Governance, Risk and Compliance (GRC)

An integrated approach to build operational resilience, mitigate risk, and manage compliance.

Entity-based user access in Integrated Risk Management (IRM)
Article

Entity-based user access in Integrated Risk Management (IRM)

Mary Hain
Speed Learning Series: Hands-on, how-to video tutorials to streamline Ri...
Article

Speed Learning Series: Hands-on, how-to video tutorials to streamline Ri...

Mary Hain
See the Q4 25 Risk demos for the store release for an integrated view of...
Article

See the Q4 25 Risk demos for the store release for an integrated view of...

Mary Hain
Q4 Store Release Highlights for Risk and Resilience
blog

Q4 Store Release Highlights for Risk and Resilience

Welcome to the Q4 Store ...

Rosalind Morvil
Third-Party Risk Management (TPRM) Smart Assessment Engine (SAE) Migrati...
blog

Third-Party Risk Management (TPRM) Smart Assessment Engine (SAE) Migrati...

kevinluo
New Course Launch - AI Control Tower (AICT) Implementation Bootcamp
blog

New Course Launch - AI Control Tower (AICT) Implementation Bootcamp

Pankaj Kumar Pa

Getting Started

Welcome Guide

Product Checklist

Quickstart Guide

Product Success

Learning Paths

Build a solid learning path to prepare for your implementation journey

Learning Paths

Essential Checklist for ESG

FAQ

Measure and Grow

Practical Tips on Change Mgmt. for Risk Transformation

Domain Guidance (Maturity maps)

Measuring Business Outcomes

Performance Measurement and Analytics

On-Demand and Live Events

2025 Risk Events
blog

2025 Risk Events

2025 Risk Events Integrated Risk Management (IRM) | Third-party Risk Managemen...

Emily_Podhajsky
2026 Risk Events
blog

2026 Risk Events

2026 Risk Events Integrated Risk Management (IRM) | Third-party Risk Managemen...

Emily_Podhajsky

Resources

Release Notes

GRC Terminology

Entitlements

Store

Best Practices

Risk Roadmap

Request to join today

Risk Roadmap

Risk PAC

This is a private group, invitation only

Risk PAC

Activity in GRC

Ask a Question

Question status: Question status:

Sorted by:

Featured Join your EMEA Colleagues to learn about Risk, Security, and AI Governance at Scale at Nexus EMEA (Mar 11-12)

Image by Laura Montagnani from Pixabay Stay Ahead: Preparing for AI, Risk & Security in the Next Regulatory Wave If you are a ServiceNow Risk and Security customer interested in practical insights and best practices to help you improve risk an...

Article
Integrated Risk Management (IRM)

Featured 2026 Risk Events

blog

Featured Beat practices videos tutorials for your IRM Risk Management adoption

Note: This is a developing series, and we’ll continue to release new content over time. Bookmark this page to stay up to date and let us know in the comments what topics you’d like to see. Welcome to the Speed Learning Series for IRM Risk Managemen...

Article
Integrated Risk Management (IRM)
Risk Management

What is the difference between the risk and risk statement (advance risk assessment)

What is the difference between the risk and risk statement (advance risk assessment) any proper example.

Question

Join your EMEA Colleagues to learn about Risk, Security, and AI Governance at Scale at Nexus EMEA (Mar 11-12)

Article
Integrated Risk Management (IRM)

Looking for Real-World GRC / IRM Practice Scenarios or POCs

Hi Everyone,I have around 2 years of experience in ServiceNow ITSM and recently started working on ServiceNow GRC / IRM. I have completed the Now Learning training for GRC.I am now looking to practice real-world GRC scenarios, such as:Risk Management...

Question

Risk relevance field and its usage

Hi, I would like to better understand the purpose of the Risk Relevance field on the Risk record, and why it is OOTB hidden when “Inherit from Risk Statement” is set to false. Does this behavior imply that Risk Relevance is not applicable at the Ris...

Question

Understanding Policy and Compliance Management in ServiceNow GRC: Concepts, Lifecycle, and Real-Time

Governance, Risk, and Compliance (GRC) is more than just audits or checklists — it’s about ensuring your organization follows rules, manages risks, and meets regulatory obligations in a structured way.Within ServiceNow GRC, Policy and Compliance Mana...

Question

Resolved! Model Risk Management Demo Data

Hey hi everyone, While installing the MRM module, I’m not seeing the “Load demo data” option on the installation pop‑up screen. How can I get the demo data in this case?

