Governance, Risk and Compliance (GRC)

An integrated approach to build operational resilience, mitigate risk, and manage compliance.

Build your Gen AI skills using our Now Assist for IRM speed learning con...
Article

Build your Gen AI skills using our Now Assist for IRM speed learning con...

Mary Hain
Demos of the major new Risk capabilities in the Zurich release
Article

Demos of the major new Risk capabilities in the Zurich release

Mary Hain
Is your risk program stuck in neutral? Try our new domain guidance to g...
Article

Is your risk program stuck in neutral? Try our new domain guidance to g...

Mary Hain
ESGM - Quick Start Guides: ESG Content Accelerator - Emission Factors & ...
blog

ESGM - Quick Start Guides: ESG Content Accelerator - Emission Factors & ...

Jeremiah Brenne
Why a CSDM matters if you work in risk and compliance
blog

Why a CSDM matters if you work in risk and compliance

We’ve seen a lively disc...

Shimoli Gandhi
Get ready for your Third-Party Risk Management (TPRM) Adoption
Article

Get ready for your Third-Party Risk Management (TPRM) Adoption

Mary Hain
ESGM Delivery Accreditation is Now Available
Article

ESGM Delivery Accreditation is Now Available

The Environmental, Social, and Governance Management...

Mary Hain
Getting Started with Business Continuity Management (BCM): Features and...
Article

Getting Started with Business Continuity Management (BCM): Features and...

Mary Hain
May Store Release - Read some of the highlights of what we are releasing!
blog

May Store Release - Read some of the highlights of what we are releasing!

Rosalind Morvil
Introducing the ServiceNow AI Control Tower
blog

Introducing the ServiceNow AI Control Tower

Managing AI effectively is one of the biggest challe...

teresalaw
Are you ready to start your implementation journey for a ServiceNow Risk...
Article

Are you ready to start your implementation journey for a ServiceNow Risk...

Mary Hain
Get Ready for Connect x Accelerate 2025 – ServiceNow’s Integrated Risk a...
Article

Get Ready for Connect x Accelerate 2025 – ServiceNow’s Integrated Risk a...

Priscilla Muiua

Getting Started

Get ready for your Third-Party Risk Management (TPRM) Adoption

Business Continuity Management (BCM): Features and Capabilities

Welcome Guide

Product Checklist

Quickstart Guide

Product Success

Training Path

Build a solid learning path to prepare for your implementation journey

Training Path

FAQ

Release Updates

Process Guides

Measure and Grow

Cyber Risk Domain Guidance

Measuring Business Outcomes

Performance Measurement and Analytics

AI Maturity Index

Connect at events

LOSN: What’s new in the Zurich release for Integrated Risk Manage...

Online 09/16/25

WEBINAR: What Healthcare & Life Sciences C-Suite Execs Need from ...

Online 09/17/25

LOSN: What’s new in the Zurich release for Integrated Risk Manage...

Online 09/18/25

World Forum Learning Lab: From Risk to Resilience: Responsible AI...

Online 09/18/25

On-Demand and Live Events

Get Ready for Connect x Accelerate 2025 – ServiceNow’s Integrated Risk a...
Article

Get Ready for Connect x Accelerate 2025 – ServiceNow’s Integrated Risk a...

Priscilla Muiua
2025 Risk & ESG Events
blog

2025 Risk & ESG Events

2025 Risk & ESG Events Integrated Risk Management (IRM) | Third-party Risk Man...

Emily_Podhajsky
2024 Risk & ESG Events
blog

2024 Risk & ESG Events

2024 Risk & ESG Events Integrated Risk Management (IRM) | Third-party Risk Man...

Jeanne Mardis
Risk on-demand webinars by product 2024
blog

Risk on-demand webinars by product 2024

Risk & ESG On-Demand Webinars Check out these on-dem...

Jeanne Mardis
Training - List of upcoming instructor-led GRC courses
blog

Training - List of upcoming instructor-led GRC courses

There is nothing better ...

Jan Spurlin

Resources

Digital Operational Resilience Management

DORA

Digital Operational Resilience Management

Release Notes

Essential Checklist for ESG

GRC Terminology

Entitlements

Store

Now Create

Risk Roadmap

This is a private group, invitation only

Risk Roadmap

Risk & ESG PAC

This is a private group, invitation only

Risk & ESG PAC

Accelerate

This is a private group, invitation only

Accelerate

Activity in GRC

Ask a Question

Question status: Question status:

Sorted by:

Featured Demos of the major new Risk capabilities in the Zurich release

Be sure to revisit this blog on Sept. 10, the Zurich family release date. We will be announcing more exciting new Risk products. It’s ServiceNow Zurich family release time, and we have a record number of new Risk product features to help you be mor...

