--- title: Governance, Risk, and Compliance description: Respond to business risks in real time. Connect security and IT with an integrated risk program offering continuous monitoring, prioritization, and automation. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/r\_WhatIsGRC.html release: australia topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 9 --- # Governance, Risk, and Compliance Respond to business risks in real time. Connect security and IT with an integrated risk program offering continuous monitoring, prioritization, and automation. ## Governance, Risk, and Compliance applications ## Request apps on the Store Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html). ## Respond to business risks in real time with ServiceNow GRC ServiceNow Governance, Risk, and Compliance \(GRC\) helps transform inefficient processes across your extended enterprise into an integrated risk program. Through continuous monitoring and automation, the GRC applications deliver a real time view of compliance and risk, improve decision making, and increase performance across your organization and with vendors. Only ServiceNow applications can connect the business, security, and IT with an integrated risk framework that transforms manual, siloed, and inefficient processes into a unified program that is built on a single platform. [View and download the full info card](https://downloads.docs.servicenow.com/resource/enus/infocard/grc_statcard_infographic.pdf) for a highlight of GRC features.
\[Omitted image "erm-icon.png"\] Alt text: Emergency Response Management - **Streamline and automate activities in the face of an emergency** Mobilize your business continuity efforts during natural disasters and pandemics like COVID-19.
\[Omitted image "wrench.png"\] Alt text: Automate and manage - **Automate and manage policy life cycles and continuously monitor for compliance.** It makes perfect sense to embrace a single platform that can make all compliance efforts more organized, simpler, more transparent, and highly reliable.
\[Omitted image "mag\_glass.png"\] Alt text: Risk Management - **Enable fine-grained business impact analysis to appropriately prioritize and respond to risks.** Respond to business risks in real-time with integrated risk management.
\[Omitted image "clipbrd.png"\] Alt text: Audit Management - **Use risk data to scope and prioritize audit plans and automate cross-functional processes.** Reduce audit costs, improve efficiency, and minimize risk.
\[Omitted image "dollar.png"\] Alt text: Vendor Risk Management - **Continuously monitor, detect, assess, mitigate, and remediate risk in vendor ecosystems.** As your vendors become privy to more of your sensitive systems and data, their risk and compliance posture becomes even more important to your security. It's important to assess your vendors regularly and proactively mitigate any issues that arise.
## Automate and manage policy life cycles and continuously monitor for compliance \[Omitted image "policy-compliance-servicenow-solution.png"\] Alt text: Policy and Compliance Management The ServiceNow® Policy and Compliance Management product provides a centralized process for creating and managing policies, standards, and internal control procedures. The process automatically cross-maps the procedures to external regulations. Also, the application provides structured workflows for the identification, assessment, and continuous monitoring of control activities. ## Enable fine-grained business impact analysis to appropriately prioritize and respond to risks \[Omitted image "risk-servicenow-solution.png"\] Alt text: Risk Management The ServiceNow Risk Management product provides a centralized process to identify, assess, respond to, and continuously monitor Enterprise and IT risks that may negatively impact business operations. The application also provides structured workflows for the management of risk assessments, risk indicators, and risk issues. ## Use risk data to scope and prioritize audit plans and automate cross-functional processes \[Omitted image "mmasset0021307-audit-servicenow-solution-horizontal.png"\] Alt text: Audit Management The ServiceNow Audit Management product automates the work streams of internal audits teams, optimizing resources and productivity, and eliminating recurring audit findings. Audit Management uses compliance and risk data to scope, plan, and prioritize audit engagements. The ongoing review of policies and procedures, risks, and control breakdowns provide an opportunity for fixing issues before they become audit failures. The ServiceNow Regulatory Change Management application empowers the customers to check upcoming regulatory changes, assess their impact, and implement risk and compliance related changes, ensuring overall regulatory compliance. ## Continuously monitor, detect, assess, mitigate, and remediate risk in vendor ecosystems As your vendors become privy to more of your sensitive systems and data, their risk and compliance posture becomes even more important to your security. It's important to assess your vendors regularly, but until now, it has been a time-consuming and error-prone exercise comprised of spreadsheets, email, and rudimentary legacy risk management tools. The Vendor Risk Management application transforms the way you manage vendor risk through vital reporting of vendor risk and issues, a consistent assessment and remediation process, and automated assessment procedures. It provides a means to facilitate stakeholder interactions, drive transparency and accountability, and effectively monitor vendor-related risks. By aligning Vendor Risk Management with overall enterprise risk management priorities, you can create an essential integrated view of risk and a stronger extended enterprise risk posture. ## Learn - [What is a business continuity plan?](https://www.servicenow.com/products/governance-risk-and-compliance/what-is-business-continuity-plan.html) - [What is business resilience?](https://www.servicenow.com/products/governance-risk-and-compliance/what-is-business-resilience.html) - [What is Compliance Management?](https://www.servicenow.com/products/governance-risk-and-compliance/what-is-compliance-management.html) - [What is GRC?](https://www.servicenow.com/products/governance-risk-and-compliance/what-is-grc.html) - [What is operational resilience?](https://www.servicenow.com/products/governance-risk-and-compliance/what-is-operational-resilience.html) - [What is operational risk management?](https://www.servicenow.com/products/governance-risk-and-compliance/what-is-operational-risk-management.html) - [What is ransomware?](https://www.servicenow.com/products/governance-risk-and-compliance/what-is-ransomware.html) - [What is third party risk management \(TPRM\)?](https://www.servicenow.com/products/governance-risk-and-compliance/what-is-third-party-risk-management.html) ## Get started - Work with an implementation specialist to achieve your desired business outcomes. To learn more, visit the [Customer Success Center](https://www.servicenow.com/success.html). - Take a Governance, Risk, and Compliance course to build expertise and realize ROI faster. To sign up, see [ServiceNow training and certification](https://www.servicenow.com/services/training-and-certification.html). ## Applications and features - [AI Risk and Compliance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/ai-risk-management/ai-risk-and-compliance.md) - [Audit Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/audit-management/c_GRCAudits.md) - [Business Continuity Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/business-continuity-mangmt-overview.md) - [Compliance Case Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/compliance-case-management/compliance-case-management.md) - [Continuous Authorization and Monitoring](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/continuous-risk-monitoring/grc-cam-landing-page.md) - [Operational Resilience](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-opres-landing-page.md) - [Policy and Compliance Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/r_PolicyComplianceMgmt.md) - [Privacy Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/privacy-management.md) - [Regulatory Change Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/regulatory-change-management-service-portal/reg-change-mgmt-landing-page.md) - [Risk Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-risk-management-workspace/grc-risk-overview.md) - [Smart Assessment Engine](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/smart-assessment-engine/smart-asmnt-engine-landing-page.md) - [Third-party Risk Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/third-party-risk-mgt-landing-page.md) - [GRC and the ServiceNow Store](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-and-store.md) - [Common GRC Features](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/common-grc-features.md)