Download Continuous Authorization and Monitoring

Xanadu Governance, Risk, and Compliance
Release
xanadu
ft:locale
en-US
ft:publication_title
Xanadu Governance, Risk, and Compliance
ft:clusterId
grc
bundleId
grc
workflow
Technology
  • Governance, Risk, and Compliance
  • GRC and the ServiceNow Store
  • Download a GRC application from the ServiceNow Store for the first time
  • Get entitlement for a GRC product or application
  • Activate an entitled GRC ServiceNow Store application
  • Install GRC content packs and integrations
  • Update a GRC application
  • Upgrade your instance to the next GRC family release
  • Audit Management
  • Exploring Audit Management
  • Configuring Audit Management
  • Setup checklist for the GRC Audit Management application
  • Download Audit Management
  • Quick start tests for Audit Management
  • Setup checklist for the GRC Advanced Audit application
  • Using Audit Management
  • Create an audit report template in classic formats
  • Manage test templates and test plans
  • Create a test template
  • Relate a test template to a control objective
  • Create an audit test plan
  • Create multiple test plans from a test template
  • Manage engagements
  • Audit task management
  • Create an engagement
  • Generate an audit report from an engagement
  • Create an engagement from a previous engagement
  • Create a control test from an engagement
  • Automatically generate control tests from an engagement
  • Create an audit task activity
  • Create an interview
  • Create a walkthrough
  • Generate a KB article from an engagement
  • Approve or reject an engagement
  • Add entities to an engagement scope
  • Use the Audit Engagement Workbench to visually manage engagements
  • Create an engagement from Audit Workbench
  • Manage your documents and work papers with Audit Management as cloud files
  • Complete the prerequisites to manage your documents using Microsoft
  • Create a Cloud file configuration on engagements and audit tasks
  • Create a Cloud file configuration record
  • Cloud file configuration record form
  • Create a File access permission record to manage the permissions
  • File access permission record form
  • File access permissions
  • Upload a file to cloud
  • Link to a cloud file
  • Link a reference cloud file
  • Mark a cloud file as a non-sharable file
  • Mark a cloud file as a sharable file
  • Remove a linked cloud file from a record
  • Manage GRC key risk and control indicators
  • Engagement Overview
  • Create a GRC indicator
  • Create a GRC indicator template
  • Confidentiality flag for audit and compliance records
  • Manage audit issues and remediation
  • Manually create GRC issues
  • Issue form
  • Evidence request
  • Evidence request workflow and users
  • Request evidence for audit
  • Provide requested evidence
  • Approve evidence before evidence review
  • Accept, reject, or cancel evidence request
  • Audit plan overview
  • Create an audit plan
  • Approve a plan
  • Create an engagement with advanced planning
  • Add auditors for an engagement from resource plans
  • Create an auditable unit
  • Audit types
  • Manage milestones
  • Create an engagement milestone
  • Create a milestone from an audit task
  • Audit observations
  • Roll up expenses and resources in an engagement
  • Integrating Audit Management with Time Card management
  • Audit Workspace
  • Audit Workspace for the Audit supervisor
  • Create a test template in Audit Workspace
  • Create a test plan in Audit Workspace
  • Create a plan in the Audit Workspace
  • Create an audit engagement in Audit Workspace
  • Manage an engagement from the overview page
  • Create an auditable unit and scope entities at risk
  • Create a milestone for an engagement
  • Audit task management in Audit Workspace
  • Create a control test from an engagement
  • Create an activity in the Audit Workspace
  • Create an interview in Audit Workspace
  • Create a walkthrough in the Audit Workspace
  • Add entities to an engagement scope and validate the engagement
  • Create an issue for an engagement
  • Request evidence during audits using Audit Workspace
  • Audit observations in Audit Workspace
  • Create an observation for an engagement
  • Approve or reject an engagement in Audit Workspace
  • Generate a report for an engagement in a classic report template
  • Generate an audit report for an engagement using Microsoft Word template
  • Create a Microsoft Word template record for an audit report
  • Word template form
  • Word template category form
  • Audit Workspace for the Auditor
  • Update an assigned control test in Audit Workspace
  • Update other assigned audit tasks in Audit Workspace
  • Create an observation for an audit task
  • Matrix report in Audit Workspace
  • Configure matrix report registry to set up base table for audit matrix report
  • Matrix relationship form
  • Configure target table fields as columns for matrix report
  • Matrix column configuration form
  • Create matrix report configuration for Audit Workspace
  • Matrix report configuration form
  • View matrix report in landing page and record page of Audit Workspace
  • Audit Management reference
  • Components installed with Audit Management
  • Roles required for Engagement project planning for Project Portfolio Management
  • Roles required for Advanced planning capability and Project Portfolio Management integration
  • Domain separation and Audit Management
  • Analytics and Reporting Solutions for Audit Management
  • Audit Engagement Overview Performance Analytics dashboard
  • Audit Manager Performance Analytics dashboard
  • Business Continuity Management
  • Explore
  • BCM Configurable Workspace
  • Home page view
  • My tasks page view
  • List view
  • Crisis map view
  • Business impact analysis
  • Use cases for BIA
  • Business impact analysis
  • Grid configurations and categories
  • Business continuity planning
  • Assets and plans
  • Recovery teams, loss scenarios, and recovery tasks
  • Use cases for business continuity planning
  • Element definitions and variables
  • Exercises
  • Crisis events
  • Crisis map interface
  • Emergency notifications in Everbridge
  • Configure
  • BCM and ServiceNow store
  • Get entitlement for the BCM application
  • Install BCM from ServiceNow Store
  • BCM lite operators
  • General administration setup for BCM
  • Dependency Configuration records
  • Configuring impact analysis dependency updates
  • Set up Impact analysis dependency update configuration
  • Impact analysis dependency update configuration form
  • Configuring planning dependency updates
  • Set up Planning dependency update configuration
  • Planning dependency update configuration form
  • Configuring sources for adding event dependencies
  • Configure Event dependency source configuration record
  • Event dependency source configuration form
  • Configure impact category for BIA
  • Impact Category record form
  • Configuring the documentation section
  • Configure documentation section
  • Documentation Section record form
  • Configure element definition
  • Element definition record form
  • Configure element variables for element definitions
  • Element variable record form
  • Configure loss scenarios in the plan
  • Loss Scenario record form
  • Configure impact ratings
  • Impact Rating record form
  • Configure recovery tiers for BIA
  • Recovery Tier record form
  • Set up recovery timeframes
  • Configure grid categories
  • Grid category record form
  • Configure grid for BIA assessment
  • Grid configuration record form
  • My tasks page configurations
  • Approval configuration
  • Set up approval configuration
  • Set up approval levels
  • Set up approval rules
  • BCM properties
  • Properties installed with BCM
  • Setup for a BIA
  • Configure BIA templates
  • BIA template form
  • Create Smart Assessment templates for BIA
  • Configure BIA templates with SAE
  • BIA template record
  • Setup for a BCP
  • Configuring plan template
  • Configure the BCP template
  • Plan Template form
  • Set up the phases
  • Phase form
  • Generating reports using Document designer
  • Install Document designer with Microsoft Word
  • Set up the template configurations
  • Configuring the data relationships
  • Set up the content configurations
  • Define the scripted variables
  • Manage Microsoft Word document templates
  • Microsoft Word template form
  • Install the Document designer add-in
  • Save Microsoft Word document as template
  • Generate reports for the BIAs, BCPs, and events
  • Format PDF templates for BIAs, BCPs, and events
  • Configure 360° relationship registries and views
  • Setup for Everbridge notifications
  • Create connections and authenticate credentials
  • Create Connection and Credentials form
  • Import the delivery channels
  • Import the record types
  • Create templates for emergency notifications
  • Notification Template form
  • Create contacts for emergency notifications
  • Contact form
  • Create the contact import rules
  • Contact Import Rules form
  • Create notification contact groups
  • Notification Contact Group form
  • Setup for Crisis map
  • Customization properties
  • Customization properties table
  • Google Maps APIs
  • Configure Scheduled Imports
  • Scheduled Data Imports form
  • Configure Resource Configuration records
  • Resource Configuration form
  • Configure alert rules
  • Alert Rules form
  • Configure alert actions
  • Alert Action form
  • Setup by system administrators
  • Update number of records for reference fields
  • Update count of element definitions
  • Application menu options
  • Setup for the UI Builder
  • Business Continuity Management implementation
  • BCM in the Classic Workspace
  • Element definitions in Classic Workspace
  • Impact rating in Classic Workspace
  • Recovery tier in Classic Workspace
  • Grid configuration
  • Set up element variable
  • Set up grid configuration
  • Set up recovery timeframe
  • Configure a documentation section
  • Configure a plan for a loss scenario
  • Configure a BIA template
  • Configure a BCP template
  • Configure an impact category
  • Manage
  • Structured workflows for BIAs
  • Impact categories and ratings
  • RTO, RPO, and recovery tiers
  • Calculating RTO and RPO
  • BIA states and UI actions
  • Configuring Dictionary, UI policy, element variables
  • Using latest assessment for conducting BIAs