Article

Featured Training - List of upcoming instructor-led GRC courses

There is nothing better than an instructor-led ServiceNow course. We cover the material in the on-demand course and then usually go a little further. We explore questions presented by students. We talk about what is "unsaid" and we love to engage the...

blog

Featured Get ready for your Third-Party Risk Management (TPRM) Adoption

Welcome to the Speed Learning series for Third-Party Risk Management (TPRM), where you’ll find everything you need to succeed with ServiceNow TPRM and the IT Vendor Risk domain, which focuses on identifying and managing risks specific to your technol...

Article

Featured Getting Started with Business Continuity Management (BCM): Features and Capabilities

It's time to accelerate your BCM adoption journey Welcome to the Getting Started page for Business Continuity Management (BCM), where you can find the resources you need to be successful with ServiceNow BCM, including the IT Disaster Recovery domai...

Article

Featured 2025 Risk & ESG Events

2025 Risk & ESG Events Integrated Risk Management (IRM) | Third-party Risk Management (TPRM) | Business Continuity Management (BCM) | Privacy Management | ESG Management (ESGM) September Sept 10RISKServiceNow EventWednesday, September 10Put AI to ...

blog

Primary contact no longer with Company

Question to the Community: Have you found the case where the Primary contact is no longer with the company, but is still listed in VendorRisk/TPRM? How does the Assessment get addressed? What do you do, contact the one of the other contacts? Thanks...

Question

Help with email notification link VRT

I am wanting our email notifications for vendor risk assessment tasks to provide the link to take the user to the Vendor Management Workspace. I've tried several different ways already provided in ITSM forums, but it is not working. I cannot get a s...

Question

Duplicate assessment metrics and ATF error with "Set Component Value (Custom UI)" test step

Hi All,I am facing two issues when using the "Set Component Value (Custom UI)" test step in ATF:When selecting assessment metric values, the component displays duplicate assessment metrics.While running the ATF, it throws the error: "assessment metr...

Question

Resolved! Policy & Compliance with Knowledge Management- user criteria differences

Hey all- my GRC team is publishing their Policy & Compliance documents into multiple categories under the GRC Knowledge Base. They have some categories that are suitable for public consumption (snc_internal) and others that need restricting for grc ...

Question

Resolved! CIS-RC practice questions?

I found a few practice exams online, but the provided answers are very questionable.Some basic answers that seem straight forward, but they have select the wrong answer. That makes me question the integrity of the other questions that I am trying to ...

Question

Can GRC Business User Lite take Advanced Risk Assessment as Assessor?

Hi there,I need clarification regarding GRC Business User Lite activities in relation to Advanced Risk Assessment.For one of our clients who is currently on the Xandu version (with no immediate upgrade planned), we want to confirm:Can a user with the...

Question

Regulatory Alert Smart Assessment Feature

Hi community,Hope that if you're reading this, you're doing well. I'm doing a Regulatory Change Management implementation and I'm thinking about using Smart Assessments instead of Risk Assessments because my client doesn't really have a Risk Assessme...

Question
Integrated Risk Management (IRM)

World Forum Learning Lab: From Risk to Resilience: Responsible AI Adoption With the AI Control Tower

Get hands-on with ServiceNow at World Forum Chicago September 18th! In just three hours, discover how the AI Control Tower empowers your teams to govern AI systems responsibly—without slowing innovation. This hands-on workshop walks you through real...

Event

Business Continuity Management

Hi,Anyone currently using Business Continuity Management module in their organization? i would like to ask some questions regarding the functionalities and usage, especially if you are in North America Thanks

Question
Business Continuity Management (BCM)

Adding Control Implementation Statement in SSP

I want to add the Implementation Statement to the SSP, but can't seem to figure out how to do that.Any help would be greatly appreciated.

Question

Business Continuity Management - Add basic CI information to Plan Scope

We have been trying to add basic CI information to Business Plans: Owner for Applications, IP address for servers, and so on. ServiceNow insists it can be done. Has anyone been able to show this level of detail in the BCM module?

Question

Control Attestation

Once Respondent says yes in attestation, control become compliant and then move to review state. Is it possible that control status will become compliant only after reviewer approves it and move it to monitor state ?

Question

Data visualization does not show any data.

Hello everyone, I’m having an issue when trying to display data in a Data Visualization. I’m building one from the cmdb_rel_ci table, and when I try to show any data from the parent field related to cmdb_ci_business_app, the data shows up as null or ...

