Select a section from the dropdown
  • ServiceNow makes work better across the enterprise. Getting simple stuff done at work can be easy, and getting complex multi step tasks completed can be painless. Our applications automate, predict, digitize and optimize business processes and tasks, from IT to Customer Service to Security Operations and to Human Resources, creating a better experience for your employees, users and customers while transforming your enterprise. ServiceNow is how work gets done.

    Why We Partner with the UCF® and the CCH™

    ServiceNow GRC is a suite of applications within the ServiceNow platform that provide timely, comprehensive, and continuous information for auditing, reporting, and compliance purposes. By using the GRC applications (Policy and Compliance, Risk, and Audit) GRC professionals create a scalable compliance program based on their organization’s needs to meet internal and regulatory requirements.

    The addition of the Common Controls Hub content to ServiceNow GRC allows our customers to:

    • Manage issues to track remediation or issue exception
    • Document and publish policies
    • Download and import UCF content
    • Utilize controls and mitigate risk
    • Assess risk exposure
    • Continuously monitor risks and controls
    • Plan and conduct internal audits


    Who We Serve

    ServiceNow is a global supplier, with 16 data centers worldwide, and 73 offices in the United States, Latin America, Europe, the Middle East, Africa, Asia, the Pacific and Japan.

    We have specific solutions for enterprises in the following industries: financial services, healthcare, higher education, life sciences and government.

  • ServiceNow transforms today’s inefficient GRC processes through automation and a deep connection with IT (through the NOW platform and asset-centric approach), to prioritize and respond to real risks in real-time.

    • Orchestrate Cross-functional GRC Processes: the single configuration management database (CMDB), collaboration capabilities, flexible workflow designer, and automation enables fine-grain business impact analysis, streamlines GRC processes, and eliminates errors.
    • Enable Continuous Monitoring: Configure real-time business and service performance data to enable automated controls testing using indicators to ensure risk and compliance thresholds are being met.
    • GRC Dependencies Modeling: Using information in the CMDB, illustrate the upstream and downstream dependencies across assets to accelerate business impact analysis.
    • Streamline Compliance: The Common Control Framework eliminates overlapping controls, while GRC best practices embed compliance controls into IT and business operations.
    • Optimize Internal Audit Productivity: Use of risk data and issues management enables effective audit project scoping and planning, and optimizes internal audit and compliance resources.
    • Compliance Across the Extended Enterprise: Use Vendor Risk Management to assess the risk posed by your vendors for 360 degree compliance.

    Key Features

    Enable Real-Time Monitoring: Configure real-time business and IT service performance data to enable automated controls testing and define thresholds as indicators for continuous monitoring to understand your risk exposure.

    Automate Cross-Functional GRC Processes: The ServiceNow platform CMDB, collaboration engine, process designer, service mapping, and workflow automation simplify GRC processes and eliminate errors.

    Optimize Internal Audit Productivity: Use of risk data and issues management enables effective audit project scoping, planning, and reporting while optimizing internal audit and compliance resources.


    How to Connect CCH to an Existing ServiceNow GRC Account

    You may be eligible to establish an interface between the ServiceNow GRC and the CCH at no extra charge, as described below.

    If you purchased ServiceNow GRC before November 30, 2016 and you are a ServiceNow GRC customer on Helsinki 7+ or above with a contract start date on or before November 30, 2018, you are entitled to a subscription to the Common Controls Hub, and the required API add-on, at no extra charge.

    Just activate the Compliance UCF plugin (…comp…ucf) and submit a request on the ServiceNow HI Service Portal to validate the GRC subscription and set up a UCF CCH account or contact your ServiceNow rep to verify your entitlement and receive an activation code to include with your Common Controls Hub subscription order.

    To set up your Common Controls Hub subscription, go to, create a free CCH “Starter” account, and go to the Dashboard page. Click the red ‘Upgrade Now’ button in the upper right corner. Click the ‘Edit Subscription’ button, scroll down, click the ‘Basic Subscription box’ and the ‘API Access’ checkbox, and then click ‘Checkout’ to go through the purchase process. In the PO# field, insert your activation code to enroll for the free UCF CCH account. In ServiceNow GRC, integrate your UCF CCH account with your GRC instance by navigating to System Definition>Plugins; then, configure the integration.

  • Jakarta integration

    Here’s a quick six minute video on how to add a Saved Authority Document list from the Common Controls Hub to the Jakarta version of the ServiceNow platform.

    For further information on how to integrate your Common Controls Hub account into the ServiceNow platforms, click HERE for our FAQ.

  • Contact Us

    First Name:

    Last Name:

    Email address:

    Tell us what you’re interested in, select all that apply:

    Send us your questions:

  • April 2019

    Tuesday 04/23/19 | 10:00 am (PDT)

    Ask the Experts: [4/23/19] Understand Compliance Regulations and Customize your Controls in Minutes [#UCF]

    Understand Compliance Regulations and Customize your Controls in Minutes.

    View More


    Launch Webinar

    March 2018

    Thursday 03/15/18 | 11:00 am (PDT) - 12:00 pm (PDT)

    Do You Know Where Your GDPR Data Is?

    How to Identify the Data You Need for GDPR Compliance. Get ready for the GDPR enforcement deadline. Do you know how to identify, find and track the right data to comply with the GDPR? Attend this webinar to learn how!

    View More


    Launch Webinar

    December 2017

    Tuesday 12/12/17 | 8:00 am (PDT) - 9:00 am (PDT)

    Making GRC Understandable, Actionable, and Auditable for New Regulations

    UCF and ServiceNow help you discover effective ways to prepare for new regulations

    View More


    Launch Webinar

    • 04/10/19
      Ask the Experts: [4/23/19] Understand Compliance Regulations and Customize your Controls in Minutes [#UCF]

      Satisfying the increasing number of regulatory guidelines is a challenging task, but it is essential to meet your GRC goals and objectives. To help with the challenge, Unified Compliance provides in-depth regulatory compliance content for ServiceNow …

      Read More
    • 03/15/18
      How to Identify the Data You Need for GDPR Compliance

      How do you Identify the Data You Need for GDPR Compliance? Knowledge. Watch the recorded webinar now! The GDPR enforcement deadline is just a few months away! You need to ask yourself these questions: Are …

      Read More
    • 03/01/18
      Effective Ways to Prepare for New Regulations

      Are you sick of the time you spend trying to update your compliance tracking when new regulations are published?  For example, the General Data Protection Regulation is getting the attention of enterprises worldwide. And, you …

      Read More
  • Upcoming Events