  • Create a business impact analysis
  • Create New Impact analysis form
  • Scheduling auto-update of dependencies
  • Update the BIA dependencies
  • Assess impact categories and dependencies
  • Approve the business impact analysis
  • Update dependencies of BIAs in Self-Service
  • Visualize 360° relationships for BIAs
  • Generate BIA reports in PDF or Microsoft Word
  • Structured workflows for BCPs
  • States and UI actions for a BCP
  • Create a business continuity plan
  • Create New Plan form
  • Scheduling auto-update of related assets
  • Update the planning dependencies
  • Add asset and scope to the BCP
  • Create documentation sections
  • Add associated plans and recovery teams
  • Associating related plans to a recovery task
  • Add loss scenarios
  • Add recovery strategies for dependencies
  • Create New Recovery strategy form
  • Mapping recovery tasks to phases
  • Add recovery tasks
  • Create New Recovery task form
  • Automate recovery tasks
  • Create a subflow form
  • Submit the BCP for approval
  • Visualize 360° relationships for the BCP
  • Generate BCP reports in PDF or Microsoft Word
  • Structured workflows for exercises
  • States for an exercise and crisis event
  • Event assets
  • Mapping event tasks to phases
  • Using nested plans
  • Adding dependencies of impacted assets
  • Enhancing event task management with Hierarchical view
  • Create an exercise
  • Create Exercise Event form
  • Update the event dependencies
  • Track impacted assets and add associated plans
  • Creating action items in events
  • Create task and assessment-type action items in events
  • Create New Action item form for events
  • Grouping similar event tasks in events
  • Create a similar tasks group
  • State changes for event tasks in groups
  • Import plans and recovery tasks
  • Monitor event tasks and create ad-hoc tasks
  • Create New Event Task form
  • Start an event
  • Request an approval and approve the event
  • View recovery tasks from Self-Service
  • View 360° relationships for exercises and crises
  • Generate reports in PDF or Microsoft Word
  • Structured workflows for crisis events
  • Start a crisis event
  • Create Crisis Event form
  • Using nested plans
  • Track impacted assets and add related plans
  • Add a task to the crisis event
  • Import automated tasks and start an event
  • Creating action items in crisis events
  • Create task and assessment-type action items
  • Create New Action item form for crisis events
  • Create a similar tasks group in a crisis
  • Request an approval and approve the crisis
  • Structured workflows for Crisis map
  • Adopting UIB page for improved performance
  • Manage alerts from the map interface
  • Set controls to customize the alerts
  • Select resource layer clustering
  • Monitor assets within the impacted areas
  • Initiate the response actions
  • Integrate
  • Workflow status of emergency notifications
  • Create emergency notifications
  • Create New Notification form
  • Using BCM Classic Workspace
  • Customizing BCM classic Workspace
  • Migrating reports and custom changes
  • Structured workflows for BIA
  • Create a business impact analysis
  • Assess impact categories and dependencies of process
  • review-impact-category-bia
  • Assess RPO impact of technology assets
  • Identify critical dependencies
  • Add dependencies based on CI relationships
  • View business impact analysis details
  • View approval state flows for BIA
  • Update dependency details of a BIA in Self Service
  • Structured workflows for Business Continuity Planning
  • Create a business continuity plan
  • View plan details
  • Plan overview scorecards
  • Add an asset to the scope of BCP
  • Add related assets and related plans
  • Manage plan documentation sections
  • Assign roles to recovery teams
  • Identify loss scenarios
  • Establish recovery strategies
  • Group recovery tasks
  • View details of a business continuity plan
  • View approval state flows for BCP
  • Structured workflows for Exercise and Crisis Management
  • Start an exercise event
  • Start a crisis event
  • Review and start an exercise event
  • Manage a crisis event
  • Monitor event task completion
  • Add assets and plans to an event
  • Data flow, planning, and execution in an event
  • View recovery tasks from Self-service
  • Crisis Management map
  • Setting up the crisis map
  • Configure search for places in crisis map
  • Configure scheduled data imports for crisis map
  • Configure a resource for crisis map
  • Configure alert rules to display alerts in crisis map
  • Configure an alert action
  • View and manage alerts in the crisis map
  • Set controls to customize alerts
  • View resource layer clustering
  • View assets at risk within the impacted area
  • Notify stakeholders and initiate response workflows
  • Integrating Crisis Management with Everbridge
  • Setup steps for emergency notification
  • Create connection and authenticate credential
  • Import delivery channels from Everbridge
  • Import delivery channels from Everbridge
  • Define a template for emergency notification
  • Create contacts for emergency notifications
  • Create contact import rules
  • Create a notification contact group
  • Create an emergency notification and monitor its workflow
  • Create an emergency notification
  • Reference
  • Components installed with Business Continuity Management
  • Data Relationships Framework
  • Create a main node configuration record
  • Main node configuration new record form
  • Create a relationship registry record
  • Relationship registry new record form
  • Configure the properties for the Data Relationships Framework
  • Data Relationships Framework properties form
  • GRC record page template for BCM records
  • Stepper component in the Overview tab of the records
  • Compliance Case Management
  • Exploring Compliance Case Management
  • Compliance case workflow
  • Compliance request workflow
  • Compliance Case Management landing page
  • Smart assessments in Compliance Case Management
  • Using the compliance case overview related list
  • 360° Relationship Visualization of a compliance case
  • Configuring Compliance Case Management
  • Download Compliance Case Management
  • Install Compliance Case Management
  • Create a case type
  • Case Type form
  • Create a view rule
  • View Rule form
  • Create an assignment rule
  • Assignment Rule form
  • Create a request type
  • Request type form
  • Create a state model to define the workflow states and transitions
  • GRC State Model form
  • Create a workflow state for a compliance case or request
  • Workflow State form
  • Define the model state transitions for a compliance case or request
  • GRC Model State Transition Condition form
  • Create an assessment template
  • Assessment Metric Type form
  • Using Compliance Case Management
  • Reporting a compliance case in GRC: Compliance Case Management
  • Report a compliance case from the Employee Center
  • Report a Compliance Case form
  • Create a compliance case in the Compliance Workspace
  • Compliance Case form
  • Raising a compliance request in GRC: Compliance Case Management
  • Raise a compliance request from the Employee Center
  • Raise a Compliance Request form
  • Create a compliance request in the Compliance Workspace
  • Compliance request form
  • Compliance case task workflow
  • Create a case task
  • Case task form
  • Work on a case task
  • Reassign an Assessment type case task
  • Review and close a case task
  • Add an impacted area to a compliance case
  • Add a related area to a compliance case
  • Add a cause and consequence to a compliance case
  • Cause and Consequence form
  • Add compliance regulations to a compliance case
  • Add or create an issue for a compliance case
  • Create an Issue form
  • Export a report to PDF
  • Compose an email in GRC: Compliance Case Management
  • Configure due dates
  • Perform smart assessment on action tasks
  • Compliance Case Management reference
  • Tables installed with Compliance Case Management
  • Roles installed with Compliance Case Management
  • Continuous Authorization and Monitoring
  • Exploring CAM
  • Configuring CAM
  • Setup checklist for Continuous Authorization and Monitoring
  • Download Continuous Authorization and Monitoring
  • Assign Continuous Authorization and Monitoring roles to users and groups
  • RMF step 0 - Prepare the authorization package
  • Define the authorization boundary
  • Create an authorization package
  • RMF step 1 - Categorize the authorization package
  • RMF step 2 - Select controls for an authorization package
  • Set up baseline controls to generate controls and implement requirements
  • Inherit from a common control
  • RMF step 3 - Implement controls
  • RMF steps 4, 5, and 6 - Assess, authorize, and monitor
  • Implementing controls and assessment objectives in CAM
  • Generate assessment procedure plans for a test plan
  • Determine control effectiveness of a control test
  • Defining a control's requirements at the level of control objective
  • Control requirement details in the CAM view of Control objective and Control forms
  • Modify control requirement's implementation status at the control level
  • Impact of associated compliance objects on control requirements
  • Control requirement generation and upgrade steps
  • Continuous authorization and monitoring tasks in the CAM Workspace
  • Monitoring and managing security from the CAM Workspace Home page
  • View the dashboards to monitor and manage your NIST security posture
  • Monitor and manage CAM tasks
  • Managing POA&Ms issues
  • View reports on authorization boundary elements
  • View package details in CAM Workspace
  • ATO artifacts for an authorization package
  • Generate ATO artifacts
  • Exporting Catalog, Profile, and SSP in OSCAL format
  • Export data in OSCAL format
  • OSCAL namespace
  • CAM reference
  • CAM user roles
  • Analytics and Reporting Solutions for CAM
  • CAM Overview dashboard
  • AO Overview dashboard
  • SCA Overview dashboard
  • Fields on the Authorization Boundary form
  • Fields on the Authorization Package form
  • Fields on the Roles and Responsibilities tab
  • Components installed with Continuous Authorization and Monitoring
  • Continuous Authorization and Monitoring system properties
  • Configuring ATO artifacts report templates using the Document Designer with Word add-in
