---
sourceDocument: Brazil Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Tailor baseline controls

# Tailor baseline controls {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Tailor the baseline policy statements and baseline controls.

## Before you begin

Note:  
Starting with version 10.1.0, the NIST RMF Use Case Accelerator will be supported only for customers who currently use the product. New and existing customers should consider using the GRC: Continuous Authorization Monitoring application. For details, [Continuous Authorization and Monitoring](https://www.servicenow.com/docs/1Kr6NPmvzd82ayrlmEZ4tA "Continuous Authorization and Monitoring (CAM) employs the seven steps defined by the NIST Risk Management Framework (RMF) to allow you to make better-informed decisions about your security posture.").
Tailor Baseline Controls requires that you implement all necessary controls following the standard Policy and Compliance Management application procedures.

Role required: sn_irm_nist_rmf.risk_executive, sn_irm_nist_rmf.security_officer, or sn_irm_nist_rmf.control_provider

## Procedure

1. Navigate to AllNIST RMFSelectTailor Baseline Controls.
2. Review all the reports on the dashboard.
3. Implement changes for the baseline policy statements and baseline controls following the standard approach outlined in the Policy and Compliance Management application.
{#rmf-tailor-baseline-controls__steps_qxm_nsc_jhb}

*[\>]: and then