Set up a target for use with NIST RMF

task australia Updated Sep 10, 2026 1 min read set-up-target-nist-rmf.md

Set up a target and populate the basic information.

Before you begin

Note: Starting with version 10.1.0, the NIST RMF Use Case Accelerator will be supported only for customers who currently use the product. New and existing customers should consider using the GRC: Continuous Authorization Monitoring application. For details, Continuous Authorization and Monitoring.

Role required: sn_irm_nist_rmf.risk_executive or sn_irm_nist_rmf.security_officer

Procedure

Navigate to All > NIST RMF > Categorize > Impact Analysis.
Search for the target using the Name or Profile fields.
Open the target record.
In Framework, select NIST RMF, and click Update.
Open the target record again and update the following fields:

Note: Review NIST RMF supporting concepts, for more detailed information about these fields.
- RMF State: Identify the current NIST RMF state for the target.
- Scoping Considerations: Provide guidance on the selection of security controls for implementation.
Verify that the NIST RMF related lists are visible:
- Baseline Policy Statements
- Baseline Controls
- Risks
- Approvals

Parent Topic:Categorize targets

50 lines · 2.3 KB Wrap lines

---
title: Set up a target for use with NIST RMF
description: Set up a target and populate the basic information.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-common-functions/set-up-target-nist-rmf.html
release: australia
product: GRC Common Functions
classification: grc-common-functions
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Categorize targets, Process overview, NIST RMF Use Case Accelerator, GRC use case accelerators, Common GRC features, Governance, Risk, and Compliance]
---

# Set up a target for use with NIST RMF

Set up a target and populate the basic information.

## Before you begin

**Note:** Starting with version 10.1.0, the NIST RMF Use Case Accelerator will be supported only for customers who currently use the product. New and existing customers should consider using the GRC: Continuous Authorization Monitoring application. For details, [Continuous Authorization and Monitoring](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/continuous-risk-monitoring/grc-cam-landing-page.md).

Role required: sn\_irm\_nist\_rmf.risk\_executive or sn\_irm\_nist\_rmf.security\_officer

## Procedure

1. Navigate to **All** &gt; **NIST RMF** &gt; **Categorize** &gt; **Impact Analysis**.

2. Search for the target using the **Name** or **Profile** fields.

3. Open the target record.

4. In **Framework**, select **NIST RMF**, and click **Update**.

5. Open the target record again and update the following fields:

**Note:** Review [NIST RMF supporting concepts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/grc-nist-rmf-key-concepts.md), for more detailed information about these fields.

- **RMF State**: Identify the current NIST RMF state for the target.
- **Scoping Considerations**: Provide guidance on the selection of security controls for implementation.
6. Verify that the NIST RMF related lists are visible:

- Baseline Policy Statements
- Baseline Controls
- Risks
- Approvals

**Parent Topic:**[Categorize targets](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/rmf-categorize.md)