The ServiceNow® Risk Management application within Integrated Risk Management (IRM) provides a centralized process to identify, assess, respond to, and continuously monitor enterprise/IT risks that may negatively impact business operations. The application provides structured workflows to manage risk assessments, risk indicators, and risk issues.
The Risk Management application includes the following features:
- Scoping - entities and entity types
- Risk library - risk frameworks and risk statements
- Risk register - risk creation and management
- Risk assessments
- Risk treatment - accept, mitigate, transfer, and avoid
- Risk monitoring - indicator templates and indicators
- Issue management
- Reports and dashboards
[New]
- Entity based access is now automatically applied at the time of record insertion. Previously, users had to manually update records using the Bulk Update utility. This change streamlines access management by eliminating the need for post-insertion updates.
[Fixed]
- Popluated the "Run As User field" with Admin user in default Performance Analytics Data Collector jobs, resolving the issue where jobs were not executing automatically after application installation.
- Strengthened security by resolving identified issues.
[Removed]
- Removed deprecated actions from Risk Response tasks to streamline the user experience and reduce confusion.
The following applications get installed automatically when the Risk Management application is activated:
- GRC: Profiles
- GRC: Approver Configurator
Permissions and roles
Role required to install the app: System admin (admin)
To upgrade the Risk Management application, make sure to upgrade the Risk Management Workspace and any other installed GRC applications to the equivalent release version. For example, version 15.x of Risk Management is certified to work with version 15.x of Risk Management Workspace and version 15.x of other GRC applications.