AltaGas keeps it simple with out-of-the-box GRC


alta gas lines

Few industries are more heavily regulated than gas and utilities. From environmental laws to worker-safety standards, the compliance burden is intense. For Calgary-based AltaGas, governance, risk and compliance (GRC) management grew even more complex with its 2017 acquisition of WGL Energy.

At a Knowledge 2019 breakout session, Renato Cunha, AltaGas’s cybersecurity lead, described the GRC challenges created by the merger. AltaGas and WGL had different processes to manage, cybersecurity, risk and compliance, which had to be aligned. One of the requirements to complete the integration of their system’s was to have both companies with an equivalent level of maturity of their security processes.  

The merger compounded already serious problems in AltaGas’s existing cybersecurity and GRC processes. They scored low on the maturity model for effective risk management, and they provided little visibility into the risks that the security team had to manage. The approval process was inefficient and manual, and it required multiple sign offs. Worst of all, the data was dispersed across multiple platforms, making issue tracking and risk management “a spreadsheet nightmare,” Cunha said.

AltaGas turned to ServiceNow’s GRC solution on the Now Platform. While colleagues pushed for alternate vendors whose products they had used before, such as Archer , Cunha pitched ServiceNow for its simplicity, robust platform and faster deployment. The GRC module was ready to use without any customization, supporting the AltaGas’ goals.

“We implemented Risk Management 100% out of the box, and we did it in 45 days.” Cunha said. “We kept it simple from Day 1.”

Using ServiceNow’s Risk Management GRC module, AltaGas created a centralized register to track more than 180 risk factors from 15 data sources and also automated the risk acceptance process, which had been a manual and very inefficient process. With ServiceNow, everything is on one page. Because the module did not require customization, the company was able to boost its maturity score almost immediately. 

Using ServiceNow allowed AltaGas to increase the maturity of the cybersecurity and GRC processes and enable a better alignment with WGL’s security processes. 

The seven-step implementation took a mere six weeks, from installation and configuration through user training and QA. Cunha stressed that the rapid deployment was made possible because his team started with a solid understanding of the model’s out-of-the-box capabilities.

altagas GRC

Once a company recognizes that its GRC processes are inadequate, Cunha said, an out-of-the-box solution like ServiceNow GRC is an effective way to make quick improvements.  We have now begun implementing Policy and Compliance with the same approach to support the final assessment that will allow us to complete the system integration between the two companies.

“Out of the box can address most of your needs and give you rapid maturity gains,’ Cunha said. “And the flexibility is there if you need it, when you need it.”

Learn more about ServiceNow GRC

Topics

  • Order management: A man with headphones sits at a computer in an office.
    Telecommunications
    Streamlining order management in telecommunications
    Deutsche Telekom aims to be the best B2B telecom company in the world. For that to happen, order management must be at heart of its business operations.
  • Our journey to net zero by 2030
    Global Impact
    ServiceNow commits to net-zero greenhouse gas emissions by 2030
    ServiceNow has committed to achieve net-zero greenhouse gas (GHG) emissions by 2030—two decades earlier than anticipated—across our entire value chain.
  • Improving service management: Three employees converse while looking at a tablet.
    Customer Experience
    How improving service management can transform the customer experience
    Good service management and customer experience go hand in hand and can be the difference between customer success and customer complaints.

Trends & Research

  • Gartner Magic Quadrant for IT Risk Management
    Cybersecurity and risk
    ServiceNow: A Leader in Gartner® Magic Quadrant™ for IT Risk Management for Second Year
  • Gartner Magic Quadrant IT service management tool tile.
    IT Management
    ServiceNow is a Leader in the 2021 Gartner® Magic Quadrant™ for ITSM—8 years in a row
  • Gartner Magic Quadrant IT vendor risk management tool tile.
    IT Management
    ServiceNow named a Leader in the Gartner Magic Quadrant for IT Vendor Risk Management Tools

Year