--- sourceDocument: Yokohama Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/governance-risk-compliance Release : - yokohama ft:locale : - en-US ft:publication_title : - Yokohama Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # CSDM data workflow and business model views # CSDM data workflow and business model views {#ariaid-title1} * Release version: Yokohama * * Updated July 31, 2025 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of CSDM data workflow and business model views The Common Service Data Model (CSDM) provides a structured framework to evaluate and enhance an organization's reporting and operational resilience environment. ServiceNow products are designed to be CSDM aware, organizing Configuration Management Database (CMDB) data according to CSDM standards. This alignment improves functionality by integrating data workflows with operational resilience efforts. Show full answer Show less ## CSDM data workflow The CSDM data workflow supports assessment and improvement of the control environment by incorporating diverse data sources related to risk, incidents, business continuity, compliance, and operational metrics. Key stages of the workflow include: * **Data collection:** Gathering information from risk management systems, incident reports, BCM systems, compliance data, and operational KPIs. * **Data integration:** Centralizing data via mapping, transformation, normalization, and quality validation to maintain consistency and usability. * **Data analysis:** Identifying risks, control deficiencies, impact of disruptions, and trends to support operational resilience. * **CSDM integration:** Using analyzed data to define risk assessments, document controls, evaluate effectiveness, and plan remediation. * **Reporting and visualization:** Enabling communication of insights, supporting decision-making, tracking KPIs, and monitoring improvement progress. This workflow empowers organizations to integrate operational resilience with CSDM data, resulting in improved control assessments, risk mitigation, process effectiveness, business continuity, and informed prioritization of actions. ## Business model views CSDM's flexible framework applies to multiple organizational perspectives, allowing tailored control environment assessments across different scopes: * **Process view:** Controls related to specific business processes (e.g., financial reporting). * **Functional view:** Controls within functional areas such as finance, HR, or IT. * **Entity view:** Controls for individual entities or subsidiaries within a larger organization. * **Cross-functional view:** Controls for processes spanning multiple functions like risk management or compliance. * **Enterprise view:** Organization-wide control framework assessments ensuring consistency and effectiveness. Applying CSDM across these views helps organizations identify risks, define control objectives, evaluate control effectiveness, and promote continuous improvement. This approach supports risk mitigation, regulatory compliance, process efficiency, and a consistent control environment tailored to specific business needs. Additionally, organizations can customize their CSDM implementation using Main node configurations within the Data Relationships Framework to meet unique requirements. The CSDM model offers a framework for evaluating and enhancing an organization's reporting and resilience environment, applicable to various business model views. ServiceNow® products are CSDM aware, and their Configuration Management Database (CMDB) data is organized according to CSDM guidelines, leveraging this structure for improved functionality. ## CSDM data workflow {#business-model-views-and-workflow__section_sns_z3n_p2c} Integrating CSDM data workflow with Operational Resilience uses data from various sources to support the assessment and improvement of the control environment. Here's a high-level overview of the data workflow. Data collection : Gather data from various sources, including: * Risk management systems (for example, risk registers, risk assessments) * Incident management systems (for example, incident reports, root cause analysis) * Business continuity management (BCM) systems (for example, business impact analysis, recovery plans) * Compliance and regulatory data (for example, audit reports, regulatory requirements) * Operational data (for example, key performance indicators (KPIs), metrics) {#business-model-views-and-workflow__ul_rgw_z3n_p2c} Data integration : Integrate data from various sources into a centralized repository or data warehouse, using techniques such as: * Data mapping and transformation * Data normalization and standardization * Data quality checks and validation {#business-model-views-and-workflow__ul_sgw_z3n_p2c} Data analysis : Analyze the integrated data to perform the tasks: * Identify operational resilience risks and control deficiencies * Assess the effectiveness of controls and processes * Evaluate the impact of disruptions on business operations * Identify trends and patterns in operational resilience data {#business-model-views-and-workflow__ul_tgw_z3n_p2c} CSDM integration : Use the analyzed data to support CSDM processes: * Risk assessment and control objective definition * Control activity identification and documentation * Control evaluation and testing * Remediation and corrective action planning {#business-model-views-and-workflow__ul_ugw_z3n_p2c} Reporting and visualization : Provide reporting and visualization capabilities to perform following tasks: * Communicate operational resilience and CSDM insights to stakeholders * Support decision-making and prioritization of actions * Monitor progress and track key performance indicators (KPIs) {#business-model-views-and-workflow__ul_vgw_z3n_p2c} By following the data workflow, organizations can perform the following tasks. * Integrate operational resilience and CSDM data to support a comprehensive control environment assessment * Identify and mitigate operational resilience risks * Improve the effectiveness of controls and processes * Enhance business continuity and resilience * Support informed decision-making and prioritization of actions {#business-model-views-and-workflow__ul_xgw_z3n_p2c} This data-driven approach enables organizations to proactively manage operational resilience and ensure a robust control environment that supports their overall objectives. ## Business model views {#business-model-views-and-workflow__section_xyx_c3n_p2c} CSDM provides a framework that can be applied to various business model views, as shown in the following examples. 1. Process view: Assess and improve the control environment for specific business processes, such as financial reporting, procurement, or customer onboarding. 2. Functional view: Evaluate the control environment for specific functional areas, like finance, HR, or IT. 3. Entity view: Assess the control environment for individual entities or subsidiaries within a larger organization. 4. Cross-functional view: Evaluate the control environment for cross-functional processes, such as risk management, compliance, or internal audit. 5. Enterprise view: Assess the control environment across the entire organization to ensure a consistent and effective control framework. {#business-model-views-and-workflow__ol_vbb_d3n_p2c} In each of these views, the CSDM model can help organizations perform the following tasks. * Identify and assess risks * Define and document control objectives and activities * Evaluate control effectiveness * Foster a culture of continuous improvement {#business-model-views-and-workflow__ul_wbb_d3n_p2c} By applying the CSDM model to different business model views, organizations can benefit from the following activities: * Identify and mitigate risks at various levels * Improve process efficiency and effectiveness * Enhance compliance and regulatory adherence * Ensure a consistent control environment across the organization {#business-model-views-and-workflow__ul_svv_jty_1fc} This flexible approach, along with the use of Main node configurations, enables organizations to customize their CSDM implementation to meet their specific business needs, ensuring a robust and effective control environment. For information on setting up the Main node configurations, see [Main node configurations: A component of the Data Relationships Framework](https://www.servicenow.com/docs/ySn9cOzE68eueRJpssgjdA "Starting with Release 20.1.x, the Main node configurations, supported by the Data Relationships Framework, are available with Operational Resilience to define dependency roll-up chains. Operational Resilience administrators configure the entity types and pillars, generate the entities, and then establish relationships between different CSDM objects. After this setup is complete, data from the CMDB is fetched into Operational Resilience, displaying rolled-up dependencies in the Workspace view."). For information on gathering Operational Resilience data aligned with the CSDM model, see [Gathering data aligned with the CSDM setup](https://www.servicenow.com/docs/Io16yG6SKqDISuhIk1PnBw "Beginning with Release 20.1.x, the Operational Resilience application supports the latest Common Service Data Model (CSDM). This section details the steps for setting up services, business services, service offerings, and business processes in Operational Resilience and gathering data aligned with the latest CSDM setup.") and [Landing page and dashboard views](https://www.servicenow.com/docs/sx8MmAIpXVZDlFYFo2QwcQ "The landing page in the Operational Resilience Workspace provides a single-pane overview of the services, business services, and pillars in your organization. The dashboard displays resilience metrics, including operational status, completed activities, red flags, and suggestions for improvement.").