Exciting news! Thirdera has been acquired by Cognizant.

Read more
Contact Us
josh with dark glasses looking down 2022-02 (1)-1 josh with dark glasses looking down 2022-02 (1)-1

IRM Foundations

Roll your Integrated Risk Management (IRM) program into ServiceNow with an offering that accelerates delivery of three core GRC components - Policy & Compliance, Risk Management, and Audit Management.

Release 1 - Risk & Policy

3 WEEKS
arrow

Initiate & Plan

5 WEEKS
arrow

Execute

2 WEEKS
arrow

Deliver

2 WEEKS
arrow

Go-Live & Beyond

Initiate & Plan

3 WEEKS
arrow

Conduct workshops for Risk & Policy, demo functionality, approve execution plan

8 HRS Product Owner
12 HRS Scrum Master
40 HRS Development Team
6 HRS Customer Stakeholders
6 HRS Acceptance Testers
Weekly hours by role

Execute

5 WEEKS
arrow

Configure Risk & Policy functionality per best practice and customer requirements; continually show progress back to the customer and collect new requirements.

4 HRS Product Owner
8 HRS Scrum Master
56 HRS Development Team
3 HRS Customer Stakeholders
2 HRS Acceptance Testers
Weekly hours by role

Deliver

2 WEEKS
arrow

Provide functional and technical knowledge transfer and support customer acceptance testers

12 HRS Product Owner
15 HRS Scrum Master
60 HRS Development Team
8 HRS Customer Stakeholders
16 HRS Acceptance Testers
Weekly hours by role

Go-Live & Beyond

2 WEEKS
arrow

Promote code to production and provide support.

4 HRS Product Owner
8 HRS Scrum Master
24 HRS Development Team
3 HRS Customer Stakeholders
2 HRS Acceptance Testers
Weekly hours by role

Release 2- Compliance & Audit

3 WEEKS
arrow

Initiate & Plan

5 WEEKS
arrow

Execute

2 WEEKS
arrow

Deliver

2 WEEKS
arrow

Go-Live & Beyond

Initiate & Plan

3 WEEKS
arrow

Conduct workshops for Compliance & Audit, demo functionality, approve execution plan

8 HRS Product Owner
12 HRS Scrum Master
40 HRS Development Team
6 HRS Customer Stakeholders
6 HRS Acceptance Testers
Weekly hours by role

Execute

5 WEEKS
arrow

Configure Compliance & Audit functionality per best practice and customer requirements; continually show progress back to the customer and collect new requirements.

4 HRS Product Owner
8 HRS Scrum Master
56 HRS Development Team
3 HRS Customer Stakeholders
2 HRS Acceptance Testers
Weekly hours by role

Deliver

2 WEEKS
arrow

Provide functional and technical knowledge transfer and support customer acceptance testers

12 HRS Product Owner
15 HRS Scrum Master
60 HRS Development Team
8 HRS Customer Stakeholders
16 HRS Acceptance Testers
Weekly hours by role

Go-Live & Beyond

2 WEEKS
arrow

Promote code to production and provide support.

4 HRS Product Owner
8 HRS Scrum Master
24 HRS Development Team
3 HRS Customer Stakeholders
2 HRS Acceptance Testers
Weekly hours by role

Thirdera Staffing

role icon

Engagement Manager

Responsible for providing leadership and direction to achieve growth and transformation.

role icon

Business Process Analyst

Analyzes business requirements and provides system design while implementing system solutions.

role icon

Technical Team

Comprised of a Technical Lead and Solution Architect, Thirdera's technical resources utilize advanced platform knowledge and best practices to ensure smooth technical operations and client satisfaction.

James arms folded glasses purple-2 James arms folded glasses purple-2

Project Scope

Thirdera's IRM Foundations Blueprint includes a robust list of deliverables to set your IRM program on course for long-term success. Guided by proven best practices, our team of advisory and technical experts configures and implements a solution best fit for your unique needs while establishing a foundation of knowledge to promote ongoing maturation. Key deliverables include:

  • Load core data including Risk and Compliance frameworks, policies, risk statements, control objectives, and audit engagements
  • Define initial register of assets, services, and/or functions for which controls and risks can be mapped to (known in ServiceNow as entities).
  • Configure policy lifecycle, including ownership, policy acknowledgement campaigns, and policy exception workflow and notifications
  • Establish control lifecycle, including ownership, mechanisms for determining compliance status, and issue process for handling non-compliance
  • Setup risk lifecycle, including initial risk assessment methodology, risk scoring, and risk response workflows
  • Establish audit engagement lifecycle, including audit tasks, initial control test templates, audit templates, and issue process for handling audit findings
  • Configure notifications, reports, and dashboards from templates
  • Setup of the three relevant Workspace UIs (Compliance, Risk, Audit) to provide concise user experiences
  • Provide Functional Overview, Technical Knowledge Transfer, and UAT Support for each release

Outcomes

Clear Ownership

Defined ownership across the IRM portfolio, including Policies, Risks, Controls, Issues, and Audit Engagements
Icon-Approval

Complete Visibility

Visibility into Compliance and Risk posture across the organization, including the ability to understand posture of external regulations, internal policies, risk frameworks, or individual assets.
Icon-Approval

Consolidated View

Single register of GRC Issues to get a wholistic picture into status and prioritization of the things that need remediation across all IRM activities
Icon-Approval

Process Automation

Initial automation around Risk and Compliance processes, including recurring assessments, automated issue generation for non-compliance, auto-generated notifications/reminders, and more, with a foundation for additional automation opportunities
Icon-Approval

Dedicated Workspaces

Dedicated persona-based workspaces to centralize tasks and efforts of risk and compliance managers
Icon-Approval

Data-Driven Analytics

Interactive dashboards and reporting to ensure visibility and simplify Risk and Compliance program management

Let's get started

 

Connect with our Risk experts for a detailed look at what an assessment would look like at your organization and how to improve your IRM program. 

 

Get in touch