logo

NJP

Risk Management - Prescriptive Guidance

Import · Oct 24, 2023 · article

Risk Management -Prescriptive Guidance:

How to best align your entity hierarchy with the CSDM/CMDB to create a robust integrated risk framework.

Entities are one of the most important elements in creating a robust risk management framework, but they are also one of the most misunderstood. In this whitepaper, we’d like to examine key best practices, anchored in real-world experience and demonstrated business outcomes, for building and maintaining a mature risk management environment. We will address the following questions:

  1. What is an Entity? Should I create all Assets as Entities? Is there a basis to qualify what should be modelled as entities?
  2. What is the difference between Entity Type & Entity Class?
  3. What is an Entity Hierarchy & why should I define it? Should I model my organization hierarchy as an Entity Hierarchy?
  4. How does the Entity Hierarchy align to the CMDB hierarchy and is there a linking to CSDM?
  5. Is there any prescriptive guidance from ServiceNow around the Entity Hierarchy and howitshould mature over time?

Read the full white paper attached herewith.

Contributors to this white paper: @Connor Levien @Ian Leu @Teresa law @Manoj Patel

View original source

https://www.servicenow.com/community/grc-articles/risk-management-prescriptive-guidance/ta-p/2710426