This session showcases Gjensidige's GRC journey in ServiceNow — from establishing a control library to connecting it with a risk library, and structuring assessment and remediation activities across both.

We'll walk through:

1. Building the control library — how we structured our controls based on our ISMS and the standards we align to (DORA, ISO 27001, SOGP)
2. Control attestation — how we verify control effectiveness through control attestations and control indicators
3. Connecting controls to risk — how we built a risk library in ServiceNow and linked it to the control library
4. Closing the loop — how we manage follow-up activities (issues) across both controls and risks and monitor everything via dashboards