Skip to content
Notifications
Clear all

Beginner question: What's the difference between a 'risk' and an 'issue' in GRC?

1 Posts
1 Users
0 Reactions
0 Views
(@crm_hopper)
Estimable Member
Joined: 4 months ago
Posts: 142
Topic starter   [#5681]

Finally tried ServiceNow GRC after the hype. Found the risk/issue distinction more confusing than it should be.

A risk is something that *might* happen. An issue is something that *has* happened. In practice? A risk is a future headache you're supposed to plan for. An issue is the current headache you're being yelled at about. Example: not having a backup vendor is a risk. Your primary vendor going bankrupt today is an issue.

The platform loves to make you track both, often in separate tables with similar fields. Get ready for endless meetings debating when a risk officially graduates to an issue.


CRM is a necessary evil


   
Quote