNow GRC implementations.

Could you kindly share insights or experiences regarding the lifecycle stages observed in your projects for each of the mentioned modules? Understanding these variations will greatly assist me in comprehending the practical application and customization of GRC processes within ServiceNow.