  • Install the add-in
  • Create content configurations for CAM
  • Word template form
  • Word template category form
  • Model Risk Management
  • Explore
  • Model Risk Workspace
  • Configure
  • Install Model Risk Management
  • Configure Model Workflow Settings
  • Use
  • Request a new model
  • New Model Intake form
  • Initiate a model risk assessment
  • Perform model risk assessment
  • Create a validation task
  • Perform model validation
  • Request evidence for model
  • Request evidence form
  • Approve or reject model assessment and validation tasks
  • Create an issue for model
  • Create an issue form
  • Create assessment in the Pre-deployment stage
  • Schedule assessment and validation tasks
  • Reassign model assessments and validations
  • Copy assessment responses
  • Override model ratings
  • Link existing documents to a model record
  • Reference
  • Model Risk Management email notifications
  • Roles installed with Model Risk Management
  • Tables installed with Model Risk Management
  • Operational Resilience
  • Explore
  • Key dependencies for Operational Resilience
  • Common Service Data Model for Operational Resilience
  • CSDM data workflow and business model views
  • Main node configurations: A component of the Data Relationship Framework
  • Node relationship configurations
  • Relationships between CSDM objects
  • Nexus map configurations
  • Node and edge configurations and property setting from the UI
  • Main node configuration source
  • Configure
  • Install Operational Resilience application
  • Assign Operational Resilience roles to users
  • Set up pillars, entity types, and generate entities
  • Configuring the pillars
  • GRC Choices form
  • Configuring entity types and entity filters
  • Entity Type New record form
  • Configure the Main node configurations
  • Main node configuration form
  • Configure the Node relationship configurations
  • Node relationship configuration form
  • Relationship registry record form
  • Configure the Nexus map configurations
  • Nexus map configuration form
  • Configure the Node configurations
  • Node configuration form
  • Configure the Node status configurations
  • Node status configuration form
  • Configure the Edge configurations
  • Edge configuration form
  • Configure the Edge status configurations
  • Edge status configuration form
  • Configuring Operational Resilience properties
  • Configuring 360º views for services and processes
  • Opres with CSDM header Main node configuration
  • Service (CMDB) Main node configuration
  • Business process to dependencies Main node configuration
  • Business service to dependencies Main node configuration
  • Service offering to dependencies Main node configuration
  • BCM dependencies related Main node configurations
  • Sample Services to dependencies configuration
  • Sample Application service to dependencies configuration
  • Sample end-to-end workflow for business services
  • Sample end-to-end workflow for services
  • Completing general administrative tasks
  • Create a scenario and link it to an event
  • Scenario New record form
  • Create an event group for the scenario
  • GRC Choice New record form
  • Create an event for the scenario
  • Event New record form
  • Add a participant role for the scenario analysis
  • GRC Choice New record form for participant roles
  • Update the Important choices module
  • GRC Choices form
  • Set up the Importance and Impact Tolerance Rating Scale
  • Rating Scale New Record form
  • Create and edit the attestation template
  • Assessment Metric Type New Record form
  • Create a Smart Assessment template
  • Set up Legacy assessment template
  • Assessment Metric Type form
  • Create HTML and PDF document templates
  • HTML Template form
  • Show Business services overview tab in Workspace view
  • Setting up the Operational vulnerability module
  • Set up the Operational vulnerability type
  • Vulnerability Type form
  • Set up the State model and Action task model
  • GRC state model form
  • Define the state transitions model
  • Set up the Vulnerability Assessment Template
  • Assessment metric type form
  • Set up the Document Template
  • HTML Template form
  • Manage
  • Gathering data aligned with the CSDM setup
  • Using the flexible data model
  • Data setup for business services
  • Add a service to Operational Resilience reporting
  • Create New Service form
  • Add a business service to Operational Resilience reporting
  • Create New Business Service form
  • Add a service offering to Operational Resilience reporting
  • Create New Offering form
  • Add a business process to Operational Resilience reporting
  • Create New Business Process form
  • Add an application service to Operational Resilience reporting
  • Create New Service Instance form
  • Verify the Main node configurations and relationships
  • Execute the scheduled jobs
  • Interacting with the Nexus map UI from the Workspace
  • Fetching dependencies from the CMDB and BIA
  • Performing Importance and impact tolerance assessment
  • Create an Importance and impact tolerance assessment
  • Create New Importance and impact tolerance assessment form
  • Define the scope and begin the assessment
  • Submit the assessment
  • Request an approval for the assessment
  • Close the assessment
  • Conducting a scenario analysis
  • Create a scenario analysis
  • Create New Scenario analysis form
  • Associate a scope and define the dependencies
  • Request the plan approval
  • Approve the plan for the scenario analysis
  • Adding a scenario event to the analysis
  • Add a scenario event
  • Scenario event form
  • Scenario analysis response task form
  • Add a participant and monitor the responses
  • Link issues and operational vulnerabilities
  • Submit the scenario analysis and receive an approval
  • Close the scenario analysis
  • Certifying services using self-attestation
  • Perform the self-attestation assessment
  • Create New Self attestation form
  • Submit the self-attestation report
  • Managing Operational vulnerability
  • Operational vulnerability
  • Reporting Operational vulnerability
  • Report an Operational vulnerability from the Employee Center
  • Report operational vulnerability form
  • Assign the reported vulnerability to an analyst
  • Report an Operational vulnerability from the module
  • Create New Operational vulnerability form
  • Report an Operational vulnerability from the Importance assessment
  • Report an Operational vulnerability from the Scenario analysis
  • Report an Operational vulnerability from the Self-attestation module
  • Report an Operational vulnerability from the Service record
  • Add the primary origin
  • Primary origin form
  • Add the impacted area
  • Impacted area form
  • Update the state of the operational vulnerability
  • Creating an action task for the operational vulnerability
  • Manage an assessment-type action task
  • Create New Action task form
  • Reassign or accept the assigned action task
  • Perform an assessment on the action task
  • Manage an investigation-type action task
  • Request an approval for the action task
  • Decide the treatment and perform a root cause analysis
  • Add or create an issue for the operational vulnerability
  • Request an approval
  • Approve the operational vulnerability
  • Close the operational vulnerability
  • Maintaining Digital resilience third-party registers
  • Exploring Digital resilience third-party registers
  • Use cases for updating the information registers
  • Register of information regulatory packages
  • Validation framework for Register of Information in Operational Resilience
  • Configuring Digital resilience third-party registers
  • Creating and reviewing the records
  • Create records in bulk
  • Update existing records in bulk
  • Validate the Register of Information packages
  • Display the help tips on the forms
  • Using Digital resilience third-party registers
  • Create a legal entity and enhance digital resilience data
  • Create New Company form
  • Create New Legal entity form
  • Create a branch and enhance digital resilience data
  • Create New Branch form
  • Create a function and enhance digital resilience data
  • Create New Function form
  • Create a third party and enhance digital resilience data
  • Create New Company form
  • Create New ICT third-party service provider form
  • Create a third-party engagement and enhance digital resilience data
  • Add Digital resilience information to third-party engagements
  • Create New Third-party engagement form
  • Create a contract and enhance digital resilience data
  • Create New Contract form
  • Create New Contractual arrangement form
  • Create a supply chain and enhance digital resilience data
  • Create an assessment and enhance digital resilience data
  • Create Microsoft Excel upload and download request
  • Create New Excel download/upload request form
  • Update existing records in bulk
  • Create records in bulk
  • Generate a register of information package
  • Using Digital resilience incident reporting
  • Explore
  • Configure
  • Set up entities for the targets
  • Map regulations to the entities
  • Set up DRIR Smart Assessment templates in the Assessment Workspace
  • Set up action task templates in Regulatory agency profile
  • Set up the flows in Flow Designer
  • Manage
  • Reporting incidents from SOW and SIR Workspace in DRIR
  • Report a major incident from Incident Management
  • Report a major incident from Security Incident Response
  • Report a major incident manually
  • Create New Digital Resilience Incident form
  • Reporting incidents or security incidents for multiple regulations
  • Complete action tasks and report incidents associated with regulations
  • Generating Word reports using Document designer
  • Install Document designer with Word
  • Create Template configurations
  • Create Data relationships
  • Create Content configurations
  • Download the manifest file
  • Build the Word template using the add-in
  • Generate Microsoft Word report
  • Creating or adding an issue
  • Create New Issue form
  • Monitor
  • Resilience metrics
  • Business services overview tab
  • Services overview tab
  • Pillars overview tab
  • Task page and List view
  • Reference
  • Properties installed with Operational Resilience
  • Roles installed with Operational Resilience
