Services

Navigator on top.
ServiceNow IRM underneath.

And IBM OpenPages, and SAS. We design the GRC programme, build it on the platform you run, and stay to support it. Navigator sits on top and keeps it current with the regulators.

Talk to usAll services
01 · Navigator services

Navigator works on your material, not just the regulators'.

We load what you already have, so the first answer Navigator gives is about your business. Delivered as a scoped onboarding (data load, mapping, first register) and then kept current as an ongoing service. It runs alongside ServiceNow IRM, OpenPages or SAS: it keeps those systems fed, it does not replace them.

What we load

  • Contracts
    Client, vendor and intercompany agreements, so the obligations you have signed up to sit next to the ones regulators impose.
  • Controls
    Your existing control library, mapped to the obligations it covers and the gaps it does not.
  • Policies and procedures
    Current documents, versioned, so every answer can say which policy already addresses a change and which needs an edit.
  • Frameworks you report against
    The specific regulators, standards and internal taxonomies that apply to you.

What comes out

  • Obligations register
    Every applicable requirement, cited to section and paragraph, kept current as regulators change.
  • Applicability and gap view
    Which changes touch you, which controls and policies cover them, and where nothing does.
  • Approved plan
    The drafted change plan with owners and evidence, ready for sign-off.
  • Signed receipts
    Every answer carries its citation and a receipt you can hand to an auditor.
Start with your dataExplore Navigator
02 · ServiceNow IRM

Integrated Risk Management,
built to pass an exam.

SureStep is a ServiceNow Build Partner. We implement ServiceNow IRM for regulated firms. We configure it around the obligations you actually carry, connect it to the GRC data you already hold, and support it once it is live. The aim is a system your examiners can follow from regulation to control to evidence.

Policy & Compliance

Policies, control objectives and authoritative sources, mapped once and tested on a schedule.

Risk

Risk registers, assessments and indicators your second line can stand behind.

Audit

Audit plans, engagements, workpapers and findings in the same record as the controls they test.

Vendor / Third-Party Risk

Tiering, assessments and issues for the suppliers your regulators ask about.

Business Continuity

Business impact analysis, continuity plans and exercises tied to the services they protect.

Implementation & configuration

We scope, configure and stand up the IRM applications you need, in the order your programme needs them.

Integration with your GRC data

Controls, risks, issues and entity data already live somewhere. We connect IRM to it rather than asking you to start over.

Migration from legacy GRC tools

We move content, history and workflows off older GRC platforms and reconcile what arrives against what left.

Ongoing managed support

After go-live we keep the platform running: upgrades, fixes, small changes and a team that knows your configuration.

Start a ServiceNow IRM conversation
03 · IBM OPENPAGES

IBM OpenPages

SureStep is an IBM partner. We implement OpenPages, take you through upgrades, host it, and run it for you under managed support.

  • Implementation
  • Upgrades
  • Hosting
  • Managed support
04 · SAS

SAS

SureStep is a SAS partner. We implement and support SAS for financial crime, model risk and balance-sheet risk.

  • Anti-Money Laundering (AML)
  • SAS Viya
  • Model Risk Management
  • Asset & Liability Management (ALM)
05 · CONSULTING

Consulting

Before the platform, the programme. We help you design a GRC programme that fits your regulators and get ready for the next exam.

  • GRC programme design
  • Regulatory readiness
  • GRC Forge assessment
About the GRC Forge assessment →
FAQ

Common questions

Who implements ServiceNow IRM?

SureStep, a ServiceNow Build Partner, implements ServiceNow IRM for regulated firms. We configure it around the obligations you carry, connect it to the GRC data you already hold, migrate content from legacy GRC tools, and support it once it is live.

Should we choose ServiceNow IRM or IBM OpenPages?

SureStep implements and supports both. The right choice depends on your existing technology stack and licensing. Navigator works with either: it sits on top and keeps the platform current with the regulators.

How long does a Navigator implementation take?

A standard Navigator implementation takes about two weeks. More or custom datasets extend that.

Does SureStep host IBM OpenPages?

Yes. SureStep implements, upgrades, hosts and supports IBM OpenPages. Hosting is on AWS, and we are certified on Azure and GCP as well.

What data can be loaded into Navigator?

Contracts, controls, policies and procedures, and the frameworks you report against. Navigator turns them into an obligations register, an applicability and gap view, an approved plan, and signed receipts.

What is the GRC Forge assessment?

GRC Forge is a two-week, consulting-led discovery that produces a prioritized GRC roadmap. It is an assessment, not a product.

We use cookies for site analytics (Google Analytics, LinkedIn Insight Tag) to understand how visitors use this site. No data is used until you accept.