Module 1: Implementation Planning
Objectives
- Review the ServiceNow Store release schedule and CIS implementation journey
- Explore IRM maturity levels and implementation use cases
- Discuss implementation phases, timelines, and core team roles
- Review IRM architecture and core roles
- Identify implementation resources
Labs
- Lab 1.2.1: Prepare for implementation
- Lab 1.3.1: Update the business user lite role
Module 2: Entity Framework
Objectives
- Explain entity scoping approaches and benefits
- Explore entity ownership and automation
- Manage entity classes and relationships
- Review GRC Profiles table architecture
Labs
- Lab 2.2.1: Synchronize entity, control, and risk ownership
- Lab 2.3.1: Entity class management
- Lab 2.4.1: Configure Entity-Based Access (EBA)
Module 3: Policy and Compliance
Objectives
- Review application architecture and table structures
- Define policy and control management workflows
- Configure policy acknowledgement campaigns
- Configure policy exceptions and approvals
Labs
- Lab 3.2.1: Modify policy properties and configure approvals
- Lab 3.3.1: Create a unique control for an entity and control objective combination
- Lab 3.3.2: Convert a standard control to a common control
- Lab 3.4.1: Modify policy exception properties
Module 4: Risk and Advanced Risk
Objectives
- Review risk and advanced risk architecture, tables, and roles
- Configure risk appetite
- Configure advanced risk assessment methodologies
- Simulate and publish risk assessments
- Review risk hierarchy and reporting
Labs
- Lab 4.2.1: Create manual and group factors for a Risk Assessment Methodology (RAM)
- Lab 4.3.1: Configure a RAM and simulation
Module 5: Continuous Monitoring
Objectives
- Discuss the need for continuous risk and control monitoring
- Review indicator architecture and scenarios
- Explore GRC Metrics for continuous monitoring
Labs
- Lab 5.2.1: Continuously monitor with control indicators
Module 6: GRC Common Elements
Objectives
- Manage confidential records and security using user groups and hierarchy
- Review issue creation and issue triage
- Review common configuration options
- Explore Smart Assessment Engine (SAE) capabilities
Labs
- Lab 6.1.1: Enable confidentiality
- Lab 6.4.1: Configure issue management