  • Scheduled jobs installed with Operational Resilience
  • Script includes installed with Operational Resilience
  • Tables installed with Operational Resilience
  • Tables relevant to CSDM
  • Tables relevant to Operational vulnerability
  • Digital resilience third-party registers reference
  • Roles installed with Digital resilience third-party registers
  • Tables installed with Digital resilience third-party registers
  • Digital resilience incident reporting reference
  • Roles installed with Digital resilience incident reporting
  • Script includes installed with Digital resilience incident reporting
  • Tables installed with Digital resilience incident reporting
  • Applications provided with IRM Pro and BCM Pro SKUs
  • Policy and Compliance Management
  • Exploring Policy and Compliance Management
  • Structural overview of Policy and Compliance Management
  • An overview of policy life cycle in Policy and Compliance Management
  • Implementing Policy and Compliance Management
  • Implement setup checklist for the GRC: Policy and Compliance Management application
  • Download GRC: Policy and Compliance Management
  • Quick start tests for Policy and Compliance Management
  • Perform Policy and Compliance Management administration
  • Assign Policy and Compliance Management roles to your users
  • Set Policy and Compliance Management properties
  • Policy and Compliance Management mandatory setup
  • Create a policy
  • Create a control objective
  • Relate a control objective to a policy
  • Create a control attestation using the Attestation Designer
  • Create a control indicator
  • Policy and Compliance Management enhancement steps
  • Create a GRC article template
  • Create or deactivate a citation
  • Set notification properties
  • Set up GRC Virtual Agent for requesting an exception to a policy or a control objective
  • Allow policy exception requests from other applications
  • Configure policy exceptions from other applications
  • Register other applications to request policy exceptions
  • Define policy exception reason choices
  • Define policy categories
  • Create an exception questionnaire
  • Define policy exception verification rules
  • Define policy exception approval rules
  • Policy exceptions and extensions with GRC Approval Configurator
  • Enable GRC Approval Configurator
  • Define policy exception verification rules
  • Define policy exception approval rules
  • Define extension rules for policy exceptions
  • Using the Classic user interface for Policy and Compliance tasks
  • Manage control objectives and policies
  • Create a policy
  • Approve and publish a policy
  • Acknowledge a policy
  • Set up a policy acknowledgement campaign
  • Create an audience
  • Submit an acknowledgement request
  • Respond to an acknowledgement request
  • Work with acknowledgements using the Service Portal
  • Retire a policy
  • Create a GRC article template
  • Create a control objective
  • Deactivate a control objective
  • Relate a control objective to a policy
  • Relate a control objective to a citation
  • Create or deactivate a citation
  • Create an authority document
  • Deactivate an authority document
  • Manage policy exceptions and extensions
  • Request a policy exception
  • Request an extension
  • Review the policy exception and extension request
  • Request a policy exception through Service Portal
  • Request a policy extension through Service Portal
  • Policy Exception Integration with Vulnerability Response
  • Manage issues in Policy and Compliance Management
  • Manually create GRC issues
  • Group similar issues under a new parent issue
  • Group similar issues under an existing parent issue
  • User hierarchy access control for issue and remediation task records
  • Report self-identified issues via the Service Portal
  • Triage a self-identified issue
  • Remediate an issue in Policy and Compliance Management
  • Manage the UCF integration
  • Activate Compliance UCF
  • Configure the UCF integration using a UCF-supplied API key
  • Configure the UCF integration using the UCF Common Controls Hub
  • Integrate with UCF Common Controls Hub to manage compliance frameworks
  • Create a Now Support Case for UCF-CCH account integration information
  • Download a UCF shared list
  • Elimination of duplicate citations from UCF Shared list download
  • Manage controls
  • Create a control
  • Follow a control
  • Attest a control
  • Multiple controls for a unique entity–control objective combination
  • Manage control attestations
  • Manage control indicators
  • Monitor controls using GRC Performance Analytics Indicators
  • Manage evidence requests
  • Evidence request workflow and users
  • Request evidence during audits
  • Reuse existing evidence from the related items of an engagement
  • Provide requested evidence
  • Approve evidence before evidence review
  • Accept, reject, or cancel evidence request
  • Review related evidence
  • Managing GRC tasks from Employee Center
  • Report a GRC issue from Employee Center
  • Create a policy exception from Employee Center
  • Complete control assessments from the Employee Center portal
  • Policy knowledge base and quick links in the Employee Center portal
  • Group assessments for similar assessments in Employee Center
  • Performing compliance tasks in Compliance Workspace
  • GRC Compliance Workspace
  • Compliance Home page for the compliance manager
  • Compliance Home page for the compliance analyst
  • Compliance Home page for the IT compliance manager
  • Configuring GRC Compliance Workspace
  • Configuration steps to filter IT-related data for IT Compliance Home page
  • Using the Compliance Workspace
  • Manage control objectives and policies using the Compliance Workspace
  • Create a policy using the Compliance Workspace
  • Manage compliance of a policy from the overview page
  • Approve and publish a policy using the Compliance Workspace
  • Acknowledge a policy using the Compliance Workspace
  • Set up a policy acknowledgement campaign using the Compliance Workspace
  • Create an audience using the Compliance Workspace
  • Submit an acknowledgement request using the Compliance Workspace
  • Respond to an acknowledgement request using the Compliance Workspace
  • Retire a policy using the Compliance Workspace
  • Create a GRC article template
  • Create a control objective using the Compliance Workspace
  • Manage a control objective from the overview page
  • Add control objective requirements
  • Control assessment based on GRC attestation template
  • Respond to attestations from the Employee Center
  • Respond to attestations on the Risk Portal
  • Respond to attestations from Tasks page of Compliance Workspace
  • User interface changes for assessments based on GRC attestation
  • Grouping assessments for control attestations
  • Combine assessments for control attestations
  • Perform CRI tiering questionnaire to determine the tier value of entity
  • Perform CRI profile assessment per CRI guidelines using control assessment engine
  • Deactivate a control objective using the Compliance Workspace
  • Relate a control objective to a policy using the Compliance Workspace
  • Relate a control objective to a citation using the Compliance Workspace
  • Create a citation using the Compliance Workspace
  • Create an authority document using the Compliance Workspace
  • Deactivate an authority document using the Compliance Workspace
  • Manage policy exceptions and extensions using the Compliance Workspace
  • Request a policy exception using the Compliance Workspace
  • Manage policy exception from the overview page
  • Review the policy exception and extension request using the Compliance Workspace
  • Assess risks of policy exception using advanced risk assessments
  • Set up advanced risk assessments for policy exception
  • Manage issues using the Compliance Workspace
  • Manually create GRC issues using the Compliance Workspace
  • Compliance Workspace issue form details
  • Group similar issues under a new parent issue using the Compliance Workspace
  • Group similar issues under an existing parent issue using the Compliance Workspace
  • Linking issues to multiple objects using Many-to-many table relationship
  • Triage a self-identified issue using the Compliance Workspace
  • Remediate an issue using the Compliance Workspace
  • Manage controls using the Compliance Workspace
  • Create a control using the Compliance Workspace
  • Linking automatically generated issues to a control in Many-to-many relationship
  • Testing common control and implementing results on multiple reliant entities
  • Convert standard control to common control and add reliant entities
  • Impact of common control on compliance score calculation
  • Entity enhancements to support common controls
  • Group assessments for similar assessments in the Tasks page
  • Take attestation at control requirements level
  • Compliance score calculation of an entity
  • Set up the steps required for entity compliance score calculation
  • Determining the logic in calculating compliance score
  • Manage control indicators using the Compliance Workspace
  • Create a control indicator using the Compliance Workspace
  • Create a GRC indicator template using the Compliance Workspace
  • Performance enhancements for Indicator nightly job
  • Manage evidence requests using the Compliance Workspace
  • Request evidence during audits using the Compliance Workspace
  • Provide requested evidence using the Compliance Workspace
  • Approve evidence before evidence review using the Compliance Workspace
  • Accept, reject, or cancel an evidence request using the Compliance Workspace
  • Review related evidence using the Compliance Workspace
  • Policy authoring and redlining in Compliance Workspace
  • Import policy text for redlining
  • Pre-requisites to enable policy redlining feature
  • Creating and associating policy texts from Cloud documents
  • Create and associate a policy text document in Microsoft OneDrive
  • Connect an existing document in Microsoft OneDrive to policy
  • Upload a Microsoft Word document to Microsoft OneDrive
  • Create and associate a policy text document in Google Drive
  • Connect an existing document from Google Drive to policy
  • Upload a Microsoft Word document to Google Drive
  • Create and associate a policy document in Microsoft SharePoint
