The Compliance Plan & Citation Attestation Application extends ServiceNow IRM to provide organisations with a structured, scalable, and auditable approach to managing regulatory obligations, citations, and compliance attestations. The solution enables compliance teams to establish clear ownership and accountability by assigning responsible business owners, legal entities, business units, and priority ratings to individual citations and obligations. It centralises compliance activities into a single platform, improving governance, transparency, and regulatory readiness.
The application introduces citation-level attestation capabilities, allowing organisations to assess compliance directly against individual regulatory obligations using ServiceNow Smart Assessments. Compliance teams can request and collect supporting evidence, track attestation outcomes, monitor compliance status, and automatically identify non-compliant obligations requiring remediation. The solution also provides automated workflows, configurable attestation cycles, compliance dashboards, reporting, and complete audit traceability, delivering a single source of truth for compliance management and executive oversight
Key Capabilities
-
Assign Accountable Owners / Business Owners, Legal Entities, and Business Units to citations and obligations.
-
Define and manage severity and priority ratings for regulatory citations.
-
Perform citation-level attestations using ServiceNow Smart Assessments.
-
Request, collect, and retain evidence supporting compliance declarations.
-
Automate notifications, reminders, and compliance workflows.
-
Link citations to relevant controls, risks, entities, and compliance plans to establish end-to-end traceability.
-
Automatically identify non-compliance and support issue and remediation management processes.
-
Perform Risk Assessments on Entity level Citations
-
Deliver real-time dashboards, reporting, and audit-ready records for executives, auditors, and regulators
-
Assign Accountable Owners / Business Owners, Legal Entities, and Business Units to citations and obligations.
-
Define and manage severity and priority ratings for regulatory citations.
-
Perform citation-level attestations using ServiceNow Smart Assessments.
-
Request, collect, and retain evidence supporting compliance declarations.
-
Automate notifications, reminders, and compliance workflows.
-
Link citations to relevant controls, risks, entities, and compliance plans to establish end-to-end traceability.
-
Automatically identify non-compliance and support issue and remediation management processes.
-
Perform Risk Assessments on Entity level Citations
-
Deliver real-time dashboards, reporting, and audit-ready records for executives, auditors, and regulators
Initial release
Following plugins must be installed before installing Compliance Plan app:
-
GRC: Risk Management (sn_risk)
-
GRC: Advanced Risk (sn_risk_advanced)
-
GRC: Policy and Compliance Management (sn_compliance)
-
GRC: Advanced Core (sn_grc_advanced)
-
GRC: Risk Management Workspace (sn_risk_workspace)
-
GRC: Compliance Management Workspace (sn_compliance_ws)
-
GRC: Compliance Case Management (sn_comp_case)
-
Smart Assessment (sn_smart_asmt)
-
Smart Assessment Core (sn_asmt_conn)
-
Smart Assessment Designer (sn_smart_asmt_desg)
After that, the “Compliance Plan and Obligation Attestation” application can be requested from ServiceNow Store. System administrators can install the application on the instance.