What is the primary purpose of Entity Classes in GRC?

What is the primary purpose of Entity Classes in GRC?

• A. To show relationships between tables or objects you are tracking that doesn't otherwise exist anywhere in ServiceNow
• B. To map to Citations
• C. To store risk scores
• D. To define user roles

Answer: (A)

The main idea is that Entity Classes define how different risk-related objects relate to each other in GRC, especially when those relationships aren’t already established in ServiceNow. They provide a structured way to represent categories of entities (like applications, vendors, business services) and the connections between them, so you can model and visualize how risks across disparate objects interact. This lets risk analysis span multiple entities, supports cross-entity reporting, and helps with governance by keeping a clear taxonomy of what is being risk-managed. For example, you can link an application to its vendor and to a business service to see how vendor risk might impact the application and its users. This concept isn’t about mapping to Citations, storing risk scores, or defining user roles, which are handled by other parts of the platform.

The main idea is that Entity Classes define how different risk-related objects relate to each other in GRC, especially when those relationships aren’t already established in ServiceNow. They provide a structured way to represent categories of entities (like applications, vendors, business services) and the connections between them, so you can model and visualize how risks across disparate objects interact. This lets risk analysis span multiple entities, supports cross-entity reporting, and helps with governance by keeping a clear taxonomy of what is being risk-managed. For example, you can link an application to its vendor and to a business service to see how vendor risk might impact the application and its users. This concept isn’t about mapping to Citations, storing risk scores, or defining user roles, which are handled by other parts of the platform.