  • Connect an existing document in Microsoft SharePoint
  • Upload a Microsoft Word document to Microsoft SharePoint
  • Sync document and view policy text
  • Provide document access to policy users
  • Complete publishing checklist and request policy approval
  • View the history of a redlining-enabled policy
  • Set up dynamic approval configuration on a policy record
  • Configure dynamic approval configuration on a policy
  • Configure dynamic approval configuration on a policy with redlining enabled
  • 360° Relationship Visualization for Policy and Compliance Management
  • Policy as Code Engine for Preventive compliance management
  • Configure compliance data source registry
  • Associate an item in application table to a control objective
  • Association of citations to controls
  • Enable associations of citation to controls mapping
  • Compliance score calculation for a citation
  • Factors affecting compliance score for citations
  • Add related controls to a citation manually
  • Add related citations to a control manually
  • GRC: Policy and Compliance integrator
  • Workflow for GRC: Policy and Compliance integrator
  • Using the GRC: Policy and Compliance integrator to display batch records and import tasks
  • Accessing the batch records in the content integration batch table
  • Assign a library import task for approval
  • Approve the library import task
  • DevOps accelerator for control compliance, PaCE execution, and exception management
  • Manage continuous monitoring for controls between Configuration Compliance and Policy and Compliance Management
  • Managing mobile experience for GRC Policy and Compliance
  • Setup checklist for the GRC Mobile application
  • Log in to the GRC Mobile application
  • Process pending Policy and Compliance Management approval requests with the GRC Mobile application
  • Process pending approvals for Policy exceptions with the GRC Mobile application
  • Assign Policy and Compliance Management indicator tasks with the GRC Mobile application
  • Assign Policy and Compliance Management issues with the GRC Mobile application
  • Assign Policy and Compliance Management remediation tasks with the GRC Mobile application
  • Reassign overdue Policy and Compliance Management attestations with the GRC Mobile application
  • Reassign overdue Policy and Compliance Management issues with the GRC Mobile application
  • Filter records with the GRC Mobile application
  • Policy and Compliance Management reference
  • Components installed with Policy and Compliance Management
  • Domain separation in GRC: Policy and Compliance Management
  • Analytics and Reporting solutions for GRC: Policy and Compliance Management
  • Compliance Overview Performance Analytics dashboard
  • Policy Overview Performance Analytics dashboard
  • Policy Exception Overview Performance Analytics dashboard
  • Policy Acknowledgement dashboard
  • My Attestation Overview dashboard
  • GRC Attestation Overview dashboard
  • NIST Cybersecurity Framework Overview dashboard
  • NIST Framework Profiling Overview dashboard
  • Application Risk and Compliance Overview dashboard
  • Privacy Management
  • Explore
  • Processing activities
  • Hierarchy
  • Classic assessments
  • Smart assessments
  • Risk assessments
  • Risk Assessment Methodology (RAM)
  • Privacy assessment configurations
  • Information objects
  • Privacy Workspace for the privacy manager
  • Processing activity tab
  • Risk and compliance tab
  • Operations tab
  • Privacy cases tab
  • Privacy Workspace for the privacy analyst
  • Privacy Management solution
  • Data subject types
  • Configure
  • Download application
  • Manage information objects
  • Create
  • Configure categories
  • Classify as personal information
  • Configure smart assessment templates for screening assessments
  • Configure smart assessment templates for impact assessments
  • Create a privacy assessment
  • Write a processing activity script
  • Map a control objective to a question response
  • Map an information object to a question response
  • Map a risk statement to a question response
  • Map the processing activity fields to a question response
  • Create and validate an assessment configuration
  • Map a table with a processing activity
  • Use
  • Entity scoping to plan a privacy program
  • Discover processing activities involving personal data
  • Types of privacy assessments
  • Initiating privacy assessments
  • Send a privacy assessment from an entity
  • New privacy assessment creation form
  • Send a privacy assessment to multiple entities
  • Send a privacy assessment from a processing activity
  • Send privacy assessments from multiple processing activities
  • Create a Risk Assessment Methodology
  • Risk assessment methodology form
  • Respond to a smart assessment
  • Respond to a screening assessment
  • Review a privacy assessment
  • Create or update a processing activity
  • Create or manage an information object
  • Modify an information object
  • Add data subject type to a processing activity
  • Add data subject type to privacy impact assessment
  • Classify data subject type as vulnerable
  • Add key stakeholders and send privacy assessments
  • Add a regulatory agency
  • Regulatory agency form
  • Create a data lineage for a processing activity
  • Create or manage a control on a processing activity
  • Delete a control from a processing activity
  • Create or manage risks on a processing activity
  • Manage chat collaborations of a processing activity
  • Create or add issues on a processing activity
  • Assign a processing activity to a key stakeholder
  • access-control-by-legal-entity
  • Configure access control
  • Entity-based access configuration
  • Create an entity configuration
  • Add hierarchical relationships
  • Set access restrictions using an entity based record access update utility
  • Set Entity-based record access rules
  • Integrate Employee Center and Risk portal
  • Privacy Case Management
  • Explore
  • Home page
  • Overview page
  • Workflow
  • Smart assessments
  • Privacy breach assessments
  • Overview page of a breach assessment
  • States of a privacy breach assessment
  • Elements of a privacy breach assessment
  • Configure
  • Install
  • Create a view rule
  • View rule form
  • Create an assignment rule
  • Assignment rule form
  • Create state model transition
  • Define the workflow states for a privacy case
  • Define model state transitions
  • GRC model state transition condition form
  • Create a privacy case assessment template
  • Assessment metric type form
  • Configure inbound email to enable privacy case creation
  • Configure Record Type Area
  • Configure privacy breach assessment
  • Create a breach factor type
  • Create breach factors
  • Create a PI data element type
  • Create PI data elements
  • Create a region
  • Create a jurisdiction
  • Use
  • Report a privacy case
  • Report a privacy case from the Employee Center
  • Employee Center privacy case creation form
  • Create a privacy case in the Privacy Workspace
  • Privacy new case form
  • Report a privacy case through email
  • Initiate a breach assessment from a case
  • Work on a privacy breach assessment
  • Case task workflow
  • Create a case task
  • Case task form
  • Work on a case task
  • Reassign an assessment type case task
  • Review and close a case task
  • Add an impacted area to a privacy case
  • Add PI information objects to a privacy case
  • Add key stakeholders to a privacy case
  • Add a related area to a privacy case
  • Add causes and consequences to a privacy case
  • Cause and consequence form
  • Add a privacy regulation related to a case
  • Add or create an issue for a privacy case
  • Export a privacy case as a PDF
  • Perform smart assessment on privacy action task
  • Send an email from a privacy case
  • Integrate for RadarFirst
  • Reference
  • Components installed with Privacy Case Management
  • Personal Data Rights (PDR)
  • Explore
  • Workflow
  • Workspace
  • Configure
  • Configure request type
  • Personal Data Rights request type form
  • Create an action task template
  • Create a data registry
  • Generate action tasks for a request
  • Use
  • Create a request
  • Personal data rights request form
  • Add action tasks to a request
  • New action task form
  • Accept and work
  • Personal Data Rights (PDR) external-facing form
  • Submit a privacy request using the external facing PDR form
  • Privacy data request fulfillment workflow
  • Configure request types and map jurisdictions
  • Modify email templates
  • Reference
  • Tables installed
  • Roles installed
  • Roles and tables installed with PDR
  • Email notifications
  • Uses of a processing activity
  • Workflow
  • Domain separation
  • Reporting
  • Home page
  • Processing activity overview page
  • Regulatory Change Management
  • Explore
  • Landing page
  • Tasks page in the Compliance Workspace
  • Source document import tasks
  • Regulatory process flow and tasks
  • Overview of RSS feeds
  • General guidelines
  • Overview of regulatory taxonomy
  • Impact assessments for the regulatory alerts
  • Regulatory assessment for a regulatory alert
  • Next Experience Discuss and Chat Collaboration
  • RCM in the Compliance Workspace
  • Configure
  • Download and install
  • Setup checklist
  • Set up the RSS feeds infrastructure
  • Activate and pull RSS feeds
  • Set up RSS feed sources
  • Map the taxonomy
  • Configure a provider taxonomy configuration record
  • Manage feed request responses
  • Admin module
  • Use
  • Create an action task
  • Create an issue related to the regulatory tasks
  • Delete an issue
  • Regulatory Change Management Core UI
  • Regulatory alerts
  • Perform actions on regulatory alerts
  • Add an AI-recommended citation to a regulatory alert
  • Manage and assign regulatory event alerts
  • Train and use the similarity solution to recommend citations on regulatory alerts
  • Auto-assign configuration for regulatory alerts
  • Similarity Definition Form
  • Manage and assign source document alerts
  • Regulatory change tasks
  • Users and associated actions for the regulatory change tasks
  • Manage the regulatory change tasks
  • Source document import tasks
  • Users, associated actions, and states for the source document import tasks
  • Manage the source document import tasks
