Review Article | Volume 2 Issue 5 - 2025
Automation-Enabled Compliance and Governance: A Technical Analysis of ServiceNow, Splunk, and Robotic Process Automation
Jada-Ann Riggins and Miranda Stanfield*
Capitol Technology University, Cybersecurity Leadership, USA
*Corresponding Author: Miranda Stanfield, Capitol Technology University, Cybersecurity Leadership, USA.
Abstract
This study presents a technical evaluation of an integrated automation framework combining ServiceNow, Splunk, and Robotic Process Automation (RPA) to support real-time compliance tracking, incident response, and governance in enterprise IT environments. As regulatory complexity and operational demands increase, automation is applied to reduce manual workload, accelerate incident resolution, and enhance audit traceability.
The framework enables a bidirectional integration: alerts detected in Splunk initiate incident tickets in ServiceNow, while ticket status updates and resolution data from ServiceNow are transmitted back to Splunk for continuous compliance monitoring. RPA bots, developed using UiPath and Automation Anywhere, execute rule-based tasks such as ticket routing, evidence collection, and audit documentation.
Methodologically, the study incorporates architectural analysis, API-level workflow mapping, and scenario-based testing. Performance metrics—including resolution time, documentation completeness, and system responsiveness—were compared across manual and automated workflows. Results indicate measurable improvements in operational efficiency and consistency in compliance reporting.
The framework addresses challenges in interoperability and orchestration, offering a scalable model for automation-driven IT service management. It contributes to the governance, risk, and compliance (GRC) literature by demonstrating how platform integration and automation can advance regulatory alignment and operational performance. Future research may investigate machine learning for intelligent ticket triage, integration with threat intelligence systems, and alignment with zero-trust security models.
Keywords: ServiceNow; Splunk; Robotic Process Automation (RPA); Compliance Automation; IT Operations; Governance Risk and Compliance (GRC); DevSecOps; Artificial Intelligence (AI); Emerging Technologies; Machine Learning (ML)
References
- Agostinelli S. “Towards Intelligent Robotic Process Automation for BPMers”. Cornell University ArXiV Computer Science, Artificial Intelligence (2020).
- Appelbaum SH., et al. “Back to the Future: Revisiting Kotter’s 1996 Change Model”. Journal of Management Development 31.8 (2012): 764-782.
- Barlybayev A., et al. “Development of a Flexible Information Security Risk Model Using Machine Learning Methods and Ontologies”. MDPI Applied Sciences 14 (2024): 9858.
- Baskaran S. “A Quantitative Assessment of the Impact of Automated Incident Response on Cloud Services Availability”. International Journal of Scientific Research and Management (IJSRM) 11.08 (2023): 929-934.
- Baxter G and Sommerville I. “Socio-Technical Systems: From Design Methods to Systems Engineering”. Interacting with Computers 23.1 (2011): 4-17.
- Cherns A. “The Principles of Sociotechnical Design”. Human Relations 29.8 (1976).
- Choi Y. “A Study of Customer Acceptance of Artificial Intelligence Technology”. International Journal of E-Business Research (IJEBR) 19.1 (2023): 1-14.
- Clegg CW. “Sociotechnical Principles for System Design”. Applied Ergonomics 31.5 (2000): 463-477.
- Concurrency Inc. “Transforming Security Incident Response using ServiceNow, Splunk, and Phantom Integration”. Case Studies (2024). https://concurrency.com/case-study/transforming-security-incident-response-using-servicenow-splunk-and-phantom-integration/
- Dahmani M. “The Impact of the Fourth Industrial Revolution on Business Performance and Sustainability: A Literature Review”. Theoretical Economics Letters 14.01 (2024): 94-106.
- Davis FD. “Perceived Usefulness, Perceived Ease of Use, and User Acceptance of Information Technology”. MIS Quarterly 13.3 (1989): 319-340.
