Case Study: A secure, adaptable ServiceNow capability for Special Operations Command

Client: Department of Defence, Special Operations Command (SOCOMD)

Project: ServiceNow Platform Administration, Development and Modernisation

How Profectus delivers a managed ServiceNow capability for Special Operations Command, administering, developing and integrating a standalone on-premise platform that digitises operational planning, workforce readiness, equipment accountability and reporting, while keeping it secure at PROTECTED and ready to grow into Risk and AI.

The need

SOCOMD runs a standalone on-premise ServiceNow environment at the centre of its digital modernisation program. It underpins how the Command plans operations, manages workforce readiness, accounts for equipment and reports up the chain. With priorities that change constantly, SOCOMD needed a capability that keeps the platform secure and available while it continues to digitise processes, integrate authoritative data and grow into Risk and AI.

Capability delivered

  • Assured platform: role-based access, configuration control, health monitoring, upgrades and patching, and standing data quality remediation keep a standalone environment secure, compliant and available.
  • Operational planning: digitised CONOP development and governance, tactical site surveys and post activity reporting, so planning and lessons are captured once and reused.
  • Workforce readiness: workforce mastery, qualifications and career management, and digitised parachuting records, giving commanders a current view of who is ready for what.
  • Equipment accountability: equipment tracking and passporting that replaces manual registers with a single auditable record.
  • Decision support: automated SITREP generation, operational dashboards and executive reporting that cut manual reporting effort and give consistent, authoritative information.
  • Trusted data: integrations with PMKeyS, Defence enterprise systems and authoritative sources through Integration Hub, reducing duplicate data entry.
  • Responsive delivery: a single intake, transparent prioritisation and a visible backlog, so work follows operational priorities, with every change traceable to the need behind it.

How we deliver

  • Single intake: all demand enters one channel and is assessed for effort, priority, risk and delivery approach before it is scheduled.
  • Agile backlog: work is ranked on a visible backlog with priorities confirmed with SOCOMD, so the sequence changes as operational needs change.
  • Build, test, promote: changes are built and tested in non-production, regression tested with ATF, promoted through controlled update sets and released on an agreed schedule.
  • Controlled change: changes affecting the wider solution go to SOCOMD for approval, and no third-party application, plugin or component enters the environment without prior written approval.
  • Traceability: requirements are recorded so every delivered change can be traced back to the business need that generated it.
  • Knowledge retention: configuration, solution designs and operating procedures are recorded in the environment, so platform knowledge is never held by one person.

Working in a standalone PROTECTED environment

A self-hosted platform with no reliance on the vendor cloud changes how it must be run. Upgrades, patches and plugins are planned and applied deliberately rather than pushed automatically, access is managed against Defence security and governance requirements, and integrations are validated against authoritative sources before release, with security observations, technical debt and patch status reported monthly.

Governance and reporting

  • Monthly Service Delivery Report: activities completed, outcomes achieved, enhancements delivered, backlog status, risks and issues, user demand trends, planned work and improvement opportunities, within five business days of month end.
  • Work Intake and Prioritisation Artefact: demand register, backlog, priority rankings, status of active requests and delivery forecasts, kept current and accurate at all times.
  • Platform Health and Security Artefact: user administration, access management actions, platform health, technical debt, security observations and upgrade and patch status.
  • Measured on outcomes: 100 per cent of monthly reporting delivered, at least 90 per cent of approved changes on schedule, at least 95 per cent of critical defects resolved within the agreed priority timeframe, and 100 per cent backlog visibility.

Building toward Risk and AI

SOCOMD’s roadmap includes the ServiceNow Risk module and AI capability. The data quality, access control and process digitisation work delivered now is the foundation both depend on, and the team’s GRC and solution design experience means each can be scoped against what a self-hosted environment supports and introduced without disrupting the capability in service.

Team expertise

The team combines close to twenty years of ServiceNow implementation and solution design, including senior solution consulting at ServiceNow for the AFP, ATO and Defence, with seven years administering and developing a production Defence ServiceNow environment. Depth spans scoped application development, JavaScript and Glide APIs, Flow Designer, Integration Hub, Service Portal, Performance Analytics and ATF, alongside identity integration (NetIQ, Ping, Azure AD, OAuth2, LDAP and LDAPS), GRC, ITIL 4 and Agile delivery. All personnel hold NV2 clearances and work on-site.

Key technologies

ServiceNow (self-hosted) · Flow Designer · Integration Hub · Service Portal · Scoped applications · Performance Analytics · ATF · Update sets · ITSM · CMDB · GRC

Why it matters

SOCOMD has a platform that keeps pace with operations: current, authoritative information on workforce readiness, equipment and activity, less manual administration and reporting, data that moves between systems without re-keying, and a foundation ready to scale into Risk and AI.