A city CIO hears IRM and GRC used interchangeably in a vendor demo and asks which product the city is actually buying. How should the implementer clarify the naming?
Select an answer to reveal the explanation.
Short Explanation
Same family, newer badge. IRM is how ServiceNow brands the integrated risk-and-compliance suite today, while blueprints and older docs still say GRC—not two different products fighting for the wallet.
Full Explanation
On the CIS-RC path, Integrated Risk Management (IRM) and Governance, Risk, and Compliance (GRC) refer to the same product family evolution, not two unrelated offerings. Exam and documentation language often still says GRC even as workspaces say IRM. That naming drift is not a reason to confuse IRM with SIR, SAM, or other CIS tracks.