ServiceNow® Partner & first UK VORTIQ-X Implementation PartnerLearn more →
✦ GRC Insights

Insights & Resources

Expert perspectives on GRC, regulatory compliance, ServiceNow implementation, and AI governance from Karvin's specialists.

How to Build a TPRM Programme from Scratch on ServiceNow
GRC

How to Build a TPRM Programme from Scratch on ServiceNow

A practical guide to standing up third-party risk management on ServiceNow — from vendor inventory to continuous monitoring.

Apr 2026 · 8 min readRead →
DORA in 2025: What Financial Firms Must Do Before June
Regulation

DORA in 2025: What Financial Firms Must Do Before June

The key DORA requirements that are still catching firms out — and what a ServiceNow-based implementation looks like in practice.

Mar 2026 · 10 min readRead →
FCA PS21/3 Compliance: Why Most Firms Still Aren't Ready
BCM

FCA PS21/3 Compliance: Why Most Firms Still Aren't Ready

Common gaps in operational resilience programmes — and how to address them with live continuity plans on ServiceNow.

Mar 2026 · 12 min readRead →
EU AI Act: What a ServiceNow AI Control Tower Looks Like
AI Governance

EU AI Act: What a ServiceNow AI Control Tower Looks Like

How to build model inventory, risk classification, and governance workflows that satisfy EU AI Act requirements.

Feb 2026 · 9 min readRead →
Mapping Important Business Services: A Practical Approach
Resilience

Mapping Important Business Services: A Practical Approach

Step-by-step guidance on identifying, mapping, and setting impact tolerances for important business services under FCA rules.

Feb 2026 · 7 min readRead →
GRC vs IRM on ServiceNow: Which Module Is Right for You?
ServiceNow

GRC vs IRM on ServiceNow: Which Module Is Right for You?

Cutting through the confusion around ServiceNow's GRC and IRM product lines — and what each is best suited for.

Jan 2026 · 6 min readRead →
How to Move an AI Agent Safely Into Production
AI Governance

How to Move an AI Agent Safely Into Production

A practical, step-by-step guide to productionising an AI agent with governance and runtime authority controls in place before it acts.

Aug 2026 · 9 min readRead →
How to Define an AI Agent's Authority Boundaries
AI Governance

How to Define an AI Agent's Authority Boundaries

Authority boundaries are the difference between an AI agent that is governed and one that is not. Here is how to define them.

Aug 2026 · 7 min readRead →
What Information Should Be Gathered Before Authorising an AI Agent?
AI Governance

What Information Should Be Gathered Before Authorising an AI Agent?

Before an AI agent is given operational authority, 19 dimensions of readiness must be assessed. Here is the full list.

Aug 2026 · 6 min readRead →
How to Implement Human Approval for AI Actions
AI Governance

How to Implement Human Approval for AI Actions

Human-in-the-loop governance means certain AI actions require human approval before they execute. Here is how to implement it.

Aug 2026 · 6 min readRead →
What Happens When an AI Action Is Refused?
AI Governance

What Happens When an AI Action Is Refused?

When runtime authority denies an AI action, the outcome is not just a blocked request. It is governed evidence.

Aug 2026 · 5 min readRead →
How to Revoke AI Authority
AI Governance

How to Revoke AI Authority

An agent whose authority cannot be revoked is not under control. Here is how to design revocation into your AI governance programme.

Aug 2026 · 5 min readRead →
How to Evidence AI Actions for Regulators and Auditors
AI Governance

How to Evidence AI Actions for Regulators and Auditors

Every authority decision and resulting action must be recorded. Here is what evidence AI governance must produce.

Aug 2026 · 6 min readRead →
AI Governance Knowledge Centre

Explore AI governance implementation

Practical guidance on implementing AI governance, AI Action Authority and runtime controls with ServiceNow and VORTIQ-X.