TrustRadius: an HG Insights company

ServiceNow Governance, Risk, and Compliance

Score8.1 out of 10

50 Reviews and Ratings

What is ServiceNow Governance, Risk, and Compliance?

ServiceNow Governance, Risk, and Compliance provides the tools businesses use to proactively manage risk by measuring, testing and auditing internal processes. This solution helps business users ensure compliance to regulations, policies, standards and frameworks. It is available via the Standard, Professional, and Enterprise editions, the latter two supporting GRC and internal auditing processes.

Categories & Use Cases

Product Demos

ServiceNow Governance, Risk, and Compliance Key Features

Learn about the best (and worst!) features ServiceNow Governance, Risk, and Compliance has to offer, as determined by TrustRadius' reviewers.
Based on 50 ratings of ServiceNow Governance, Risk, and Compliance's features
View all ServiceNow Governance, Risk, and Compliance features

Top Performing Features

  • Risk management

    Risk management capabilities including alert engine to warn of trending risk exposure and risk visualizations like heat maps, dashboards, etc.

    Category average: 7.4

  • Incident management

    System captures risk-related incidents, including cause and result

    Category average: 7.8

  • Common repository of GRC items

    A common repository linking all GRC elements such as policies, risks, regulations, etc.) to give a 360 degree view

    Category average: 7.8

Areas for Improvement

  • GRC policy management

    Support for policy lifestyle changes including creation, approval, communication etc.

    Category average: 7.7

  • Integration with Corporate Performance Management (CPM) systems

    Ability to integrate with external CPM software

    Category average: 7

Who Buys & Uses ServiceNow Governance, Risk, and Compliance

ServiceNow Governance, Risk, and Compliance Reviews

What users are saying about ServiceNow Governance, Risk, and Compliance.
View all ServiceNow Governance, Risk, and Compliance reviews

Make risk and compliance available at everyone’s fingertips

Incentivized
Pranav SharmaView profile
Consultant in Information Technology at Cvent (1001-5000 employees employees)

Use Cases and Deployment Scope

We leveraged the ServiceNow Governance, Risk, and Compliance to monitor, manage, and act on different risks in real time, create policies and procedures to ensure compliance and for performance and audit management. The tool helped us getting and renewing the existing certifications including SOX, ISO 27001, HIPAA, PCIDSS etc.

Pros

  • Monitor, manage, and act on different risks in real time.
  • Making decisions aligned to business objectives and goals
  • Audit and Performance Management

Cons

  • Data and recommendations on legal compliance can be more granular
  • Regulatory compliance processes can improve
  • Cost is on the higher side

Most Important Features

  • Integrated risk management
  • Business processes
  • Audit Management

Return on Investment

  • Improved Risk Management
  • Controlled costs (annual savings of ~5 million USD)
  • Increase in Audit compliance

Alternatives Considered

LogicManager, Archer Integrated Risk Management Platform, IBM OpenPages and MetricStream Enterprise and Operational Risk Management

ServiceNow Governance, Risk, and Compliance Plugin for Every single GRC challenge

Varun KhareView profile
Senior Analyst in Information Technology at Ernst & Young (10,001+ employees employees)

Use Cases and Deployment Scope

ServiceNow Governance, Risk, and Compliance suite is very unique product, As an enterprise you need to manage various business challenges and this is where this suite help you with managing Risk Management, Business Continuity Management, Vendor Management, Privacy and Operation Risk. It helps you to gain real time visibility into the resilience ofyour technology.

Pros

  • Policy and Compliance Management
  • Risk Management
  • BCP/DR
  • Privacy Management

Cons

  • CMDB /Asset Management
  • Performance Analytics
  • Custom Workflows is not flawless

Most Important Features

  • Risk Management
  • Audit Management
  • Vendor Risk Management

Return on Investment

  • Effective Enterprise Risk Management
  • Holistic Real-time Monitoring of your technology and Risk
  • Negative - Asset Management has some issues and Ghost / Shadow IT is big issue

Alternatives Considered

Onspring

Other Software Used

Onspring, Archer Integrated Risk Management Platform

Great but could be better

Incentivized
Rajat WadhwaniView profile
Specialist Technical Data in Engineering at Shell (10,001+ employees employees)

Pros

  • Central Request Management System
  • Intuitive Dashboards
  • Safe and Secure

Cons

  • Not User Friendly
  • Not easily Deployable
  • Too many permissions required

Return on Investment

  • Easy to manage requests
  • Archive them for future purpose
  • Great support

Usability

Other Software Used

Microsoft Power BI, Petrel E&P, CGI Exploration2Revenue (X2R)

ServiceNow provides clear and concise communications company wide!

Incentivized
Verified User
Manager in Social Media (1001-5000 employees employees)

Use Cases and Deployment Scope

ServiceNow is used within my organization to automate and structure services and updates for a streamlined and clear approach across all business units to stay up to date. ServiceNow software is useful to drive awareness of potential security or phishing updates, operation reminders or call outs, customer service touch points as well as human resource.

Pros

  • Transparency of ask
  • Clear and concise message
  • Confidence in consistency across business units

Cons

  • Occasionally the messages are too vague
  • There have been instances of the notifications going out to all teams when all teams arent affected.
  • Occasionally they would end up in spam

Most Important Features

  • Clear messaging
  • Ease of flexibility in message
  • Trust in compliance aspect

Return on Investment

  • Quicker response time in employee finishing training upon first reminder
  • Higher open rate to emails versus when sent from HR or compliance
  • A clear message every send versus individuals within the company structuring the email

Alternatives Considered

TrustArc

Other Software Used

TrustArc, Mobify, now part of Salesforce Commerce Cloud, LinkedIn Marketing Solutions

Great software that does it

Incentivized
Verified User
Administrator in Information Technology (201-500 employees employees)

Use Cases and Deployment Scope

We utilize ServiceNow Governance, Risk, and Compliance to assist us in improving business resilience, managing risks, increasing productivity, and giving us the overall insight on how our data is being utilized. The process helps with reducing errors and costs via automated workflows. What is achieved is more accurate data with lower risk to support audits and compliance.

Pros

  • Managing risk
  • Increasing productivity
  • Provide visibility
  • Ease of use

Cons

  • Reporting could be better with more customization

Most Important Features

  • Reporting
  • integration

Return on Investment

  • great feedback from employees
  • risk management