Risk heatmap workbench

  • Release version: Australia
  • Updated April 28, 2026
  • 5 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Risk heatmap workbench

    The Risk Heatmap Workbench in the Advanced Risk application allows operational risk managers to visually analyze and understand their organization's risk posture. It uses color-coded matrices to represent risk data, making risk assessment results easy to interpret and actionable. Available starting from version 14.0, the workbench can be launched via the launch icon.

    Show full answer Show less

    Key Features

    • Risk Visualization: View risks by count, names, and indexes within heatmap cells defined by factors like Impact (X-axis) and Likelihood (Y-axis).
    • Top Risks: Filter and display the top risks based on the selected Risk Assessment Methodology (RAM).
    • Entity Filtering: Display risks associated with specific entities and their downstream entities, filtered according to RAM definitions.
    • Contextual Side Panel: Access detailed risk information including owner, entity, category, rating, response, tracking, hierarchy, and activity log. The panel supports pagination and configurable entry counts.
    • Actions Menu: Options to open the risk record, access a 360° view of related data, or view assessment summaries.
    • Risk Reporting and Analysis: Visualize risk movement from inherent to residual to target risk, analyze control effectiveness, and observe risk trends over the last five assessments. The trend line can be toggled on or off for clarity.
    • Risk Appetite Monitoring: View risk appetite status and trends directly within the heatmap.
    • Data Filtering: Apply and save filters using a condition builder to focus on specific risks, such as those associated with a particular entity.
    • Download and Copy Options: Export the heatmap as an image or copy heatmap data to clipboard for sharing in emails, reports, or presentations.
    • Search Capability: Search for risks by name, owner, or other card-displayed information, including risk description, with results shown in the side panel.
    • Immersive View: Expand the heatmap for detailed analysis of specific zones. Axis values are interactive, allowing focused examination of risk combinations (e.g., low impact and likely occurrence).

    Practical Benefits for ServiceNow Customers

    This workbench provides a dynamic and comprehensive interface for managing and communicating risks effectively within ServiceNow. It supports informed decision-making by enabling quick identification of critical risks, assessment of control effectiveness, and clear reporting to stakeholders. The ability to filter, search, and customize views ensures that risk managers can tailor the experience to their operational needs, improving risk posture visibility and management efficiency.

    As an operational risk manager, you can visualize the risk details and better understand the risk posture of your entity by using the risk heatmap workbench in the Advanced Risk application.

    Overview of the heatmap workbench

    A risk heatmap is a graphical representation of your risk data where the individual values that are contained in a matrix are represented in colors that denote a meaning. You can use risk heatmaps to see your risk assessment results in a convenient, visually attractive, and succinct format. Starting in version 14.0, you can launch the risk heatmap workbench with the launch workbench Launch Workbench icon. icon.

    Features of the heatmap workbench

    By using the risk heatmap workbench, you can view the following aspects for risks:
    • Risk count: Shows the number of risks that are in each cell on a heatmap such as when an X-axis factor like Impact is combined with a Y-axis factor like Likelihood. Risk count.
    • Risk index: Shows the risk IDs in each cell and the details of each risk on the contextual side panel. Risk index.
    • Risk name: Shows the names of all the risks in each cell. Risk name.
    • Top Risks: Shows the top risks on the heatmap workbench. For example, if you select 10 from the Top Risks filter selection list, you can see all the top 10 risks that are associated with the selected Risk Assessment Methodology (RAM) on the heatmap.
    • Entity: Shows the risks that are associated with the specific entities and their downstream entities on the heatmap workbench. You can filter the risks that are associated with the specific entities that are defined in the RAM.
    By pointing to each risk, you can quickly get details about the risk. For example, you can see who the risk owner is, the entity to which the risk belongs, and the category of the risk. The contextual side panel shows 20 entries at a time on a page. You can configure the total number of entries that you want to see. You can either view all the risks as cards or select a single risk and view its details. After you select a risk from the heatmap cell, you can see the details of that risk on the side panel. For example, you can see the risk rating, the risk response, the risk tracking, and the risk hierarchy. The activity log captures all the activities that are performed on a risk. If you click the more actions icon More Actions icon., you can see the following options:
    • Open: Provides the risk record.
    • 360° view: Provides an overview of the associated entities, controls, risk statements, risk assessments, and risk response tasks.
    • View assessment: Provides an assessment summary of the risk.

    Reporting in the heatmap workbench

    The heatmap workbench is the primary tool that you use for risk reporting and analysis. By looking at the Risk movement and Risk trend, you can visualize your organization's risk profile and share that information with your stakeholders.

    You can view the risk movement from inherent (risk level without controls or mitigating actions), to residual risk (leftover risk after the implementation of controls), finally to target risk (risk level that you want to achieve in future) on the heatmap workbench. This information helps you to analyze the assigned controls to mitigate if the risks are effective or not. The risk movement is available only for RAMs where the residual risk has the same factors as an inherent risk.

    Risk movement.

    You can view the risk score movement across multiple assessments on the heatmap workbench. The risk trend shows how the risk has changed and analyzes how you have been managing the risk. The risk trend is available for the last five risk assessments. You can also disable the trend line on the heatmap for a clear and less cluttered view.

    Risk trend.

    Risk appetite in the heatmap workbench

    You can view the status of the risk appetite on the heatmap workbench. The risk appetite trend is also available on the heatmap. You can also see the details of the risk to get an understanding of the risk appetite status.Risk appetite on the heatmap.

    Filtering in the heatmap workbench

    You can filter the data that you see on the heatmap workbench. For example, let's say that you see 40 entries on the heatmap and you'd like to filter those risks where the entity is ACME Global. You can use the condition builder and apply your filters. After the filters are applied, the heatmap is refreshed and displays the data based on the filter conditions that you have applied. For more information on how to filter the data, see Filter data in the risk heatmap workbench. The ability to filter is only available in the workbench view. You can save the frequently used filters in the My saved filters section.

    Downloading and copying in the heatmap workbench

    You can download or copy the risk heatmap information to include in reports or share with relevant stakeholders as needed. The download Download heatmap icon. icon enables you to download the heatmap as an image. The copy Copy heatmap to clipboard icon. icon enables you to copy the heatmap information in your clipboard. You can then paste it into emails, reports, presentations, or other documents to share the visual data representation as needed.

    Searching in the heatmap workbench

    As a risk user, while looking for a particular risk, you can quickly search a risk by the name, owner, or any of the other information that is shown in the card. You can also filter the data by searching the risks. In the contextual side panel, you can enter your keyword in the search field and the filtered results are visible.
    Note:
    The search feature considers the risk name, risk description, and fields that are shown in the card. For example, if you search for the word Operational, then all risks that have the word operational will appear in the search result.

    Immersive view of the heatmap workbench

    With the immersive view of the heatmap, you can view the expanded form of the heatmap where the X-axis and the Y-axis values are highlighted. The benefit of this view is that if you have too much information in one zone, you can focus on that zone and analyze each risk. The pagination enables you to see all records. You can point to a risk to quickly understand more details about the risk. You can also view the different values of both the axes by clicking the value. For example, let's say that in the heatmap, the X-axis has the values low, medium, and high and the Y-axis has the values unlikely, likely, and almost certain. You can click any value in both the axes to see the risks for that combination.