- Davis MC., et al. “Advancing Socio-Technical Systems Thinking: A Call for Bravery”. Applied Ergonomics 45.2 (2014): 171-180.
- Deshpande M. “Leveraging AI and Machine Learning to Revolutionize IT Service Management”. Journal of Artificial Intelligence & Cloud Computing 3.2 (2024): 1-5.
- Dwivedi YK., et al. “Artificial Intelligence (AI): Multidisciplinary Perspectives on Emerging Challenges, Opportunities, and Agenda for Research, Practice and Policy”. International Journal of Information Management 57 (2021): 101994.
- Emery FE and Trist EL. “Socio-Technical Systems”. Management Sciences: Models and Techniques 2 (1960): 83-97.
- Gupta R, Prasad KH and Mohania M. “Automating ITSM Incident Management Process”. 2008 International Conference on Autonomic Computing (2008a): 141-150.
- Gupta R, Prasad KH and Mohania M. “Automating ITSM Incident Management Process”. 2008 International Conference on Autonomic Computing (2008b): 141-150.
- Hristov M., et al. “Integration of Splunk Enterprise SIEM for DDoS Attack Detection in IoT”. 2021 IEEE 20th International Symposium on Network Computing and Applications (NCA) (2021a).
- Hristov M., et al. “Integration of Splunk Enterprise SIEM for DDoS Attack Detection in IoT”. 2021 IEEE 20th International Symposium on Network Computing and Applications (NCA) (2021b).
- Huang F and Vasarhelyi MA. “Applying Robotic Process Automation (RPA) in Auditing: A Framework”. International Journal of Accounting Information Systems35 (2019): 100433.
- Inc., U. (n.d.-a). Deloitte Uses UiPath and ServiceNow to Support Government Agencies with Digital Labor PMO Tools. https://www.uipath.com/resources/automation-case-studies/deloitte-building-for-the-future
- Inc., U. (n.d.-b). Deloitte Uses UiPath and ServiceNow to Support Government Agencies with Digital Labor PMO Tools. UiPath Agentic Automation. https://www.uipath.com/resources/automation-case-studies/deloitte-building-for-the-future
- Inclusion Cloud Digital Engineering. Unlocking Efficiency: A Comprehensive Guide to ServiceNow RPA. Inclusion Cloud (2023). https://inclusioncloud.com/insights/blog/servicenow-rpa-comprehensive-guide/
- Ishtiak H and Tonmoy P. “Leveraging RPA for Enhancing Audit Efficiency: Insights and Challenges in the Audit Landscape”. World Journal of Advanced Engineering Technology and Sciences 13.2 (2024): 671-677.
- Kaiser FK., et al. “Cyber Threat Intelligence Enabled Automated Attack Incident Response”. 2022 3rd International Conference on Next Generation Computing Applications (NextComp) (2022): 1-6.
- Kirchmer M and Franz P. “Value-Driven Robotic Process Automation (RPA)”. Business Modeling and Software Design 9th International Symposium (2019): 31-46.
- Kotter JP. “Leading Change: Why Transformation Efforts Fail”. Harvard Business Review (1995). https://hbr.org/1995/05/leading-change-why-transformation-efforts-fail-2
- Koyya KM. “Scalable Architectural Pattern for Integrating Syslog Servers with Splunk”. International Journal of Recent Technology and Engineering (IJRTE) 10.2 (2021a): 199-202.
- Koyya KM. “Scalable Architectural Pattern for Integrating Syslog Servers with Splunk”. International Journal of Recent Technology and Engineering (IJRTE) 10.2 (2021b): 199-202.
- König M., et al. “Integrating Robotic Process Automation into Business Process Management”. Business Process Management: Blockchain and Robotic Process Automation Forum 393 (2020): 132-146.
- Lewin K and Cartwright D. “Field Theory in Social Science: Selected Theoretical Papers”. JSTOR (1951).
