Course
digicode: SNIRMI
ServiceNow: GRC: Integrated Risk Management (IRM) Implementation
Course facts
- Identifying implementation stakeholders, resources, and contributors to success
- Reviewing entity scoping approaches, considerations, and techniques
- Discussing baseline application functionality, security, and architecture
- Setting up an entity framework and managing entity classes
- Modifying policy properties and reviewing policy and compliance and risk lifecycles
- Configuring policy and compliance and risk lifecycles
- Configuring risk appetite
- Exploring advanced risk assessment functionality, set-up, and configurations
- Creating and running basic indicators for continuous monitoring
- Exploring metrics for risk continuous monitoring
- Setting up issue triage for routing issues
- Exploring Smart Assessment Engine (SAE) capabilities
- Discussing supported integrations
1 Implementation planning
Implementation planning explores the IRM release schedule, maturity levels, project phases, team, architecture, core roles, and available resources.
2 Entity framework
The Entity framework explains entity scoping, ownership, automation, class management, and the utilization of entities within IRM applications, along with the GRC: Profiles table architecture.
3 Policy and Compliance
Policy and Compliance reviews the application architecture, table structures, defines policy and control management workflows, and details the configuration of policy acknowledgement campaigns.
4 Risk and Advanced Risk
Risk and Advanced Risk covers the application's architecture and roles, discussing and simulating advanced risk assessment configuration, risk appetite, and reporting capabilities.
5 Continuous monitoring
Continuous monitoring focuses on the need for and the architecture of ongoing risk and control monitoring, including scenarios, configuration with indicators, and the application of GRC: Metrics.
6 GRC common elements
GRC common elements manages confidential records, addresses security with user groups, reviews issue creation and triage, and discusses configuration options and Smart Assessment Engine (SAE) capabilities.
This course employs an action-oriented methodology: In intensive hands-on labs, you will configure complex GRC scenarios directly within a ServiceNow instance. By combining technical depth, architectural analysis, and practical case studies, you will develop the essential expertise required for successful implementation.
This course is for customers, partners, and employees responsible for set up and configuration of features, functions, and data associated with GRC management and/or working on a ServiceNow implementation of GRC: Policy and Compliance Management, GRC: Risk Management, and GRC: Advanced Risk applications.
Examples include:
- Technical consultants, implementers, developers, and architects – who will be configuring, developing, or supporting GRC applications
- Project/program/engagement managers – who will be leading implementation of the GRC applications in ServiceNow
- Operations managers – who will oversee work completed using the ServiceNow GRC applications and may define implementation requirements
- Required: Welcome to ServiceNow and ServiceNow Administration Fundamentals (we also recommend being a Certified System Administrator (CSA), especially if you are planning to take the Certified Implementation Specialist – Risk and Compliance (CIS-RC) exam)
- Required: GRC: Integrated Risk Management (IRM) Fundamentals
- Recommended: ServiceNow Platform Implementation
Upon completion of the course, ServiceNow recommends gaining at least two to three months of practical experience before taking the «Certified Implementation Specialist – Risk and Compliance (CIS-RC)» exam. This ensures that you consolidate your knowledge and are optimally prepared.
Detailed information regarding the exam process can be found in the official Exam Blueprint. By successfully passing the certification, you officially demonstrate your expertise as a «Certified Implementation Specialist – Risk and Compliance (CIS-RC)».