I feel good using ServiceNow GRC because it pulls everything into one central hub. It serves as our single source of truth for planning engagements, test plans, and scoping risks from day one. Like end to end flow The automation is a best part-it handles control testing and evidence requests collection automatically, so I don't have to spend half my day chasing down stakeholders and clients over email. Plus, having real-time risk tracking and AI features which is directly into our IT and Security data makes the actual fieldwork way faster and more accurate. Managing third-party vendor risk is also incredibly smooth. Honestly, the UI is so much cleaner and more good than SAP GRC. The implementation was way faster too, mostly because SAP GRC IMPLEMENTATION requires an exhausting amount of background configuration just to get up and running. Review collected by and hosted on G2.com.

I find the cost a concern, and I think the learning curve could be less steep. I would also like videos that are easy to understand. I found the initial setup moderately complex. Review collected by and hosted on G2.com.