Sarbanes-Oxley (SOX) Content Pack

The Sarbanes-Oxley (SOX) Content Pack provides basic SOX content for an organization to commence and manage activities towards attaining operational SOX compliance using the ServiceNow® GRC application. A content pack may include pre-defined scope, specific policies, controls, risks, audit, test plans, dashboards, and reports providing users of ServiceNow® GRC a head-start in using the applications towards SOX compliance-related activities.

Users with the GRC Administrator roles of Compliance Admin (sn.compliance.admin), Risk Admin (sn.risk.admin), or Audit Admin (sn.audit.admin) in an organization are responsible for editing the content to suit the SOX requirements of the organization. The SOX Content Pack covers the three ServiceNow® GRC core applications, namely Policy and Compliance Management, Risk Management and Audit Management, and it establishes relationships across the various content elements in those applications.

• Install the SOX Content Pack
  Install the SOX Content Pack for use with the core GRC applications.
• Verify the SOX Content Pack in Policy and Compliance Management
  After importing the SOX Content Pack, verify and edit the profile types, profiles, policies, policy statements, controls, policies, indicator templates, and indicators, within the Policy and Compliance Management application.
• Verify the SOX Content Pack in Risk Management
  After importing the SOX Content Pack, verify and edit the entity types, entities, risk statements, risks, and assessments within the Risk Management application.
• Verify the SOX Content Pack in Audit Management
  After importing the SOX Content Pack, verify and edit the entity types, entities, audit engagements, audit tasks, test templates, and test plans within the Audit Management application.
• SOX Content Pack dashboard and reports
  The SOX Content Pack dashboards display multiple SOX reports on a single screen. Various GRC roles have read or edit access to these dashboards.