GRC Advanced Risk plugin indicators

  • Release version: Australia
  • Updated March 12, 2026
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of GRC Advanced Risk Plugin Indicators

    The GRC Advanced Risk plugin provides a comprehensive set of indicators that help organizations monitor and manage risk effectively. These indicators track various aspects of risk management, including residual risks, control effectiveness, and financial impacts of risk events on a quarterly basis. This information is crucial for ServiceNow customers aiming to enhance their risk governance and decision-making processes.

    Show full answer Show less

    Key Features

    • High Residual Risks: Monitors the number of high residual risks each quarter.
    • Ineffective Controls: Tracks ineffective controls on a quarterly basis.
    • Average Loss Expectancy: Calculates maximum acceptable loss expectancy and average loss for financial events.
    • Open Mitigation Tasks: Counts the number of open risk mitigation tasks in the current quarter.
    • Active Risk Events: Measures the number of active risk events and those with significant financial impact.
    • Control Tests: Records the creation of control tests and assessments within the quarter.
    • Non-Financial Risk Events: Identifies non-financial risk events reported quarterly.
    • Failed Indicators: Analyzes the percentage and total number of failed risk indicators and control tests.

    Key Outcomes

    By utilizing the GRC Advanced Risk plugin indicators, ServiceNow customers can:

    • Gain insights into risk management effectiveness and areas needing improvement.
    • Monitor financial and non-financial risk impacts, enabling proactive risk response strategies.
    • Facilitate informed decision-making through comprehensive data on risk status and control performance.
    • Enhance compliance and accountability with clear tracking of indicators and tasks.

    The GRC Advanced Risk plugin contains various indicators.

    The Advanced Risk plugin includes the following indicators:

    # of high residual risks
    Number of high residual risks per quarter.
    # of ineffective controls
    Number of ineffective controls per quarter.
    Maximum of maximum calculated ALE for this quarter
    Maximum of maximum calculated ALE for this quarter.
    Maximum of maximum acceptable loss expectancy for this quarter
    All active risk statements updated within the current quarter and calculates the average of maximum_acceptable_loss_expectancy
    Number of open mitigation tasks
    Number of risk mitigation tasks in open state in this quarter.
    # of risk events
    Number of risk events that were reported in this quarter.
    Total gross loss
    Total gross loss from financial risk events per quarter.
    Total net loss
    Total net loss from financial risk events per quarter.
    Active Events
    Number of active risk events per quarter.
    # of events with impact > 1 M
    Number of risk events with financial impact greater than one million USD.
    Average residual risk
    Average residual risk score per quarter.
    Average control effectiveness
    Average control effectiveness per quarter.
    Average Inherent Risk
    Average inherent risk score per quarter.
    Risk Assessments (Open)
    Open risk assessments.
    Issues (created this quarter)
    Issues created per quarter.
    Indicator task (created this quarter)
    Indicator tasks per quarter.
    Control tests (created this quarter)
    Control tests per quarter.
    Risk assessments in Monitor state
    Risk assessments in monitor state.
    Non-financial risk events
    Number of non-financial risk events per quarter.
    Total potential loss
    Total potential loss from financial risk events per quarter.
    Total expected loss
    Total expected loss from financial risk events per quarter.
    # of events with high non-financial impact
    Number of risk events with high non financial impact per quarter.
    Average gross loss per event
    Average of the gross loss incurred for each active risk event.
    Average net loss per event
    Average net loss per event. Net loss = Gross loss minus recovery loss.
    Average recovery made per loss event
    Average recovery made per loss event per quarter.
    Average additional cost per event
    Average additional cost per financial risk event per quarter.
    Annual Loss Expectancy
    Average ALE monthly is measured monthly as unit.
    Number of entity
    Number of entities which are in active state and updated during or before this quarter.
    Near Miss
    Number of near miss risk events per quarter.
    Number of risk statements
    Number of risk statement which are in active state and updated during or before this quarter.
    Total control indicators
    Number of control indicators running per quarter
    High risks with failed indicators
    Number of risks with high rating and failed indicators in the quarter.
    Overdue indicator tasks
    Number of indicator tasks due in the quarter.
    Percentage of risk indicators failed
    Percentage of failed risk indicators.
    Total Failed Indicators Quarterly
    Number of failed indicators in the quarter.
    High Risk with Failed Control
    Number of High Risk with Failed Control Test
    Total Risk Indicators
    Number of risk indicators running per quarter.
    # of ineffective controls
    Number of ineffective controls per quarter.
    # of failed risk indicators
    Number of failed risk indicators per quarter.
    # of Failed Control Tests
    Number of failed control tests per quarter.
    Failed Control Test Quarterly
    Number of Failed Control Test Quarterly
    By this quarter
    Total number of remediation task that needs to be completed by this quarter.
    Key Controls with Failed indicators
    Key Controls with Failed indicators is measured quarterly