  • Regulatory Change Management dashboard
  • Manage regulatory tasks
  • Regulatory alerts
  • Differences between regulatory event alert and source document alert
  • Link Change tasks
  • Change tasks
  • Link Action tasks
  • Regulatory event alerts view
  • Impact radius for regulatory events
  • Source document alerts
  • Respond to a regulatory assessment
  • Respond to a regulatory alert risk assessment
  • Assess the impact of a regulatory alert
  • Create regulatory event alerts manually
  • Assign a regulatory event alert to a coordinator
  • Assess the impact of a regulatory event alert
  • Manage regulatory change tasks
  • Regulatory Change Task form
  • Manage a source document import task
  • Assign a source document alert to a coordinator
  • Create a new action task for the alert
  • Complete the action task associated with the alert
  • Create or add an issue related to a regulatory task
  • Create New Issue form
  • Associating an AI-recommended citation to an open regulatory alert
  • Action tasks in Regulatory Change Management
  • Import the regulatory event alerts in bulk
  • Manage the taxonomy
  • Compose an email
  • Reference
  • User roles
  • Types of alerts, user roles, and states of regulatory alerts
  • Tables installed with Governance, Risk, and Compliance
  • Roles and tables installed with Regulatory Agency Library
  • Email notifications in Regulatory Change Management
  • Risk Management
  • Explore
  • GRC Risk Workspace
  • Risk Workspace for the operational risk manager
  • Risk Workspace for the business operational risk manager
  • Risk Workspace for the IT risk manager
  • User experience enhancements in the Risk Workspace
  • GRC Risk Portal
  • Advanced Risk Assessments in the Risk Workspace
  • Advanced Risk Assessment
  • Workflow of Advanced Risk Assessment
  • Factors in Advanced Risk Assessment
  • Types of risk rating methodologies
  • Transformation criteria
  • Any object assessment using Advanced Risk Assessment
  • Delegation of risk assessment
  • Understanding the risk assessment instance
  • Managing risk responses
  • Risk score rollup in Advanced Risk Assessment
  • Privacy risk management
  • Risk score rollup in Privacy Management
  • Manage risk assessment scheduler
  • Integration of advanced risk assessments with risks and controls
  • Risk appetite and tolerance in Advanced Risk
  • Target risk assessment in Advanced Risk
  • Manage risk events
  • Business process management
  • Exploring the entities
  • Entities
  • Entity types in GRC
  • Entity classes in GRC
  • Entity tiers in GRC
  • Manage risks, risk statements, and risk frameworks
  • Workflow of a risk using Advanced Risk
  • Manage risks linked to the same risk statement
  • Risk hierarchy and scoring
  • Association of entities at any level of a risk statement
  • Manage classic risk assessments
  • Risk indicators, control indicators, and indicator templates
  • Manage risk issues and remediation
  • Reporting views from Risk Assessment Methodology
  • Configure
  • Risk Management implementation
  • Download Risk Management
  • Install Risk Management
  • Setup checklist for the Risk Management application
  • Setup checklist for GRC Advanced Risk
  • Download Advanced Risk
  • Risk Management detailed setup
  • Quick start tests for GRC Advanced Risk
  • Configure Risk Management
  • Risk Management Administration
  • Quick start tests for Risk Management
  • Set up checklist for the GRC Mobile application
  • Risk appetite setup
  • Configure a risk appetite and tolerance in Advanced Risk
  • Set up a risk appetite scale
  • Change a risk appetite status
  • Modify Advanced Risk messages
  • Create related list groupings in Advanced Risk
  • Integrate
  • Project Risk Assessment using Advanced Risk Assessment
  • Workflow of project risk assessment
  • Configure Project Portfolio Management and Advanced Risk integration
  • Assign project risks to stakeholders for assessment
  • Assess project risks using Advanced Risk Assessment
  • Elevate a project risk to enterprise risk
  • Application risk assessment using Advanced Risk Assessment
  • Workflow of risk identification for business applications
  • Set up risk identification integration
  • Respond to an application questionnaire
  • Create a smart assessment template for risk identification
  • Review responses and perform inherent risk assessment
  • Associate risks, citations, policies, and controls with a risk identification record
  • Recommendation engine for risk and compliance mapping
  • Information objects
  • Integration of advanced risk assessment with other applications
  • Integration of Employee Center and GRC
  • Manage continuous monitoring for risks between Risk Management and Vulnerability Response
  • Integrating Microsoft 365 with Management Reporting of Risk
  • Workflow of Management Reporting of Risk
  • Install the ServiceNow Reporting add-in for risk reporting
  • Set up Microsoft 365 reporting configuration in risk
  • Configure a business domain role in Management Reporting of Risk
  • Add additional reporting configuration filters for a Microsoft 365 configuration record in risk
  • Add the ServiceNow Reporting add-in into Microsoft Word
  • Import risk data in to a Microsoft Word
  • Use
  • Mobile experience for GRC Risk Management
  • Log in to the GRC Mobile application
  • Process pending Risk acceptance tasks with the GRC Mobile application
  • Assign Risk Management indicator tasks with the GRC Mobile application
  • Assign Risk Management issues with the GRC Mobile application
  • Assign Risk Management remediation tasks with the GRC Mobile application
  • Reassign overdue Risk Management assessments with the GRC Mobile application
  • Reassign overdue Risk Management issues with the GRC Mobile application
  • Filter records with the GRC Mobile application
  • Use Risk Events
  • Configure risk event integration
  • Create a risk event response template
  • Define a threshold amount for the risk event response template
  • Report risk events from the Service Portal
  • Report a risk event from Employee Center
  • Report a risk event from an incident
  • Create a risk event task
  • Analyze a risk event
  • Create a risk event entry
  • Approve a risk event
  • Close a risk event
  • Reopen a closed risk event
  • Add a risk event cause to the cause library
  • Add a risk event consequence to the consequence library
  • Set up GRC Virtual Agent to report risk events
  • Perform Advanced Risk Assessment
  • Create a manual factor
  • Create a group factor
  • Scoring logic for predefined formulas for group factors
  • Create an automated factor
  • Create a scripted automated factor
  • Copy a factor
  • Configure a risk assessment methodology
  • Risk Assessment Methodology form
  • Copy a risk assessment methodology
  • Retire a risk assessment methodology
  • Configure an inherent assessment
  • Inherent Assessment form
  • Configure a control effectiveness assessment
  • Control Assessment form
  • Configure a residual assessment
  • Residual Assessment form
  • Configure a target assessment
  • Target assessment form
  • Create risk color styles
  • Configure risk heatmaps
  • Create a risk assessment scope and initiate assessments
  • Simulate a risk assessment
  • Assess risks and objects on an assessment instance
  • Assess risks
  • Create a risk assessment using the Risk Assessment Designer
  • Create an assessment type
  • Assess risk for a policy exception
  • Assess a risk
  • Manage a business process
  • Create a business process
  • Approve, reject, or delete a business process
  • Create a risk framework and associate risk statements to it
  • Define risk statement hierarchy
  • Create a risk statement
  • Visualize risk hierarchies using the GRC: Workbench
  • Generate a risk from a risk framework
  • Generate a risk from a risk statement
  • Relate risks to each other
  • Create a risk manually
  • Follow a risk
  • Add a control to a risk
  • Manually create GRC issues
  • Report issues from the Service Portal
  • Issue assignment using the Governance, Risk, and Compliance Predictive Intelligence plugin
  • Train and use the similarity solution definition for issue assignment prediction
  • Use entity and risk dependencies using the GRC: Workbench
  • Activate GRC: Workbench
  • Create entity class using the GRC: Workbench
  • Create relationships between entity classes using the GRC: Workbench
  • Associate a risk framework or risk statement with an entity type to generate risks
  • Visualize and edit entity dependencies using the GRC: Workbench
  • Delete entity dependencies using the GRC: Workbench
  • Delete an entity class using the GRC: Workbench
  • Create a risk using the GRC: Workbench
  • Visualize and edit risk dependencies using the GRC: Workbench
  • Delete risk dependencies using the GRC: Workbench
  • Monitor risks using GRC Performance Analytics Indicators
  • Activate GRC: Performance Analytics Integration
  • Associate a PA indicator with a risk statement or control objective
  • Associate a PA indicator with risks and controls
  • Update associated GRC indicators for a set of items
  • Create a GRC indicator template
  • Create a risk indicator
  • View the Risk Overview
  • Use Risk Workspace
  • Create a risk framework in the Risk Workspace
  • Create a risk statement in the Risk Workspace
  • Associate a risk statement with a control objective in the Risk Workspace
  • Common controls in Risk Management
  • Create and run a manual risk indicator in the Risk Workspace
  • Create and run a basic risk indicator in the Risk Workspace
  • Create and run a scripted risk indicator in the Risk Workspace
  • Issue management in the Risk Workspace
  • Create a risk assessment scope in the Risk Workspace
  • Schedule risk assessments in the Risk Workspace
  • Perform advanced risk assessment in the Risk Workspace
  • Generate a risk assessment summary
  • Perform any object assessment in the Risk Workspace
  • Workflow of risk response task
  • Workflow of action item in risk response task
  • Create a risk response task in the Risk Workspace
  • Create an action item in the risk response task
  • Create New Action Item form
  • Workflow for risk identification in the Risk Workspace
  • Create a risk event in the Risk Workspace
  • Associate similar risk events
  • Categorizing risks with the Governance, Risk, and Compliance: Predictive Intelligence plugin
