This project focuses on implementing a complete enterprise risk management solution using ServiceNow IRM. It covers risk identification, scoring, assessment, and mitigation workflows with automated issue tracking and remediation. Risk statements, profiles, and controls are configured to reflect real organizational risk structures. Dashboards and reports are used to provide management visibility into overall risk posture, aligning with enterprise governance practices.

This project involves building an automated compliance framework using ServiceNow Policy and Compliance. Policies are created and mapped to control objectives and authority documents such as ISO 27001 and SOX. Compliance assessments are executed to identify gaps, and issues are generated for non-compliance. The solution demonstrates how organizations maintain continuous compliance using centralized governance workflows.

This project implements a vendor risk management system to assess and monitor third-party risks. Vendors are onboarded, tiered, and evaluated using risk assessments and questionnaires. Risk scores and issues are tracked throughout the vendor lifecycle, enabling organizations to proactively manage external risks in line with regulatory and security requirements.