Business requirements and associated risks

[FredyOlivares]

How do I have business requirements and risks organized and associated, what tool or artifact is recommended to be used?

[Dr Atul G- LNG]

Hi @FredyOlivares 

Can you please provide more details on which aspect you're looking at this from within ITSM? Are you referring to CSDM, GRC, or another area

[Bhuvan · Accepted solution]

@FredyOlivares 

For Business Requirements, refer below

https://www.servicenow.com/community/onboarding-hub-articles/guidelines-for-requirements-gathering/t...

https://www.servicenow.com/community/spm-forum/requirement-management-application/m-p/1049152

For Risk Management, you can refer GRC module

https://www.servicenow.com/docs/bundle/zurich-governance-risk-compliance/page/product/grc-workspace-...

https://www.servicenow.com/au/products/risk-management.html

Thanks,

Bhuvan

[FredyOlivares]

@bhuvan 

Thanks for the links. I will review!

[FredyOlivares]

Dr. Atul G

Thanks for your interest and I am happy to elaborate further.

The scope of my question is in the perimeter of Cybersecurity, so I would say GRC to support the development of an application and the functional requirements that are to be managed (as products). In a generic view of the management of these requirements, what does ServiceNow offer to manage these requirements and the risks that stakeholders deem associated to them?, and once associated to these requirements, is there a way to manage them by identifying, assessing and even mitigating them? In other words, how does ServiceNow help to keep an eye on a risk? Thanks so much.