IRM Planning: Before The Build

IRM Planning: Before The Build

This episode explores the critical aspects of planning and stakeholder alignment in ServiceNow IRM implementations. Featuring expert insights, it emphasizes the importance of strategic preparation, ownership, and organizational discipline for successful risk management. Key Topics * Implementation planning and its impact on IRM success * Stakeholder and ownership alignment in IRM projects * The role of CMDB and internal controls in risk management Chapters 00:00 Introduction to IRM Planning and Goals 02:06 Why Planning Often Traces Back to Resources and Stakeholders 04:07 Technical vs. Project Management Planning in IRM 06:09 Aligning Business Processes with IRM Capabilities 07:56 The Importance of Clear Ownership and Stakeholder Communication 09:46 Building a Realistic and Phased IRM Implementation Roadmap 12:08 Assessing and Improving Your CMDB for IRM Success 14:05 Evolving Documentation and Regulatory Changes 16:04 Minimum Viable CMDB Thresholds for IRM 17:50 Trust and Gaps in the CMDB and Their Impact 19:57 Granularity in IRM: Going Beyond the Basics 21:50 Stakeholder Ownership and User Adoption Challenges 24:01 Effective Communication and Ownership in IRM Projects 25:58 ServiceNow vs. Practitioner Responsibilities in Readiness 27:58 The Role of Readiness Checklists and Organizational Strategy 29:51 Key Takeaways for Successful IRM Implementation 32:13 Final Tips for Planning and Execution in IRM 34:00 Using Now Create as a Starting Point 34:58 Next Steps: Managing Scope and Roadblocks 36:11 Closing Remarks and Resources for IRM Enthusiasts

To Transform Or To Transfer

Are you struggling with user adoption and process alignment during your IRM implementations? In this episode of Let's Talk IRM, certified IRM practitioners Elay and Jada dive into the core differences between transforming existing processes and merely transferring them into new tools, particularly within ServiceNow IRM. Key topics covered: * The common pitfalls of "lift and shift" approaches and why a full reimplementation is often necessary. * Indicators early in an engagement that reveal whether a team is ready to transform or just transfer their old processes. * How organizational support from leadership influences the success of IRM projects. * The importance of configuring the platform correctly to meet future needs and avoid rework. * Strategies for balancing user experience with the integrity of data models during phased implementations. * Tips for managing client expectations and avoiding the trap of recreating inefficient workflows. * Recognizing when to rebuild versus work around existing configurations to ensure long-term value. * The role of leadership buy-in in preventing the "dead on arrival" deployment scenario. * Practical advice on engaging clients who are fixated on replicating their spreadsheet workflows. Timestamps: 00:00 - Introduction: Why many IRM projects fail despite investing heavily  00:28 - The critical question: Are we transforming or just transferring processes?  1:26 - Elay's expertise: Insights from numerous IRM implementations  2:25 - Why spreadsheets often outperform complex GRC platforms  3:20 - Signs early in a project that indicate a need for transformation  4:03 - How to identify a team's readiness to change during initial sessions  5:26 - Understanding the "crawl walk run" approach for IRM adoption  6:41 - Managing client expectations when demo-proof features don’t match real needs  7:37 - The impact of client resistance and how to handle it effectively  9:36 - When to automate and transform versus work with existing dashboards  10:41 - Navigating client resistance when they want to recreate their old workflows  11:36 - The importance of configuring at the right level: front-end vs. data model  13:58 - Accepting that sometimes you must lose battles for long-term wins  15:02 - When re-implementation is necessary: assessing the extent of the "lift and shift"  16:30 - Rebuilding vs. working around: making strategic decisions based on pain points  18:39 - Balancing user adoption with maintaining data integrity over the long term  20:11 - Protecting the process flow and data model during phased rollouts  22:08 - The importance of leadership support in successful IRM adoption  23:09 - Is lift and shift ever justified? Elay’s perspective on organizational readiness  24:26 - The role of executive buy-in in preventing half-baked IRM projects  25:31 - Practical considerations: matching implementation approach to organizational culture  26:44 - Closing remarks: The value of ongoing conversations around IRM best practices

True or False? IRM Begins Before Tool Implementation

The Critical Role of Business Understanding Before ServiceNow IRM Implementation Are you about to implement ServiceNow's IRM application? This episode exposes common pitfalls organizations face when rushing into tool deployment without fully understanding their business processes. Learn from real-world stories why IRM success begins with business insights. In this episode: Why IRM begins before the tool is even purchased The dangers of skipping business process analysis Common implementation pitfalls based on field stories How organizational complexity impacts IRM projects Strategies for aligning IRM with actual business operations The importance of stakeholder engagement and clear ownership Risks of unnecessary customizations and performance issues Key questions to ask before and during IRM implementation Timestamps: 00:00 - Why organizations are unprepared for ServiceNow IRM success 00:50 - How to determine the ideal order for IRM product implementation 02:05 - The importance of understanding your business operations first 03:24 - Challenges with entity scoping without clear business context 04:11 - The risks of jumping into IRM without aligning to business needs 06:39 - Handling immature processes and manual workflows in IRM projects 08:43 - How language barriers and unexperienced teams impact implementation 11:21 - Why organizations fail despite large investments in IRM tools 12:37 - The pitfalls of customizing out-of-the-box modules 15:43 - Performance issues and cross-functional silos in IRM deployments 18:22 - Upgrade difficulties and the risk of over-customization 20:47 - The importance of clear ownership and stakeholder involvement 24:36 - Final takeaway: IRM starts with business, not technology Have you been through an IRM implementation that went sideways — or one that went exactly right because your team did the business work first? Jada wants to hear from you. This podcast is built on real stories from real practitioners. Send your story: Connect with Jada on LinkedIn (https://www.linkedin.com/in/jadaporter/) or send to podcast@letstalkirm.com Follow Let's Talk IRM for new episodes and IRM practitioner content.

What is IRM?

Summary In this episode, Jada Porter explains Integrated Risk Management (IRM), clarifying its meaning and importance in organizations. She discusses common misconceptions about IRM, emphasizing that it is not merely a tool or a checkbox exercise, but a comprehensive process that integrates various aspects of risk management. Jada outlines a four-part framework for successful IRM implementation, focusing on data, process, framework, and reporting integration, and encourages organizations to adopt a holistic approach to risk management. Takeaways The purpose of this episode is to explain what IRM is. IRM stands for Integrated Risk Management. IRM is not just a tool or a checkbox exercise. Understanding IRM is crucial for successful implementation. There are multiple meanings for IRM in different contexts. A lack of understanding of IRM can lead to complications. IRM involves integrating risk and compliance processes. Successful IRM requires strong business and leadership input. Four types of integration in IRM are essential for success. Meeting users where they are is key to effective IRM.

Why 'Let's Talk IRM' is Needed

Summary In this episode, Jada introduces her podcast focused on integrated risk management, sharing her passion for the subject and her desire to bridge the gap between business needs and technology solutions. With over a decade of experience in IT and security, Jada aims to create a platform for real discussions about the human side of risk management, moving beyond technical how-tos to address the challenges practitioners face in aligning business goals with technology. She emphasizes the importance of understanding stakeholder dynamics and the mindset required for successful implementation of integrated risk management strategies. Jada outlines her vision for the podcast, targeting GRC practitioners, technology teams, and anyone involved in risk management who may feel disconnected from the tools they are using. She expresses her hope that the conversations will resonate with listeners, providing insights and support for navigating the complexities of integrated risk management. By fostering an open dialogue, Jada aims to create a community where practitioners can share their experiences and learn from one another, ultimately enhancing their understanding and execution of risk management practices.