Are you about to implement ServiceNow's IRM application? This episode exposes common pitfalls organizations face when rushing into tool deployment without fully understanding their business processes. Learn from real-world stories why IRM success begins with business insights.

In this episode:

Why IRM begins before the tool is even purchased
The dangers of skipping business process analysis
Common implementation pitfalls based on field stories
How organizational complexity impacts IRM projects
Strategies for aligning IRM with actual business operations
The importance of stakeholder engagement and clear ownership
Risks of unnecessary customizations and performance issues
Key questions to ask before and during IRM implementation

Timestamps:
00:00 - Why organizations are unprepared for ServiceNow IRM success
00:50 - How to determine the ideal order for IRM product implementation
02:05 - The importance of understanding your business operations first
03:24 - Challenges with entity scoping without clear business context
04:11 - The risks of jumping into IRM without aligning to business needs
06:39 - Handling immature processes and manual workflows in IRM projects
08:43 - How language barriers and unexperienced teams impact implementation
11:21 - Why organizations fail despite large investments in IRM tools
12:37 - The pitfalls of customizing out-of-the-box modules
15:43 - Performance issues and cross-functional silos in IRM deployments
18:22 - Upgrade difficulties and the risk of over-customization
20:47 - The importance of clear ownership and stakeholder involvement
24:36 - Final takeaway: IRM starts with business, not technology

Have you been through an IRM implementation that went sideways — or one that went exactly right because your team did the business work first? Jada wants to hear from you. This podcast is built on real stories from real practitioners.

Send your story: Connect with Jada on LinkedIn (https://www.linkedin.com/in/jadaporter/) or send to podcast@letstalkirm.com

Follow Let's Talk IRM for new episodes and IRM practitioner content.

In this episode, Jada Porter explains Integrated Risk Management (IRM), clarifying its meaning and importance in organizations. She discusses common misconceptions about IRM, emphasizing that it is not merely a tool or a checkbox exercise, but a comprehensive process that integrates various aspects of risk management. Jada outlines a four-part framework for successful IRM implementation, focusing on data, process, framework, and reporting integration, and encourages organizations to adopt a holistic approach to risk management.

Takeaways

The purpose of this episode is to explain what IRM is.
IRM stands for Integrated Risk Management.
IRM is not just a tool or a checkbox exercise.
Understanding IRM is crucial for successful implementation.
There are multiple meanings for IRM in different contexts.
A lack of understanding of IRM can lead to complications.
IRM involves integrating risk and compliance processes.
Successful IRM requires strong business and leadership input.
Four types of integration in IRM are essential for success.
Meeting users where they are is key to effective IRM.

In this episode, Jada introduces her podcast focused on integrated risk management, sharing her passion for the subject and her desire to bridge the gap between business needs and technology solutions. With over a decade of experience in IT and security, Jada aims to create a platform for real discussions about the human side of risk management, moving beyond technical how-tos to address the challenges practitioners face in aligning business goals with technology. She emphasizes the importance of understanding stakeholder dynamics and the mindset required for successful implementation of integrated risk management strategies.

Jada outlines her vision for the podcast, targeting GRC practitioners, technology teams, and anyone involved in risk management who may feel disconnected from the tools they are using. She expresses her hope that the conversations will resonate with listeners, providing insights and support for navigating the complexities of integrated risk management. By fostering an open dialogue, Jada aims to create a community where practitioners can share their experiences and learn from one another, ultimately enhancing their understanding and execution of risk management practices.