ServiceNow Governance, Risk, and Compliance (GRC) Reviews & Product Details

I like that ServiceNow Governance, Risk, and Compliance (GRC) is integrated with all the data in ServiceNow. It is easy to code and integrate, especially with its low-code/no-code capabilities, which help in reducing the time to market. Review collected by and hosted on G2.com.

There are several things that I find challenging with ServiceNow Governance, Risk, and Compliance (GRC). It doesn't solve all the problems, and I feel like it lacks some major components of GRC. While it helps with model risk, policy management, and compliance, there are still areas where it's lacking. The control testing and handling of cyber vulnerabilities are only dealt with to some extent, which is a bit disappointing. I also have issues with the licensing model, specifically that read licenses should be free if users login once a month or year. Additionally, the initial setup was not easy for us because we have a lot of solutions, making it too complicated to migrate. Review collected by and hosted on G2.com.

I like the traceability between records in ServiceNow Governance, Risk, and Compliance (GRC). It's great to know what citations relate to each control and how those controls target risks. This makes it easy to govern. Also, it helps us understand how our company's controls are covering regulatory requirements and industry frameworks. Review collected by and hosted on G2.com.

Workspace views don't have the same functionality as default/native views. For example, in the risks workspace, you can't select multiple risk responses during a risk assessment, whereas you can select multiple if operating in the native view. The initial setup was challenging, requiring us to redesign some processes to conform with ServiceNow functionality due to our reluctance to customize ServiceNow. Review collected by and hosted on G2.com.

Great to have our External Connections Cyber Security Assessment scoped app that relates to Policy and Compliance (P&C) in the same platform as our ITSM (to leverage order guide, service request, change, etc), CMDB (device inventory), Knowledge Management (KB Articles), Now Assist (AI Assistance), Platform Analytics (dashboard and reporting), and future possibilities such as OT Visibility, Vulnerability Response, AI Agents/Specialists, etc. P&C allows for auto-instantiation of controls per the entity type, auto-instantiation of issues for failed attestations, recurring attestations to confirm controls are still in affect, compliance status/score, as well as lifecycle status of the policy/entity:control/issue. We’re also able to leverage platform capabilities like scheduled job, email with email template, business rules, flow, etc in this low code application used enterprise wide. Enhancements are added to continue to improve our process and user experience. Lastly, the support and partnership from ServiceNow ensures our success. Thank you ServiceNow. Review collected by and hosted on G2.com.

Currently no functionality to sync-up attestation of a new control (of an existing entity already in review/monitor state) with the rest of the controls’ attestation cycle. Review collected by and hosted on G2.com.

I like how ServiceNow Governance, Risk, and Compliance (GRC) keeps all the rules in one place for everyone to use as a source of truth. I also appreciate that with this tool, I only need to teach one platform, which simplifies the training process. The approvals feature is valuable as it eliminates the hassle of having to chase them down. Review collected by and hosted on G2.com.

One area where I find ServiceNow Governance, Risk, and Compliance (GRC) could improve is its appeal to a very broad audience of users, many of whom are not tech-savvy. It would be beneficial to have a feature that walks them through the process, similar to how a survey does. Review collected by and hosted on G2.com.

I like how ServiceNow GRC centralizes risk, compliance, and governance activities in one platform. It improves visibility, tracking, and collaboration across teams. Review collected by and hosted on G2.com.

The platform can feel complex initially, especially when configuring workflows and reports. Some features require additional training and customization to use effectively. Review collected by and hosted on G2.com.

Ability to understand the platform, your business and performance against objectives whilst managing your risk posture and making better decisions. Review collected by and hosted on G2.com.

Multiple workspaces for personas that do not line up with organisations and how they operate Review collected by and hosted on G2.com.

I use ServiceNow Governance, Risk, and Compliance (GRC) to centralize risk and compliance management across my organization on a single platform, which is really helpful. It makes identifying, assessing, and tracking risks with scoring and ownership straightforward. I really like how it allows me to monitor third-party risk posture throughout the lifecycle of my projects. The integration with HRSD to secure some of my most sensitive data is also something I value. Additionally, I found the initial setup very easy to provision. Review collected by and hosted on G2.com.

Screen density and form layouts can feel sort of busy, at least for non-technical users. Review collected by and hosted on G2.com.

I use ServiceNow Governance, Risk, and Compliance (GRC) to set up control and minimize risk. I like its interconnection with control, policy, and risk. Seeing these three elements in one place in the workspace gives a clear picture to stakeholders, helping them make decisions before time. Review collected by and hosted on G2.com.

I think UCF should come out of the box so users can build the controls quickly. Also, the initial setup wasn't that easy since it requires understanding the process first and foundational data. Review collected by and hosted on G2.com.

I like the metrics feature in ServiceNow Governance, Risk, and Compliance (GRC) as it provides actionable insights that help create a roadmap and improve decision-making. The dashboarding and reporting functions are also great as they contribute to saving time and costs. The initial setup was smooth, which is always a plus. Review collected by and hosted on G2.com.

I find the automation of government policies in ServiceNow Governance, Risk, and Compliance (GRC) doesn't work as well as it could. We don't need to spend time reviewing and implementing the changes, but it seems like there's a gap in automation that could be improved. Review collected by and hosted on G2.com.

I like that ServiceNow Governance, Risk, and Compliance (GRC) offers visibility into the controls to ensure they meet enterprise security standards. It also helps identify gaps that exist in our environment and allows us to implement controls quickly. The integration with vulnerabilities is another aspect I find enjoyable. Additionally, the initial setup was easy. Review collected by and hosted on G2.com.

I feel there are not enough integrations with other technologies and there is a lack of data visibility in ServiceNow Governance, Risk, and Compliance (GRC). Review collected by and hosted on G2.com.