The ServiceNow® Risk Management application provides a centralized process to identify, assess, respond to, and continuously monitor enterprise/IT risks that may negatively impact business operations. The application provides structured workflows to manage risk assessments, risk indicators, and risk issues.
The Risk Management application includes the following features:
- Scoping - entities and entity types
- Risk library - risk frameworks and risk statements
- Risk register - risk creation and management
- Risk assessments
- Risk treatment - accept, mitigate, transfer, and avoid
- Risk monitoring - indicator templates and indicators
- Issue management
- Reports and dashboards
[Changed]
- Inline dashboards are now set to read-only, resolving customization issues encountered during upgrades.
[Fixed]
Addressed multiple issues related to Risk Response tasks:
- The Business User Lite role can now be reassigned to Risk Response Action Items.
- The Business User Lite role can now view comments on Risk Response tasks.
- Fixed an issue where the state of Risk Acceptance tasks did not update from "Accepted" to "Closed" in multi-language instances.
- Resolved an issue preventing the rejection of Risk Response tasks when comments were not provided.
- Risk Response tasks are now canceled correctly when the strategy on the risk record is changed to "None."
The following applications get installed automatically when the Risk Management application is activated:
- GRC: Profiles
- GRC: Approver Configurator
Permissions and roles
Role required to install the app: System admin (admin)
To upgrade the Risk Management application, make sure to upgrade the Risk Management Workspace and any other installed GRC applications to the equivalent release version. For example, version 15.x of Risk Management is certified to work with version 15.x of Risk Management Workspace and version 15.x of other GRC applications.