Four GRC Community contributors and experts share their tips and experience to help you plan and structure your Entities, Entity Types, Entity Classes.
This is a must see whether you are about to get started with your Entity Scoping exercise or reviewing your existing structure.
Speakers:
Eric Le Martret
Rafaël Cardoso
Philip Swann
Scott Ferguson
Video contents:
00:01 Introduction
00:31 Eric Le Martret.
00:56 Tip 1: Good quality data will help.
02:17 Tip 2: Focus on the items that matter.
03:34 Tip 3: Get the right level to make it all manageable (make sure Entities are items that are owned by someone).
05:54 Tip 4: Crawl, walk, run.
06:20 Tip 5: Examples of Entity Types: Companies, Business Units, Departments, Business Services, Applications, Servers, Vendors, Business Processes...
06:59 Philip Swann.
07:30 Tip 6: Leverage the GRC Choice Table.
07:57 Demo.
10:33 Tip 7: Setup your Entity Classes early. Entity Class Rules, Advanced Risk Assessment, Risk Hierarchy, GRC Workbench, Reporting.
12:08 Tip 9: Differences between Entity Type and Entity Class. An Entity can be in several Types, but only in one Class.
12:53 Rafaël Cardoso.
13:00 Tip 9: Set Entity Class Rules, Classes and Types.
13:26 Tip 10: Set your long term roadmap, what is your goal.
14:17 Tip 11: Start with ServiceNow's out of the box samples and grow from there.
14:50 Scott Ferguson.
15:10 Tip 12: Simply define the places, people and things that you want to manage: Entities.
18:54 How to define your Entity Types (slides).
21:27 Tip 13: Entity Types are categories of places, people and things that you want to manage.
21:55 Tip 14: The right Control will get automatically assigned to the right Entity.
22:16 So, how many Entity Types should their be in the end?
24:21 Entity Classes: essential or optional? (demo)
24:33 Tip 15: Classes will become increasingly important. An Entity can be in several Types, but only in one Class.
25:05 Tip 16: Entity Classes are used to assess across Entity Types.
26:19 Eric Le Martret.
26:35 Tip 17: Classes are used for aggregation and roll-ups.
26:40 Scott Ferguson. The Workbench. Risk roll-ups (demo).
28:00 Conclusion.
For any question, please visit the GRC forum: community.serv...