  • Analyze a risk event in the Risk Workspace
  • Create a risk event entry in the Risk Workspace
  • Create an ORX external event
  • Report a risk event from the Risk Portal
  • Chart colors for risk data
  • Create a business process in the Risk Workspace
  • Add related assets to a business process
  • Create a test plan in Risk Workspace
  • Filter data in the risk heatmap workbench
  • Define the risk appetite for an entity
  • Risk appetite fields on the Entity form
  • Define the risk appetite for a risk
  • Risk appetite fields on the Risk form
  • Define the risk appetite for a risk statement
  • Risk appetite fields on the Risk Statement form
  • Parallel Review and Feedback in Advanced Risk
  • Parallel Review and Feedback workflow
  • Feedback dashboard
  • Configure a feedback integration
  • Feedback integration configuration form
  • Create feedback in Advanced Risk
  • Create feedback in the Risk Workspace
  • Create New Feedback form
  • Create Feedback from the record side panel
  • Feedback Details form
  • Initiate a chat from Sidebar in Parallel Review and Feedback
  • Respond to the feedback
  • Review and close the feedback
  • Roles for Parallel Review and Feedback
  • Risk assessment project
  • Workflow of risk assessment project
  • Create a risk assessment project
  • Perform assessment on a risk assessment project in stacked view
  • Perform assessment on a risk assessment project in grid view
  • Reassess a risk assessment project
  • Reassign assessor for a risk assessment project
  • Matrix report in Risk Workspace
  • Configure Matrix report registry
  • Create Matrix report configuration for Risk Workspace
  • Matrix report configuration form
  • View matrix report in the landing page and record page of Risk Workspace
  • GRC: Metrics in Integrated Risk Management
  • Exploring GRC: Metrics
  • Components of GRC: Metrics
  • Metric definition types
  • Thresholds in Integrated Risk Management
  • Metric data table
  • Configuring metrics
  • Create a manual metric definition
  • Manual metric definition fields
  • Create an assignment configuration
  • Create an automated metric definition
  • Automated metric definition fields
  • Create a calculated metric definition
  • Calculated metric definition form
  • Formula building in a calculated metric definition
  • Activate default values for CMD calculations
  • Metric definition setting record fields
  • Configure the formula builder
  • Create a formula
  • Update a metric definition
  • Create a metric
  • Create a metric unit
  • Create a unit family
  • Convert metric data to a different unit
  • Update a metric
  • Update a manually created metric
  • Create a threshold for a metric definition
  • Using GRC: Metrics to provide data
  • Provide data for a metric data task
  • Provide responses for multiple metrics
  • Review a metric data task
  • Override metric data task response
  • Override metric data
  • Reviewing calculation details with formula trees
  • View the calculation breakdown in a formula tree
  • GRC: Metrics reference
  • Components installed with the GRC: Metrics application
  • Analytics and reporting solutions for Risk Management
  • Operational risk heatmap for Advanced Risk Assessment in the Risk Workspace
  • Risk heatmap for classic risk assessment
  • Risk heatmap workbench
  • Operational Risk Management dashboard
  • GRC Advanced Risk plugin indicators
  • GRC Audit Management plugin indicators
  • GRC Policy and Compliance Management plugin indicators
  • GRC Risk Management plugin Performance Analytics indicators
  • GRC Profiles plugin indicators
  • Risk register in the Risk Workspace
  • Project Risk Overview dashboard
  • Risk Identification Overview dashboard
  • Basel dashboard
  • GRC Risk Overview dashboard
  • Advanced Application Risk dashboard
  • Performance Analytics dashboards for risk events and risk hierarchy
  • Advanced risk assessment dashboard
  • Reference
  • Components installed with Risk Management
  • Roles installed with Risk Management
  • Roles installed with the GRC Risk Workspace
  • Properties installed with Risk Management
  • Tables installed with Risk Management
  • Components installed with Advanced Risk
  • Tables installed with Advanced Risk
  • Roles for performing advanced risk assessment
  • Properties installed with Advanced Risk
  • Business process roles
  • Domain separation in Risk Management
  • Smart Assessment Engine
  • Exploring Smart Assessment Engine
  • Accessing templates in the Assessment Workspace
  • Domain separation and Smart Assessment Engine (SAE)
  • Configure
  • Triggering assessments
  • Configure the Trigger Smart Assessment Flow action
  • Trigger assessments from a script
  • Creating an assessment template from legacy assessment metric types
  • Migrate a legacy metric type to an assessment template
  • Manage
  • Use template designer
  • Create an assessment template
  • Add instructions and questions to an assessment template
  • Create a text question
  • Create a drop-down list question
  • Create a radio button question
  • Create a check box question
  • Create a number question
  • Create a reference question
  • Create an attachment question
  • Create a date question
  • Create a code question
  • Add reference information to an assessment template
  • Create an assessment template category
  • Copy an assessment template
  • Scoring assessments
  • Configure scoring for an assessment
  • Normalization in assessment
  • Score normalization
  • Configure normalization in assessment
  • Create a normalization strategy
  • Edit a normalization strategy
  • Retire a normalization strategy
  • Delete a normalization strategy
  • Automate response
  • Configure an automatic response for a question
  • Post-assessment automations
  • Configure post-assessment actions
  • Respond to assessments
  • Respond to an assessment
  • Submit an assessment
  • Reassign an assessment
  • Filter unanswered questions
  • Adding attachments to assessment
  • Adding comments to assessments
  • Cancel assessment
  • Copying responses from previous assessments
  • Combining assessments and copying responses
  • Submit combined assessments
  • Collaboration in assessments
  • Add contributors to assessments
  • Remove assessment contributors
  • Reference
  • Roles in Smart Assessment Engine
  • Flow actions for fulfillment subflow definitions
  • Settings in the Test action pop-up window
  • Trigger Smart Assessment action form
  • How legacy metric types are migrated to sections in templates
  • Results of migrating a metric category to an assessment template
  • Form field information for Smart Assessment Engine
  • Create assessment template form
  • Third-party Risk Management
  • Explore
  • Risk profile
  • Why conduct due diligence
  • Types of due diligence
  • Reasons for multiple engagements with one third party
  • Types of engagement with third parties
  • Regulations that affect third-party risk
  • Benefits of your TPRM program
  • Onboarding third party example
  • Due diligence workflow
  • Smart Assessment Engine
  • Configure
  • Assign roles to users and groups
  • Add users to groups
  • Configure properties
  • Enable risk concentration map
  • Enable email with third-party contacts
  • Import existing data
  • Run the Quick Start tests for Third-party Risk Management
  • Classic assessments
  • Risk rating scales for scoring
  • Third-party risk domains
  • Third-party risk area criteria
  • Component criteria
  • Third-party risk scoring rules
  • Engagement risk scoring rules
  • Event-driven management rules
  • View the run history
  • View generated assessments
  • Recall event-driven questionnaires and doc requests
  • Normalize scores for metrics
  • Set up a question bank
  • Define a question
  • View the sample questions
  • Create an external assessment template
  • Configure a scheduled risk assessment
  • Import a questionnaire from a spreadsheet
  • Create a questionnaire or document request template
  • Create templates using the designer
  • Create an issue generation rule
  • Set up internal responses to attach external questionnaires to assessments
  • Smart Assessment Engine assessments
  • Migrating from Classic Assessment Engine to Smart Assessment Engine
  • Migrate templates to SAE format
  • Create a TPRM SAE questionnaire or document request template
  • Integrate
  • TPRM with Policy and Compliance Management
  • Add a control
  • Create new control form
  • Add a control objective
  • Control objectives form
  • Scores from risk intelligence providers
  • Register a risk intelligence provider
  • Set up a risk intelligence provider service
  • Set up a provider request type
  • Add a risk intelligence score to a third party
  • Automate actions upon risk intelligence updates
  • TPRM with EcoVadis
  • Create an EcoVadis connection and configuration
  • Customize EcoVadis system properties
  • View EcoVadis scores
  • Risk intelligence providers
  • Request due diligence
  • Request engagement due diligence
  • Offboarding engagements without due diligence
  • Assess third-party risk
  • Create internal assessments
  • Respond to internal assessments
  • Create external assessments
  • Respond to questionnaires for a third party or engagement
  • Review responses to external questionnaires
  • Reopen an assessment
  • Create an issue
  • Manage issues
  • Create a task
  • Manage a task
  • Export responses to a spreadsheet
  • Monitor third-party risk
  • Overview of a third party
  • Viewing summarized third party risk information
  • Viewing general third party information
  • Viewing third-party subsidiary risk information
  • Viewing fourth-party information
  • Viewing risk intelligence scores
  • Overview of an engagement
  • Viewing summarized engagement risk information
  • Viewing third-party risk reports
  • TPRM Home page
  • TPRM Due diligence management reports
  • TPRM Risk activity page
  • TPRM Dashboards page
  • TPRM Risk concentration map
  • TPRM Task page
  • TPRM List page
  • Monitor data using dashboards
  • Create a TPRM dashboard
  • Edit TPRM dashboard details
  • Edit TPRM dashboards
  • Edit TPRM dashboard elements
  • Share a TPRM dashboard
  • Delete a TPRM dashboard
  • Monitoring the due diligence request process
  • Monitoring your fourth-nth parties
  • Register a fourth-nth party
