ServiceNow GRC Risk Assessment Stories

I need to turn a high-level approach for Risk Assessment in ServiceNow GRC/IRM into a clear, sprint-ready backlog. The focus is strictly on the Risk Management application—no Policy & Compliance or Audit work—covering how we identify, score, and monitor Operational and Compliance risks. You will take my current process diagrams and data model and translate them into user stories that fit the native Risk Assessment framework. Each story must include acceptance criteria and reference the exact tables, fields, and OOTB features you intend to use, flagging any required configuration (UI Policies, Business Rules, ACLs, PA indicators) so the dev team has zero ambiguity. Deliverables • A structured backlog (Excel or CSV) ready for import into the Agile module • A companion document (Word or Confluence) that explains story context, data mappings, and any configuration notes We will review work in short workshops, so familiarity with recent ServiceNow releases (Rome or newer) and solid experience writing GRC stories are essential.

Project ID: 40183241