Servicenow, Inc. · NYSE:NOW
Servicenow — Technical Presentation (October 2022)
13 slides from Servicenow's technical presentation, October 2022
Slide 1: Governance, Risk and Compliance (GRC)
Governance, Risk and Compliance (GRC) By: Sonesh Patel
Slide 2: Agenda
Agenda • Understanding GRC • GRC Implementation Checklist • Various Short definitions • What is the UCF? • Audit and Risk Management • How ServiceNow GRC helps? • Best Practices/Learnings 2
Slide 3: Understanding GRC
Understanding GRC Governance, Risk, and Compliance (GRC) is a company's strategy for managing corporate governance, enterprise risk management, and demonstrating corporate compliance. ServiceNow GRC is a suite of applications within the ServiceNow platform to provide timely, comprehensive, and conti
Slide 4: GRC in a Glance
GRC in a Glance Internal Goals eaten and Objective: Inherent . , : E and Regulations Assess, rate, and ExXIBFTE Vi atone monitor external beri uinera Dae, Internal vendors Legislation and and Threats Pre Regulations Verification and i Validation
Slide 5: Various Short Definitions
Various Short Definitions Policy: Policies are internal best practice that a business process follows to ensure compliance and reduce risk exposure. Entity: An Entity is a single record from any table in a instance .eg a user record in User Table. Entity Type: These are like group of record. Control
Slide 6: GRC Implementation Checklist
GRC Implementation Checklist GRC: Policy and Compliance Management(com.sn_compliance) GRC: Policy and Compliance Management dependencies GRC: Compliance UCF (com.sn_comp_ucf GRC: Risk Management(com.sn_risk) & GRC: Workbench(com.sn_grc_workbench)* GRC: Risk Management dependencies GRC:Audit Manageme
Slide 7: What is the UCF?
What is the UCF? The Unified Compliance Framework (UCF ) is the world's largest compliance library database. It's the only framework that reduces compliance regulations to a simplified, manageable set of "harmonized" controls, as well as reducing the cost and complexity of regulatory compliance. Use
Slide 8: Audit Management and Risk Management
Audit Management The ServiceNow Audit Management application involves a set of activities related to planning audit engagements, executing engagements, and reporting findings to the audit committee and executive board. Risk Management The Risk Management product provides a centralized process to ide
Slide 9: Audit Task
Audit Task Create a control test from an engagement After defining a control, audit managers create control tests that run periodically and provide documented evidence of whether the associated control is operating correctly. Create an activity After defining a control, audit managers create activit
Slide 10: How ServiceNow GRC helps?
How ServiceNow GRC helps? Automate and manage policy life cycles and continuously monitor for compliance. Enable fine-grained business impact analysis to appropriately prioritize and respond to risks. Use risk data to scope and prioritize audit plans and automate cross-functional processes. Continuo
Slide 11: How to Avoid Wasting your Resources?
How to Avoid Wasting your Resources? • Embrace Agility Trap: You’ll lose implementation time due to frequent modification to requirements. Solution: Ensure that you're using an Agile framework, so you can embrace and benefit from them. • Focus on the Minimal Viable Product Trap: Some features take t
Slide 12: How to Have Happier Users? Simplicity + Speed = Efficiency
How to Have Happier Users? Simplicity + Speed = Efficiency • Avoid depending on Admins and IT Issue: To assign a GRC record to someone, you need a user-admin to grant the target some GRC role. Solution: Remove the entry barrier! Allow record owners to re- assign to subordinates. When an item is re-a
Slide 13: Thank You
Thank You 13