Question

Q - DORM Data Flow from Core_Company to Legal Entity

I can't find a DORM forum, so assuming this is the correct space? Q: What is the script driving the DORM data flow highlighted below? Context:The Register of Information within DORM (Digital Operational Resilience Management) leverages the [core_comp...

Question

Risk appetite status - Methodology for status calculation field

Hi Team, Need to know the use of the field "Methodology for status calculation" in the section Risk Appetite status within the Risk Statement form. There option for to select only one Risk Assessment Methodology in this field.1. What is the impact if...

Question

Ask a Question

Top Helpful Authors

User

Count

Unanswered questions

Subject

Author

Posted

Primary contact no longer with Company

4 hours ago

Adding Control Implementation Statement in SSP

yesterday

Business Continuity Management - Add basic CI info...

yesterday

Q - DORM Data Flow from Core_Company to Legal Enti...

yesterday

Vendors Unable to View Questionnaires in TPRM SVDP...

Friday

Connect at events

LOSN: What’s new in the Zurich release for Integrated Risk Manage...

Online 09/16/25

WEBINAR: What Healthcare & Life Sciences C-Suite Execs Need from ...

Online 09/17/25

LOSN: What’s new in the Zurich release for Integrated Risk Manage...

Online 09/18/25

World Forum Learning Lab: From Risk to Resilience: Responsible AI...

Online 09/18/25

Let's connect together

Join us to make our over 890K member community even better. Create your free account and make the world work better for everyone.

Join the Community

Governance, Risk and Compliance (GRC)

Hot Topics

Build your Gen AI skills using our Now Assist for IRM speed learning con...

Mary Hain

Demos of the major new Risk capabilities in the Zurich release

Mary Hain

Is your risk program stuck in neutral? Try our new domain guidance to g...

Mary Hain

ESGM - Quick Start Guides: ESG Content Accelerator - Emission Factors & ...

Jeremiah Brenne

Why a CSDM matters if you work in risk and compliance

Shimoli Gandhi

Get ready for your Third-Party Risk Management (TPRM) Adoption

Mary Hain

ESGM Delivery Accreditation is Now Available

Mary Hain

Getting Started with Business Continuity Management (BCM): Features and...

Mary Hain

May Store Release - Read some of the highlights of what we are releasing!

Rosalind Morvil

Introducing the ServiceNow AI Control Tower

teresalaw

Are you ready to start your implementation journey for a ServiceNow Risk...

Mary Hain

Get Ready for Connect x Accelerate 2025 – ServiceNow’s Integrated Risk a...

Priscilla Muiua

Getting Started

Get ready for your Third-Party Risk Management (TPRM) Adoption

Business Continuity Management (BCM): Features and Capabilities

Welcome Guide

Product Checklist

Quickstart Guide

Product Success

Training Path

FAQ

Release Updates

Process Guides

Measure and Grow

Cyber Risk Domain Guidance

Measuring Business Outcomes

Performance Measurement and Analytics

AI Maturity Index

LOSN: What’s new in the Zurich release for Integrated Risk Manage...

WEBINAR: What Healthcare &amp; Life Sciences C-Suite Execs Need from ...

LOSN: What’s new in the Zurich release for Integrated Risk Manage...

World Forum Learning Lab: From Risk to Resilience: Responsible AI...

On-Demand and Live Events

Get Ready for Connect x Accelerate 2025 – ServiceNow’s Integrated Risk a...

Priscilla Muiua

2025 Risk & ESG Events

Emily_Podhajsky

2024 Risk & ESG Events

Jeanne Mardis

Risk on-demand webinars by product 2024

Jeanne Mardis

Training - List of upcoming instructor-led GRC courses

Jan Spurlin

Resources

Digital Operational Resilience Management

Release Notes

Essential Checklist for ESG

GRC Terminology

Entitlements

Store

Now Create

Risk Roadmap

Risk & ESG PAC

Accelerate

Related Products

Security Operations

Employee Center

CMDB

Source-to-Pay Operations

Featured Demos of the major new Risk capabilities in the Zurich release

Featured Training - List of upcoming instructor-led GRC courses

Featured Get ready for your Third-Party Risk Management (TPRM) Adoption

Featured Getting Started with Business Continuity Management (BCM): Features and Capabilities

Featured 2025 Risk & ESG Events

Resolved! Policy & Compliance with Knowledge Management- user criteria differences

Resolved! CIS-RC practice questions?

WEBINAR: What Healthcare & Life Sciences C-Suite Execs Need from ...

WEBINAR: What Healthcare & Life Sciences C-Suite Execs Need from ...