GRC Compliance and Risk Training – What is Available? What should I take?

[Eric Feron]

ServiceNow has several courses that are available for GRC. There are also free resources that are available. Even if a student is signed up for a course it would be good to review the free resources both prior to the course and afterwards. This article will explain what is available and explain who should be taking what courses.

Note – there is a separate article that will describe the courses available for Vendor Risk Management.

ServiceNow and GRC Courses Offered by ServiceNow

There are full course syllabi for each of these courses attached to this article.  This article is also provided as a pdf in an attachment.

	ServiceNow Foundations eLearning - Free	ServiceNow Fundamentals	GRC Fundamentals	Risk & Compliance Implementation
Admins		x	x	x
Implementers		x	x	x
Architects, Developers, Technical Consultants		x	x	x
Platform Owner		x	x
Process Owner	x	Optional	x
Compliance Officer, Policy Manager or Risk Manager	x	Optional	x
	Course Summary	Course Summary	Course Summary	Course Summary

Course	Who should take the course and why		What is covered in the Course
ServiceNow Foundations eLearning	Users involved in defining requirements, anyone not taking ServiceNow Fundamentals	Prior to taking the GRC Fundamentals course, students should know how to navigate in the ServiceNow Platform. Below this chart is a list of activities that a student needs to know prior to taking the GRC Fundamentals class.	This is a 7-part self-paced training on the basics of ServiceNow. All 7 modules contain about 3.5 hours of videos. Part 1 and 3 are critical as prerequisites for GRC Fundamentals. (~ 1 hour)
ServiceNow Fundamentals (SNF)*	Admins, Implementers, Architects, Technical Consultants	This group needs to understand the underlying ServiceNow architecture which the GRC applications are built upon.	The implementation team needs someone or a group that understand the technical details underlying the GRC concepts.
GRC Fundamentals (GRCF) (aka GRC in ServiceNow)	Everyone	Even if you are a seasoned GRC professional, you should take this course. The focus is not on the basic concepts of GRC in general. Instead the focus is on the application ServiceNow developed to be used by GRC professionals.	This is the starting point (after SNF or Foundations eLearning) for GRC training. It focuses on how to use the GRC applications. It covers Transaction process flows role assignment basic table structure and more
Risk and Compliance Implementation (RCI)	Implementers, Architects, Technical Consultants	This course focuses on answering the following types of questions: What do I need to know before I start on an implementation project? Who do I need to get involved? What functionality in the baseline needs to be discussed with my customer for potential configuration or customization?	This course continues from the material covered in the GRCF course. It dives into the table structure, Business Rules and other code supporting the application. It discusses possible configuration and customization changes that could be made to the application. Warning:¬† this is not a deep dive development course. It will point developers to script and topics to be explored. It is for implementers.

The GRC Fundamentals course assumes that students know how to navigate in the ServiceNow Platform.

Students should be able to perform the following tasks:

Finding and Registering for a Class

This is an unofficial tip.. a quick glance at when these courses are being offered is located on our Partner Portal. The page provides a nice summary of the dates a course is offered. There is a filter at the top from which you can select a course.

https://partnerportal.service-now.com/upcoming_sn_training_ng.do

Once a course is found, a student must still register for the course on the servicenow.com site. From this link, click the Book Training button. That will take you to our training registration site.

https://www.servicenow.com/services/training-and-certification.html#course

Free GRC Training Resources

The following is a list of sources for free education on GRC.¬† Over time more and more will be added.

Community - GRC

Here is a link to the GRC Community.¬† Subscribing to this will keep you up to date on what others are asking as well as notification when an article, blog or webinar is posted.

https://community.servicenow.com/community?id=community_forum&sys_id=1529d62ddbd897c068c1fb651f9619a...

Filter by Content Type – Blog, Article, Event, Video
Even if you can’t attend an event live, most are recorded and available for you to listen to at your convenience. Here are a few examples of titles of some events:

• First Steps in Complying with GDPR
• Demystifying GRC with Four Simple Use Cases

There is also an area for newbies – organizations that are implementing GRC for the first time.

YouTube – ServiceNow Support
This is one of my favorite places to go and get some quick training. There are somewhere around 300 videos on this site and more are added each day. Here is the link to the home page:

https://www.youtube.com/user/servicenowdemo/featured

Clicking on the Playlist option will group the videos, making it easier to find what you want/need. As of today, there are 15 GRC videos. These range in length from 5 minutes to 25 minutes. Here is the link to the GRC videos:

https://www.youtube.com/watch?v=meGkfuAf53o&list=PLCOmiTb5WX3oHXqIpMY2C0mf6FbfWLTQD

Developer Site
The training on the Developer site is not GRC specific, but there are several topics that would be useful to a GRC team. Here is the link to the Developer site:

https://developer.servicenow.com/app.do#!/home

In the menu bar at the top of the page, there is an option called LEARN. Underneath it there three sub topics.

• 
  Training – this is a list of free online courses. Some of the topics for non-developers that might be of interest to GRC implementers include:

o Importing Data into ServiceNow
o Reporting and Analytics
o Service Portal

• 
  Learning Paths – this will walk you thru topics. You do not have to go thru every topic in the list. Cherry pick the ones that are relevant to you!
  • Documentation – a third way to view the training options.

Product Documentation
Here is a link to ServiceNow’s Product Documentation.

https://docs.servicenow.com/

From this page select the ServiceNow version you are implementing. The next page allows you to select Governance, Risk and Compliance. There are some general topics that apply to all GRC applications at the start of this section, then there is a specific section for Policy and Compliance and one for Risk Management.

The specific articles provide an overview of the information available in Product Docs for this area. They follow the same format with sections on Explore, Setup, Administer, Use, Develop and Integrate.

[Eric Feron]

Here is the current list of "get started" tutorials for new customers:

For Policy, Compliance and Risk:

• Prepare to implement Policy, Compliance and Risk
• Implement Policy, Compliance and Risk
• Find the right partner for your implementation
• What training is right for you?
• Profiles (Entities) for Governance, Risk and Compliance: why you need them and how to set them up.
• UCF - Why and how.
• Entities (fka Profiles) in a few words: All places, people and things that...
• Controls: Attestations, Indicators and Control Tests.
• IT compliance.
• Become a GRC athlete.
• GRC implementation checklist.

For Vendor Risk Management:

• Get started with Vendor Risk Management - Product demo.
• Find the right partner for your implementation
• What training is right for you?
• Solve IT Vendor Risk.
• The Vendor Portal in 5 minutes: What it does, how to use it.

[Eric Feron]

Here is now an updated guide to GRC training classes as of September 2020

https://community.servicenow.com/community?id=community_article&sys_id=5870b0acdbf2d4509e691ea6689619cd