Question

IRM - Issue Management

Hi Community — I am looking for an IRM Issue Management implementation guide, as well as information on OOTB issue fields, configurations, and notifications. Please guide me.

Question

Attestation Respondent - Roles

Hello, We use ServiceNow to conduct an annual audit against our security policies, and primarily use control attestations to track compliance. We have received feedback from our Attestation respondents that it would be ideal to see prior year respons...

Question
Policy and Compliance Management

Reassign button customization for Smart Assessments

Hi Everyone,I am currently working with Smart Assessments for BCM (Business continuity management) scope, and we have a requirement to customize the Reassign button on the Smart assessment to pull in a filtered list of users only.I am not able to loc...

Question

Edit Smart Assessment UI in Compliance Workspace using UI Builder

Greetings. I need to edit the Details pane on the right hand side of the smart assessment within the compliance workspace. I need to change the regular text field into a rich text field. However when I leverage the UI builder to navigate to the smart...

Question

How to create a role-based dashboard for Risk and Control reports?

Hello Community,I am working on a requirement where Risk Managers, Risk Users, and Risk Owners need to access a single dashboard that displays Risk and Control reports relevant to their roles.Currently, the Risk and Control reports already exist and ...

Question

How do I change the notification to prompt Vendor Registration through the Vendor Portal?

Dear experts, I am facing an issue where if I register a new third-party contact, it will generate a registration email to them. But I dont understand why the email generated is the ones using SSO to login. It does not make sense to have vendor's usi...

Question

Third-Party Risk Management > Inherent Risk Questionnaires (IRQs) and Risk Tiering Assessments

Tiering Assessments and Inherent Risk Questionnaire (IRQ) help organizations apply the right level of due diligence based on the risk a third party poses by defining the scope and aiding in prioritization. These tools are essential in building a scal...

Article

Unable to View Content on Processing Activities in Privacy Management

Hi all,We are working with the Privacy Management application, and we’ve noticed that the Processing Activities section is not displaying any content.Before we troubleshoot further, I’d like to understand whether this issue could be related to a miss...

Question

Resolved! GRC IRM Lite Operator and Full Operator roles and access

Hi Experts, Need to know the basics of the IRM Lite Operator and Full Operator. What is the difference between the two?Also the roles and access that are associated with both the IRM Lite Operator and Full Operator. Any help would be highly appreciat...

Question

Ask a Question

Top Helpful Authors

User

Count

Unanswered questions

Subject

Author

Posted

Understanding Policy and Compliance Management in ...

Wednesday

IRM - Issue Management

Wednesday

Attestation Respondent - Roles

Wednesday

Edit Smart Assessment UI in Compliance Workspace u...

Wednesday

Should entities be mapped to Service Instance or O...

Tuesday

Let's connect together

Join us to make our over 960K member community even better. Create your free account and make the world work better for everyone.

Join the Community

Governance, Risk and Compliance (GRC)

Hot Topics

Entity-based user access in Integrated Risk Management (IRM)

Mary Hain

Speed Learning Series: Hands-on, how-to video tutorials to streamline Ri...

Mary Hain

See the Q4 25 Risk demos for the store release for an integrated view of...

Mary Hain

Q4 Store Release Highlights for Risk and Resilience

Rosalind Morvil

Third-Party Risk Management (TPRM) Smart Assessment Engine (SAE) Migrati...

kevinluo

New Course Launch - AI Control Tower (AICT) Implementation Bootcamp

Pankaj Kumar Pa

Getting Started

Getting Started

Welcome Guide

Product Checklist

Quickstart Guide

Product Success

Learning Paths

Essential Checklist for ESG

FAQ

Measure and Grow

Practical Tips on Change Mgmt. for Risk Transformation

Domain Guidance (Maturity maps)

Measuring Business Outcomes

Performance Measurement and Analytics

On-Demand and Live Events

2025 Risk Events

Emily_Podhajsky

2026 Risk Events

Emily_Podhajsky

Resources

Release Notes

GRC Terminology

Entitlements

Store

Best Practices

Risk Roadmap

Risk PAC

Related Products

Security Operations

Employee Center

CMDB

Source-to-Pay Operations

Featured Join your EMEA Colleagues to learn about Risk, Security, and AI Governance at Scale at Nexus EMEA (Mar 11-12)

Featured 2026 Risk Events

Featured Beat practices videos tutorials for your IRM Risk Management adoption

Resolved! Model Risk Management Demo Data

Resolved! GRC IRM Lite Operator and Full Operator roles and access

Let's connect together