Setup checklist for the Risk Management application

  • Release version: Australia
  • Updated May 4, 2026
  • 1 minute to read

    • This checklist includes the set up tasks that you are required to complete in your ServiceNow AI Platform® instance. When you have completed these tasks, the base system is ready for operation.

    Before you begin

    Role required: sn_risk.admin

    Procedure

    Create and print a PDF of the checklist topic and check off tasks as you complete them.
    Table 1. Risk Management application checklist
    Item Checklist


    		A user with the sn_risk.admin role, can
    • define and modify the risk criteria
    • configure the risk properties
    • create assessments
    • modify the existing assessments
    • assign roles
    For details, see Risk Management Administration.


    		A user with the sn_risk.admin role, can also assign roles. For details, see Roles installed with Risk Management


    		A risk manager, with the sn_risk.manager role, needs to manage numerous risk statements. To achieve this goal, the risk framework must be defined. For details, see Create a risk framework and associate risk statements to it.


    		A risk manager, with the sn_risk.manager role, must create a risk statement to group risks logically. For details, see Create a risk statement


    		A risk administrator or a risk manager can create a risk assessments using the Risk Assessment Designer. For details, see Create a risk assessment using the Risk Assessment Designer.


    		Risk administrators and risk managers can create risk indicators. Risk indicators monitor changes in the levels of risk exposure and contribute to the early warning signs that enable organizations to report risks, prevent crises and mitigate them in time. For details, see Create a risk indicator.


    		Risk administrators and risk managers can create entities manually, rather than generating them from the entity types. For details, see Create independent entities


    		Risk administrators and risk managers must create and edit entity types and map them to existing ServiceNow® tables for which you must track compliance. Entities are assigned to control objectives and risk statements, which generate controls and risks for every entity type. For details, see Generate risks and controls from entity types