---
title: Working with Governance, Risk and Compliance
slug: neurons-for-itsm/admin-user-help/enu/latest/working-with-governance-risk-and-compliance
createdAt: 2026-07-14T19:16:37.488Z
---

**Role**: GRC Manager, GRC Analyst

**Minimum Version**: 2022.1

Ivanti Neurons for GRC provides a centralized platform for your Governance, Risk, and Compliance (GRC) team to assess risk and manage compliance against numerous authoritative sources.

## Installation and Configuration

This section explains the installation and configuration process for ITSM Enterprise in both cloud and on-premise environments, for new and existing customers.

### New Customers - ITSM Cloud

Neurons for ITSM Enterprise Line of Business (LOB) is included with ITSM deployments for all new ITSM customers. No additional installation or manual upgrades are required. ITSM Enterprise license or Enterprise solution package are required to access ITSM Enterprise Workflows.

Contact Ivanti Operations to activate LOB content if upgrading licensing from standard ITSM to ITSM Enterprise.

### Existing Customers - ITSM Cloud

Existing ITSM cloud customers who wish to activate Neurons for ITSM Enterprise will need to engage [Ivanti Professional Services](https://www.ivanti.com/services/professional-services) (PSO), Certified Ivanti Partner, or [https://www.ivanti.com/en-gb/services/professional-services](https://www.ivanti.com/en-gb/services/professional-services)[Ivanti Operations](docId\:XmVzlfcwDKUPKfFlHopic) in order to enable the additional content.

### New Customers - ITSM On-premise

Neurons for ITSM Enterprise is included with new on-premises ITSM installations and can be activated for customers who have the required ITSM Enterprise licensing.

Contact [Ivanti Professional Services](https://www.ivanti.com/services/professional-services) or a Certified Ivanti Partner to enable the additional content.

### Existing Customers - ITSM On-premise

Existing ITSM on-premises customers who wish to upgrade to Neurons for ITSM Enterprise will need to engage with [Ivanti Professional Services](https://www.ivanti.com/services/professional-services) or a Certified Ivanti Partner.

## Features

Ivanti Neurons for GRC provides the following benefits:

- Analysis and mitigation of risks.
- Streamlined audits, findings, reports, and processes for appropriate actions.
- Rapid containment of any breaches and documentation of steps taken in a secure, need-to-know process.

Refer to [How Ivanti Neurons for GRC Works](docId\:R-KRuZcN0GpIW6noz_4Yd) for more detailed information.

Neurons for GRC is associated with the **GRC Manager** and **GRC Analyst** roles, and the following primary business objects:

- **GRC Audit**
- **GRC Authority Document**
- **GRC Citation**
- **GRC Compliance**
- **GRC Control**
- **GRC Control Indicator**
- **GRC Evidence**
- **GRC Exception**
- **GRC Mitigation Plan**
- **GRC Policy**
- **GRC Supervisory Authority**
- **GRC Risk**
- **GRC Risk Assessment**
- **GRC Risk Mitigation**
- **GRC Threat Analysis**

:::hint{type="info"}
**Important:** Edit and read-only permissions for metadata components including fields, relationships, forms, lists, layouts, triggered actions, saved searches and pick lists are indicated by a green pencil :inlineImage[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/L3j77CQ3FYHgTUhE0R87P_metadatacomponentediticon.png" alt caption size="10" width="16" height="16"} or red dot :inlineImage[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/1vb3GKdt3PsWraWh-Fh3G_metadatacomponentread-onlyicon.png" alt caption size="10" width="16" height="16"} icon in the Configuration console. Components indicating a green pencil icon can be edited; components indicating a red dot icon are read-only. Components with no icon displayed can be edited and deleted. You can duplicate a read-only component and then edit it. Metadata components marked with a yellow pencil :inlineImage[]{src="https://api.archbee.com/api/optimize/parib0MC3hVoUNdfQdnac/tLodGkZr607choJiP9tUf_metadatacomponentsoftlockicon.png" alt caption size="10" width="16" height="16"} icon indicate a soft lock, meaning they have limited edit permissions. For more information on Soft lock, see [Modifying a Business Object with Soft lock](docId\:PrRPNuVje8Dmzc_oaqyMN).
:::

## Neurons for GRC Roles

Two roles are available for Neurons for GRC:

### GRC Manager

**Minimum version**: 2022.1

The **GRC Manager** has full access to all Neurons for GRC features. This includes full read/write access for all GRC business object records.

### GRC Analyst

**Minimum version**: 2023.2

The **GRC Analyst** has restricted access to Neurons for GRC features. For the majority of features, the **GRC Analyst** has read access only, however is able to carry out analytical tasks against GRC business object records.