grc-compliance

Manage ServiceNow GRC policies, controls, risks, and audits.

77|23|Updated Jul 16, 2025
One-click install
npx skills add https://github.com/groeimetai/snow-flow --skill grc-compliance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: grc-compliance
Source: https://github.com/groeimetai/snow-flow/tree/main/packages/opencode/src/bundled-skills/grc-compliance
Command: npx skills add https://github.com/groeimetai/snow-flow --skill grc-compliance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill streamlines the management of Governance, Risk, and Compliance (GRC) within ServiceNow, automating policy creation, control testing, and risk assessment.

Core Features & Use Cases

  • Policy Management: Create, update, and transition the lifecycle of compliance policies.
  • Control Management: Define, test, and record results for compliance controls.
  • Risk Management: Assess and track risks, including inherent and residual impact.
  • Audit Management: Facilitate the creation and management of audit engagements and findings.
  • Use Case: Automatically create a new control for a published policy, assign it for testing, and record the outcome, generating a risk assessment if the control fails.

Quick Start

Use the grc-compliance skill to create a new policy named "Data Privacy Policy" with a description "Ensures adherence to GDPR regulations".

Frequently Asked Questions about grc-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate policy creation and lifecycle management in ServiceNow GRC?

Automate ServiceNow GRC policy creation by defining the policy name and description directly. The skill manages the lifecycle by transitioning policy states, creating associated controls, and assigning them for testing automatically.

Can I automatically generate a risk assessment when a compliance control fails?

Yes, you can generate a risk assessment when a control fails. The skill records the control testing outcome and automatically triggers a risk assessment to track inherent and residual impact.

What is the best way to track audit findings and engagements in ServiceNow?

Track audit findings and engagements in ServiceNow by using the skill to facilitate audit creation and manage findings directly through interaction with native GRC tables and functionalities.

Does this approach support defining and testing controls for published compliance policies?

Yes, it supports defining and testing controls for published compliance policies. You can automatically create a new control, assign it for testing, and record the outcome directly within the ServiceNow platform.

How do I assess and track both inherent and residual risks in ServiceNow?

Assess and track inherent and residual risks in ServiceNow by automating risk evaluation workflows. The skill directly interacts with GRC tables to record and monitor risk impact throughout the lifecycle.

Do I need specific ServiceNow modules to manage governance and compliance tasks with this method?

You need access to ServiceNow GRC tables and functionalities to manage governance and compliance tasks. The skill operates by directly interacting with these native platform components to automate workflows.