Controls and risks must attach to something durable in the IRM architecture. What is the architectural join point between organizational objects and GRC content?
Select an answer to reveal the explanation.
Short Explanation
Entities are the coat hooks on the wall. Controls and risks hang on the hook—not on a random wiring diagram or a spreadsheet in someone's drawer. No hook, no hanging place.
Full Explanation
In ServiceNow IRM, the entity (historically profile) is the join point linking organizational or technical objects to GRC content such as controls and risks. Item generation and assessments operate against entities, not against informal spreadsheets or Discovery MID configuration. CMDB relationships inform entity sources but do not replace the entity layer. Architecture clarity here prevents orphaned content.