March 2022 Risk Store Release Summary

[Shannon Long]

March 2022

 Hello GRC Community! Now that we have carried out our first store release of 2022, it's time to recap the awesome capabilities that came with it! Below is a quick summary of the new capabilities based on the GRC application. Where applicable, we have linked the documentation to further understand how the capability behaves and how to configure it if needed. We will continue to post these items after every store release to give you all a single source of truth to be up to date on all the new capabilities. 

1. Policy & Compliance Management

Key Features:

• Policy authoring – Integration with O365
• First-line experience simplification through integration with employee center
• Control enhancements – support for multiple controls on a specific entity and control objective
• Compliance data source registry – integration framework for mapping control objectives with equivalent checks/policies from other NOW products for monitoring compliance posture
• UCF enhancement – Support for more than 100 authority documents using multiple shared lists without adding already downloaded authority documents to the list
• Security and access enhancements
  • Confidentiality
  • User Hierarchy

Release Compatibility

• Rome
• San Diego

To review the store app, click here.

2. Risk Management

Key Features:

• Heatmap workbench
• Metrics for KRI and KCI monitoring
• Workspace for Business Op-Risk Manager
• Workspace view for business process
• Risk Event Enhancements
  • Manage confidential risk events
  • Inject risk events from compliant case management
• Advanced risk assessment engine enhancements
  • Delegate risk assessment tasks
  • Support for more than 1 entity class in RAM
  • Trigger-based risk assessments
  • Initiate ARA assessments from risk

Release Compatibility

• Rome
• San Diego

To review the store app, click here.

3. Privacy Management

Key Features:

• Data Discovery Enhancements:
  • Workflow to update processing activity by business users
  • Proactively request PIA for new implementations
• Privacy Risk Assessments (Leveraging ARA*):
  • Automatically identify risks on a processing activity based on PIA* responses
  • Enterprise-wide privacy risk posture by privacy risk assessments & reports
  • Risk suggestions based on the mapped Information Objects with processing activities
• Monitor and track privacy regulatory changes
• Information Objects’ 360-view highlighting critical relationships such as citations, risk statements, etc.

Release Compatibility

• Rome
• San Diego

 To review the store app, click here.

4. Business Continuity Management

Key Features:

• Copy BC / ITDR plans, BIAs and publish them as new versions
• Configure specific parameters based on dependency types
• Out of the box workflow and state transitions for exercise results and crisis events
• Usability experience enhancements in the BIA impact assessments and dependency assessments
• Edit, delete, and order the documentation sections in BC / ITDR plans

Release Compatibility

• Rome
• San Diego

To review the store app, click here.

5. Vendor Risk Management

Key Features:

• Fourth-party management for VRM​
• EcoVadis& Interos (partner built) integrations to view ESG scores in VRM
• The VRM dashboard provides a risk area overview (New UI)

Release Compatibility

• Rome
• San Diego

To review the store app, click here.

6. Risk Product Suite (Common Core)

Key Features:

• Consolidated first-line experience through the Employee Center
• Security enhancements
  • Confidentiality - Flag to mark records confidential, which would only be accessible to users in Allowed users and Allowed groups
  • Access groups - can be leveraged in ACL to control security at the record level
  • User Hierarchy Framework to control access based on the User’s hierarchy
• 360° View
  • Donut chart
  • Group by option in the Donut chart
  • Configuration enhancements to show the order, visualization, and how they need to be grouped by
• Task page
  • Configuration enhancements to add tabs, set order of tabs, group tabs
• Entity
  • Sync owner with the source field
  • Enhancements to Entity filter and Entity class

Release Compatibility

• Rome
• San Diego

We hope this is helpful! Be on the lookout for future store release summaries and content around how to use these new capabilities!

Happy risk management!

Shannon