GRC Implementation Checklist

[Eric Feron]

After all is learned and all is known, nothing is as useful as a checklist to make sure you have all the Ts crossed.

From our colleagues in Professional Services, I present to you the GRC Implementation Checklist (see PDF attached).

----------------------------------------------------------------------------

---------------------------------------------------------------------------

[BarboraH]

This is really great, I will dive into it right away.

Cheers

[Muneer Baig]

Thank you, greatly appreciate it

[randytangco]

Great content.

[Eric Feron]

Here is the current list of "get started" tutorials for new customers:

For Policy, Compliance and Risk:

• Prepare to implement Policy, Compliance and Risk
• Implement Policy, Compliance and Risk
• Find the right partner for your implementation
• What training is right for you?
• Profiles (Entities) for Governance, Risk and Compliance: why you need them and how to set them up.
• UCF - Why and how.
• Entities (fka Profiles) in a few words: All places, people and things that...
• Controls: Attestations, Indicators and Control Tests.
• IT compliance.
• Become a GRC athlete.
• GRC implementation checklist.

For Vendor Risk Management:

• Get started with Vendor Risk Management - Product demo.
• Find the right partner for your implementation
• What training is right for you?
• Solve IT Vendor Risk.
• The Vendor Portal in 5 minutes: What it does, how to use it.

[Warner1]

Is there a test or demo environment where my team can get some experience with the GRC module? We are exploring ways to automate the GRC process with the module.  We are also interested to learn what tools the module can interface with.

[Eric Feron]

Hello Warner,

This thread will point you in the right direction re a sandbox environment.

Would you like someone from the Sales team to reach out to you and talk about integrations?

Cheers,

EF

[Warner1]

Hello Eric,

Thanks for the information.  I have now requested a developer instance and am in the process of getting it set up.

My team is looking at the potential for integrating ServiceNow GRC with other apps such as Xacta and Emass GRC tools. Also possibly Tenable Nessus and other security tools.  If there is a someone with whom I could discuss this, that would be great.

Thanks,

Warner Sterling

[Eric Feron]

OK, will look for the rihgt people. Is your organization already a GRC or ServiceNow customer?

[Eric Feron]

Warner,

Rick and Jagan will reach out to you via email.

Have fun 🙂

E

[Srinu Vishwanat]

Hi Eric,

This is specific to GRC, is there a document which relates to best practices followed during the implementation i.e. generic document not pertaining to ITSM,ITBM,ITOM etc..

[Sebastien Fix]

This list is quite detailed and it looks to me like it would be great as Guided Setup checklist - against respectively P&C, Risk and Audit with slightly separate checks and tables? 

[Katarzyna3]

Any updates on this topic? 🙂

[kthompsonbrown]

@Eric Feron extremely helpful checklist!  Do you have anything more current or would this still work for Washington DC?