---
sourceDocument: Xanadu Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/governance-risk-compliance

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Exploring the entities

# Exploring the entities {#ariaid-title1}

* Release version: Xanadu
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Entities are one of the most fundamental and crucial elements for using Governance, Risk, and Compliance. Entities can be people, processes, departments, applications or objects that are examined for risks.

To effectively maintain the risk universe of your organization, we recommend that you define entity types, entity classes, and entity tiers. A risk universe refers to a list of risks that your organization either faces or might
face in the future. The list contains a description of each risk's criticality and frequency. Entities are used within all offerings of GRC such as GRC: Policy and Compliance Management, Audit Management, and GRC: Regulatory Change Management.
* **[Entities in GRC](https://www.servicenow.com/docs/Yj_8xgzn7gJEZAxPNOd1mw)**   
  In Governance, Risk, and Compliance, an entity can be a person, process, department, application, or object, whose exposure must be managed. These entities have controls that are defined to view the status.
* **[Entity types in GRC](https://www.servicenow.com/docs/eh4NpMop7VVQycvY6g1yTg)**   
  Entity types enable you to find and create entities that match a set of filter conditions. Entity types also enable you to create risks and controls for each entity without spending much time.
* **[Entity classes in GRC](https://www.servicenow.com/docs/AJoIVFlg0KHmatB9zRgsFQ)**   
  Entity classes are used to tag your entities and to provide a complete view of the risk status in your organization.
* **[Entity tiers in GRC](https://www.servicenow.com/docs/ioItBfFC6RvXIjEnnp3t5A)**   
  By creating entity tiers, you can prioritize the entity classes.