- M?rmureanu M and Opri?a C. “MITRE Tactics Inference from Splunk Queries”. 2023 IEEE 19th International Conference on Intelligent Computer Communication and Processing (ICCP) 45 (2023): 277-283.
- Papazafeiropoulou A and Spanaki K. “Understanding Governance, Risk and Compliance Information Systems (GRC IS): The Experts’ View”. Information Systems Frontiers 18.6 (2015): 1251-1263.
- Patrício L, Varela L and Silveira Z. “Integration of Artificial Intelligence and Robotic Process Automation: Literature Review and Proposal for a Sustainable Model”. Applied Sciences 14.21 (2024): 9648.
- Robinson N. “IT Excellence Starts with Governance”. Journal of Investment Compliance 6.3 (2005): 45-49.
- Salako AO., et al. “Advancing Information Governance in AI-Driven Cloud Ecosystem: Strategies for Enhancing Data Security and Meeting Regulatory Compliance”. Asian Journal of Research in Computer Science 17.12 (2024): 66-88.
- Schuler J and Gehring F. “Implementing robust and low-maintenance robotic process automation (RPA) solutions in large organisations”. SSRN Electronic Journal (2018a).
- Schuler J and Gehring F. “Implementing robust and low-maintenance robotic process automation (RPA) solutions in large organisations”. SSRN Electronic Journal (2018b).
- ServiceNow Inc. “IntegrationHub Documentation for Automation Architectures”. ServiceNow (2024a). https://www.servicenow.com/products/integration-hub.html
- ServiceNow Inc. “Unlocking Efficiency: A Comprehensive Guide to ServiceNow RPA”. Inclusion Cloud Digital Engineering (2024b). https://inclusioncloud.com/insights/blog/servicenow-rpa-comprehensive-guide/
- Shilenge M and Telukdarie A. “4IR Integration of Information Technology Best Practice Framework in Operational Technology”. Journal of Industrial Engineering and Management 14.3 (2021): 457-476.
- Siva Kumar RS, Wicker A and Swann M. “Practical Machine Learning for Cloud Intrusion Detection: Challenges and the Way Forward”. Cornell University ArXiV Computer Science, Cryptography and Security (2017).
- Splunk. (n.d.). Ticket Management. Splunk Common Information Model Add-on Common Information Model Add-on Manual. http://docs.splunk.com/Documentation/CIM/6.0.2/User/TicketManagement
- Syed R., et al. “Robotic Process Automation: Contemporary Themes and Challenges”. Computers in Industry 115 (2020): 103162.
- Talati DV. “Enhancing Data Security and Regulatory Compliance in AI-Driven Cloud Ecosystems: Strategies for Advanced Information Governance”. World Journal of Advanced Research and Reviews 15.3 (2022): 579-594.
- Teece DJ, Pisano G and Shuen A. “Dynamic Capabilities and Strategic Management”. Strategic Management Journal 18.7 (1997): 509-533.
- Trist EL and Bamforth KW. “Some Social and Psychological Consequences of the Longwall Method of Coal-Getting: An Examination of the Psychological Situation and Defences of a Work Group in Relation to the Social Structure and Technological Content of the Work System”. Human Relations 4.1 (1951): 3-38.
- Von Bertalanffy L. “General System Theory: Foundations, Development, Applications”. George Braziller, Inc (2015).
- Yin RK. “Case Study Research and Applications Design and Methods (6th ed.)”. SAGE Publications, Inc (2018).
- Zasada A., et al. “Evaluation of compliance rule languages for modelling regulatory compliance requirements”. Software 2.1 (2023): 71-120.
Citation
Jada-Ann Riggins and Miranda Stanfield. “Automation-Enabled Compliance and Governance: A Technical Analysis of ServiceNow, Splunk, and Robotic Process Automation". Clareus Scientific Science and Engineering 2.5 (2025): 31-40.
Copyright
© 2025 Jada-Ann Riggins and Miranda Stanfield. Licensee Clareus Scientific Publications. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license.