Tutorial: How to implement Policy & Compliance and Risk Management

[Eric Feron]

Following the pre-implementation episode, in this 6 minutes tutorial, Shauna and Donna are back to present a step-by-step guide to get you and your team up and running with Policy & Compliance and Risk.

This is a must watch to reduce your "time to value" as you are looking to roll out the application.

The guide will help you hit the ground running and waste no time or resource.

FEATURED SPEAKERS

Shauna Gillens,  Security Senior Consultant, GRC Practice ServiceNow

Donna Johnson,  Advisory Solution Architect, GRC Practice ServiceNow​

1:03 Refreshers from previous episode: Maturity and choose a partner

2:07 Implementation process overview and phases

3:00 Initiate phase

3:37 Preparation phase

4:11 Create phase

4:46 Transition and close phases

5:10 What to do right now

5:38 Conclusion

The slides are available below in downloadable PDF format for your convenience.

[Jan Spurlin]

In this video there is a page that lists recommended training for the team.  The first course is ServiceNow Fundamentals.  The speaker states that not all team members need to take this course, but they do need to take GRC Fundamentals.

While it is true that not every member needs to take ServiceNow Fundamentals - they do need to know how to navigate in the ServiceNow Platform.  They need to be familiar with ServiceNow terminology.  There is a FREE eLearning course that covers most of what they need to know.  There are 7 topics and multiple videos within each topic.  All the videos cover a little more than 3 hours of instruction.

Here is a link to the eLearning course:

https://www.servicenow.com/services/training-and-certification/foundations-elearning.html

BTW - GRC Fundamentals is NOT about the fundamentals of GRC.  It is about how the ServiceNow application suite addresses the requirements of GRC.  It is a pre-requisite to the implementation course.  How to set up GRC records and move them thru their workflow is covered in Fundamentals.  This is not covered in the implementation course.  The focus in the implementation course is how to implement the GRC suite, not how to use it.  So, please encourage your GRC SMEs to take the Fundamentals course!

[sajal1]

Amazing

[Eric Feron · Accepted solution]

Hello all,

getting started with GRC is not straightforward and the path to success can sometimes appear a little elusive.

Since February of this year, we have started putting together a series of video tutorials aimed at guiding, step-by-step, the new members of the GRC community. We all want them / you to be very successful, fast.

Now that we have a strong (and still growing) program of (FREE) tutorials to help our friends get started, we have packaged them into a simple one-place-to-go.

I am pleased to announce the launch of the new community area for new users of Policy & Compliance. If you are getting started with Policy & Compliance, you simply cannot afford to not review ALL the tutorials available and follow the guidance and tips shared by our specialists.

And "what about VRM" you may ask? Fear not, the same format is on the way.

Enjoy and engage.

Thank you all.

EF

[Eric Feron]

Here is the current list of "get started" tutorials for new customers:

For Policy, Compliance and Risk:

• Prepare to implement Policy, Compliance and Risk
• Implement Policy, Compliance and Risk
• Find the right partner for your implementation
• What training is right for you?
• Profiles (Entities) for Governance, Risk and Compliance: why you need them and how to set them up.
• UCF - Why and how.
• Entities (fka Profiles) in a few words: All places, people and things that...
• Controls: Attestations, Indicators and Control Tests.
• IT compliance.
• Become a GRC athlete.
• GRC implementation checklist.

For Vendor Risk Management:

• Get started with Vendor Risk Management - Product demo.
• Find the right partner for your implementation
• What training is right for you?
• Solve IT Vendor Risk.
• The Vendor Portal in 5 minutes: What it does, how to use it.