AltaGas keeps it simple with out-of-the-box GRC


alta gas lines

Few industries are more heavily regulated than gas and utilities. From environmental laws to worker-safety standards, the compliance burden is intense. For Calgary-based AltaGas, governance, risk and compliance (GRC) management grew even more complex with its 2017 acquisition of WGL Energy.

At a Knowledge 2019 breakout session, Renato Cunha, AltaGas’s cybersecurity lead, described the GRC challenges created by the merger. AltaGas and WGL had different processes to manage, cybersecurity, risk and compliance, which had to be aligned. One of the requirements to complete the integration of their system’s was to have both companies with an equivalent level of maturity of their security processes.  

The merger compounded already serious problems in AltaGas’s existing cybersecurity and GRC processes. They scored low on the maturity model for effective risk management, and they provided little visibility into the risks that the security team had to manage. The approval process was inefficient and manual, and it required multiple sign offs. Worst of all, the data was dispersed across multiple platforms, making issue tracking and risk management “a spreadsheet nightmare,” Cunha said.

AltaGas turned to ServiceNow’s GRC solution on the Now Platform. While colleagues pushed for alternate vendors whose products they had used before, such as Archer , Cunha pitched ServiceNow for its simplicity, robust platform and faster deployment. The GRC module was ready to use without any customization, supporting the AltaGas’ goals.

“We implemented Risk Management 100% out of the box, and we did it in 45 days.” Cunha said. “We kept it simple from Day 1.”

Using ServiceNow’s Risk Management GRC module, AltaGas created a centralized register to track more than 180 risk factors from 15 data sources and also automated the risk acceptance process, which had been a manual and very inefficient process. With ServiceNow, everything is on one page. Because the module did not require customization, the company was able to boost its maturity score almost immediately. 

Using ServiceNow allowed AltaGas to increase the maturity of the cybersecurity and GRC processes and enable a better alignment with WGL’s security processes. 

The seven-step implementation took a mere six weeks, from installation and configuration through user training and QA. Cunha stressed that the rapid deployment was made possible because his team started with a solid understanding of the model’s out-of-the-box capabilities.

altagas GRC

Once a company recognizes that its GRC processes are inadequate, Cunha said, an out-of-the-box solution like ServiceNow GRC is an effective way to make quick improvements.  We have now begun implementing Policy and Compliance with the same approach to support the final assessment that will allow us to complete the system integration between the two companies.

“Out of the box can address most of your needs and give you rapid maturity gains,’ Cunha said. “And the flexibility is there if you need it, when you need it.”

Learn more about ServiceNow GRC

Topics

  • Our journey to net zero by 2030
    Cybersecurity and risk
    ServiceNow commits to net-zero greenhouse gas emissions by 2030
    ServiceNow has committed to achieve net-zero greenhouse gas (GHG) emissions by 2030—two decades earlier than anticipated—across our entire value chain.
  • Zero-trust architecture: A military woman types on a keyboard while looking at three monitors.
    Government
    5 ways federal agencies can augment a zero-trust architecture
    Federal government agencies have been mandated to advance toward a zero-trust architecture. Learn five ways they can augment one using the Now Platform.
  • Now at Work: Helping companies embrace digital transformation
    Events
    Now at Work: Helping companies embrace digital transformation
    The Now at Work 2021 Digital Experience provided a forum for companies to demonstrate how they’re using the Now Platform to bring about digital transformation.

Trends & Research

  • ServiceNow is a Leader in the Forrester Wave: Digital Process Automation, Q4 2021.
    AI and Automation
    ServiceNow recognized as a Leader in Digital Process Automation
  • ServiceNow is a Leader in the Forrester Wave: Enterprise Service Management, Q4 2021.
    Employee Experience
    ServiceNow named a Leader in Enterprise Service Management
  • Supporting hybrid work: A woman looks at a phone while writing in a notebook.
    Employee Experience
    ServiceNow a Strategic Leader in the 2021 Fosway 9-Grid™ for Cloud HR

Year