Risk Management - Prescriptive Guidance
Risk Management -Prescriptive Guidance:
How to best align your entity hierarchy with the CSDM/CMDB to create a robust integrated risk framework.
Entities are one of the most important elements in creating a robust risk management framework, but they are also one of the most misunderstood. In this whitepaper, we’d like to examine key best practices, anchored in real-world experience and demonstrated business outcomes, for building and maintaining a mature risk management environment. We will address the following questions:
- What is an Entity? Should I create all Assets as Entities? Is there a basis to qualify what should be modelled as entities?
- What is the difference between Entity Type & Entity Class?
- What is an Entity Hierarchy & why should I define it? Should I model my organization hierarchy as an Entity Hierarchy?
- How does the Entity Hierarchy align to the CMDB hierarchy and is there a linking to CSDM?
- Is there any prescriptive guidance from ServiceNow around the Entity Hierarchy and howitshould mature over time?
Read the full white paper attached herewith.
Contributors to this white paper: @Connor Levien @Ian Leu @Teresa law @Manoj Patel
https://www.servicenow.com/community/grc-articles/risk-management-prescriptive-guidance/ta-p/2710426