  • Create a fourth-nth party record
  • Promote a fourth-nth party to a third party
  • Monitoring third-party elements
  • Create a third-party element record
  • Add a third-party element record to an engagement
  • Tracking a managed activity
  • Approve or reject due diligence requests
  • Set up the approval levels for DD requests
  • Set up the approval rules for DD requests
  • Manage the contract process
  • Accessing DD requests in the contract risk process
  • Work in the VRM classic UI
  • Create a VRM third party record
  • Setting up VRM third-party hierarchies
  • Define a VRM engagement
  • VRM third-party risk tiering assessments
  • Create a VRM tiering assessment
  • Review VRM tiering assessment responses
  • Create a VRM automated risk assessment
  • Managing external risk assessments — Legacy process
  • Create an external assessment — Legacy process
  • Document Management system
  • Create a document
  • Create new document form
  • Create a document version
  • Define document sharing permissions
  • Link documents to a TPRM record
  • Use digital resilience third-party registers
  • Create a legal entity and enhance digital resilience data
  • Create New Company form
  • Create New Legal entity form
  • Create a branch and enhance digital resilience data
  • Create New Branch form
  • Create a function and enhance digital resilience data
  • Create New Function form
  • Create a third party and enhance digital resilience data
  • Create New Company form
  • Create New ICT third-party service provider form
  • Create an engagement and enhance digital resilience data
  • Create New Third-party engagement form
  • Add Digital resilience information to engagements
  • Create a contract and enhance digital resilience data
  • Create New Contract form
  • Create New Contractual arrangement form
  • Create a supply chain and enhance digital resilience data
  • Create an assessment and enhance digital resilience data
  • Create a Microsoft Excel download request
  • Create New Excel download/upload request form
  • Create records in bulk
  • Update existing records in bulk
  • Register of information regulatory packages
  • Generate a RoI package
  • Validation framework for RoI
  • Validate Register of Information packages
  • Manage the third-party portal
  • Set up third-party contacts
  • Manage the access for your third-party contacts
  • E-signatures on questionnaires or document requests
  • Upload and manage documents in the portal
  • TPRM and the Explicit Roles plugin
  • Using a Microsoft Excel spreadsheet template for external questionnaires
  • Respond using a Microsoft Excel template
  • Using the SIG questionnaire for a risk assessment
  • Respond using the SIG
  • Use risk intelligence reports and scores
  • Request a RI report
  • Request a RI report associated with a DD request
  • Track sanctions-related information
  • Reference
  • Terminology
  • Roles in TPRM
  • Unique ID numbers for TPRM records
  • Results of migrating a template to a TPRM SAE template
  • Guidelines for importing spreadsheet data
  • Sample questionnaires
  • Due diligence request process management
  • Request third-party risk due diligence request form
  • IRQ process management
  • Create new internal assessment form
  • Third-party (external) risk assessment management
  • Life cycle states of a external assessment
  • Assessment metric type form
  • Create new external assessment template form
  • Create New TPRM SAE questionnaire template form
  • Third-party risk assessment form
  • Third-party element form
  • Approval process management
  • Approval rule form
  • Risk intelligence report requests management
  • Risk intelligence report request form
  • Scoring calculations using the classic assessment engine
  • Verifying scoring calculations using the classic assessment engine
  • Third-party risk management data model
  • Domain separation and Third-party Risk Management
  • Vendor Risk Overview reports — Legacy view
  • Common GRC features
  • Assignment Configurator for non-regulatory alerts
  • Configure assignments
  • Regulatory Agency Library
  • Download and activate plugin
  • Add a regulatory agency
  • Create New Agency form
  • Add a regulatory contact to an agency
  • Create New Regulatory Contact form
  • Add a jurisdiction to an agency
  • Add an authority document to an agency
  • Compose and send an email
  • Mobile experience for GRC
  • GRC application nomenclature
  • GRC content packs
  • SOX content pack
  • Install
  • Verify in Policy and Compliance Management
  • Verify in Risk Management
  • Verify in Audit Management
  • Dashboard and reports
  • GRC integrations
  • Integration with Thomson Reuters Regulatory Intelligence (TRRI)
  • Install application
  • Establish an SFTP or REST API connection
  • Modules in Thomson Reuters Regulatory Intelligence (TRRI)
  • GRC: integrations with third-party content
  • User roles for the integration process
  • Create a user
  • Standardized Information Gathering (SIG) Questionnaire Integration
  • Install
  • Verify in Third-party Risk Management
  • GRC use case accelerators
  • Cyber Risk Institute accelerator
  • Cybersecurity Controls Accelerator
  • NIST CSF Use Case Accelerator
  • Install
  • Verify
  • Supporting concepts
  • Tables
  • Dashboards and reports
  • Process overview
  • Identify the core framework
  • Review the framework core
  • Align and prioritize cybersecurity activities
  • Generate a target for an entity
  • Set up target for NIST CSF framework
  • Orient target
  • Create activity
  • Perform gap analysis
  • Review action plan
  • NIST RMF Use Case Accelerator
  • Install
  • Verify
  • Supporting concepts
  • Dashboards and reports
  • Process overview
  • Categorize targets
  • Generate target from profile or entity type
  • Set up a target for use with NIST RMF
  • Perform preliminary risk assessment and impact analysis
  • Monitor the NIST RMF Categorize Overview
  • Select baseline control definitions
  • Review baseline controls
  • Tailor baseline controls
  • Implement security controls
  • Manage and implement controls
  • Manage and implement control tests
  • Assess controls, risks, issues, and remediation tasks
  • Review and perform control attestations
  • Review and evaluate control effectiveness
  • Manage and address risks
  • Review and perform risk assessments
  • Manage and address issues
  • Manage and address remediation tasks
  • Monitor the NIST RMF Assess dashboard
  • Authorize targets
  • Authorize targets
  • Monitor the NIST RMF Authorize dashboard
  • Monitor security controls
  • Review and manage indicators
  • Monitor the RMF Monitor dashboard
  • Technology Controls Monitoring Accelerator
  • Download
  • Ensure all appropriate indicator templates are activated
  • View your operational status
  • View the Cybersecurity Controls module
  • Use indicator templates
  • Indicator templates for controls
  • 360° Relationship Visualization
  • Download and activate
  • Set up
  • Explore
  • Tag records with functional domain
  • Use the item generation process
  • Components installed
  • Operational changes of common controls
  • Use Approver Configurator for setting up approvals for setting up approvals
  • Set up an approval configuration record
  • Approval Configuration New Record
  • Assignment Configuration New Record
  • Assign an approval level
  • Approval Level New Record form
  • Set up an approval rule
  • Approval Rule New Record form
  • Base system tables configured with GRC: Approver Configurator
  • Roles installed with GRC: Approver Configurator
  • Confidential records
  • Create
  • Configure confidentiality in GRC tables
  • Confidentiality configuration form
  • Configure confidential inheritance
  • Create confidentiality inheritance
  • Confidentiality Inheritance Configuration form
  • User hierarchy
  • Create a user hierarchy configuration record
  • User group-based access on the GRC tables
  • Content references in GRC
  • Manage issues
  • Issues in the Workspace
  • Configure an issue relationship
  • Steps to configure an issue relationship
  • Issue Relationship Configuration form
  • Group issues
  • Domain separation in GRC
  • Create a domain
  • Breadcrumb navigation
  • Taxonomy management in GRC
  • Landing Page Configurations module
  • Tasks Page Configuration module
  • Update the Tasks Page Configuration record
  • Issue Page Configuration module
  • Create a record
  • Link a record to a workspace
  • Update a record
  • My tasks in the workspace
  • Monitor my tasks
  • Explore entities
  • Entities
  • Composite entity
  • Create a composite entity
  • Create new composite entity form
  • Entities in workspace view
  • Create
  • Functionality enhancements
  • Entity scoping
  • Generate risks and controls from entity types
  • Create independent entities
  • Relate entities
  • Entity classes
  • Create
  • Update
  • Scheduled jobs
  • Entity class rules
  • Create
  • Create an entity class rule filter
  • Entity class rule filter fields
  • Entity types
  • Create
  • Entity filters
  • Create
  • Create an entity filter in the Core UI
  • Entity tiers
  • Create
  • View and update exceptions
  • Cybersecurity Executive dashboard
  • Advanced Application Risk dashboard
  • Licensing summary dashboard
  • Role hierarchy of a user
  • Configure document templates using Document Designer
  • Configure templates
  • Create data relationships
  • Create content configurations
  • Configure Data columns
  • Configure Intermediate filters
  • Define the scripted variables
  • Install the add-in
  • Reference information
  • Create an audit report template
  • Workspace page
  • Configure
  • Workspace page configuration form
  • Revert templates to an older version
  • Record type icons configured for forms in GRC Common Workspace Elements
  • GRC reference
  • Components installed
  • Common roles
  • Feature roles
  • Tables installed
  • GRC properties

Download Continuous Authorization and Monitoring

  • Release version: Xanadu
  • Updated August 6, 2024
  • 1 minute to read

    • You download CAM from the ServiceNow Store.

    Before you begin

    Role required: admin

    Procedure

    Follow the instructions in Download a GRC application from the ServiceNow Store for the first time.
    Related tasks
    • List of plugins
    Back to home page