The ServiceNow® Risk Management application within Integrated Risk Management (IRM) provides a centralized process to identify, assess, respond to, and continuously monitor enterprise/IT risks that may negatively impact business operations. The application provides structured workflows to manage risk assessments, risk indicators, and risk issues.
The Risk Management application includes the following features:
- Scoping - entities and entity types
- Risk library - risk frameworks and risk statements
- Risk register - risk creation and management
- Risk assessments
- Risk treatment - accept, mitigate, transfer, and avoid
- Risk monitoring - indicator templates and indicators
- Issue management
- Reports and dashboards
New
- Added support for the Risk Admin role to create Smart Assessment question banks, and for the Risk Manager role to read them.
Fixed
- Fixed an issue where Business User Lite users could not access the My Attestations module in Service Portal.
- Fixed translation issues on the Continuous Risk Monitoring Overview dashboard.
The following applications are installed automatically when you activate the Risk Management application:
- GRC: Profiles
- GRC: Approver Configurator
Permissions and roles
Role required to install the app: System admin (admin)
To upgrade the Risk Management application, make sure to upgrade the Risk Management Workspace and any other installed GRC applications to the equivalent release version. For example, version 15.x of Risk Management is certified to work with version 15.x of Risk Management Workspace and version 15.x of other GRC applications.