E-Learning: GRC: Integrated Risk Management (IRM) Fundamentals (SNIRMF-OD)

GRC is a company's strategy for managing corporate compliance and enterprise risk. ServiceNow GRC is a suite of applications within the ServiceNow platform that provides timely, comprehensive, and continuous information for auditing, reporting, and risk and compliance purposes.

Learn about the primary features and roles included in ServiceNow's GRC suite of applications (GRC: Policy and Compliance, GRC: Regulatory Change Management, GRC: Risk Management, GRC: Advanced Risk, and GRC: Advanced Audit).

This course is a prerequisite to attending GRC: Integrated Risk Management (IRM) Implementation.

 GRC: Vendor Risk Management is covered in a separate GRC learning path.

This course explores the primary features and roles included in GRC: Policy and Compliance, GRC: Regulatory Change Management, GRC: Risk Management, GRC: Advanced Risk, and GRC: Advanced Audit applications.

By using the GRC suite, GRC professionals create a scalable integrated risk management (IRM) program to meet their organization's internal and regulatory requirements. 

• Define Governance, Risk, and Compliance (GRC) and the internal and external influences that create a need for it
• Demonstrate the primary features of the GRC suite of applications from the end user perspective
• Define primary GRC roles and responsibilities
• Explain how using an entity framework benefits an organization and creates more efficient management of compliance, risk, and audit
• Describe how to set up entity types, entity filters, and entity classes
• Define key components and terms within compliance activities and connect them to GRC architecture
• Demonstrate the control process to ensure control owners have a method for ensuring compliance
• Describe the policy record lifecycle and analyze a policy exception request
• Demonstrate the policy acknowledgment campaign lifecycle to track policy acknowledgments from employees
• Define issue management and issue triage
• Define key components and terms within risk activities and connect them to GRC architecture
• Demonstrate the advanced risk assessment lifecycle
• Define indicators and leverage a manual and basic indicator
• Describe the components of audit management that support the audit lifecycle
• Leverage reports and dashboards to increase visibility and drive risk insights across the enterprise