--- sourceDocument: Brazil Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # GRC Risk Workspace # GRC Risk Workspace {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of GRC Risk Workspace The GRC Risk Workspace, introduced in version 13.0.5 and updated in the Brazil release, offers a streamlined, single-pane user interface for managing risk within your organization. It consolidates traditional risk management functions---such as risk assessments and risk event processing---into a more intuitive, role-driven environment. The workspace reduces the need for multiple app installations by enabling management of specific risk domains, like IT risks, through a single application. Show full answer Show less To utilize the Risk Workspace, the **GRC: Risk Management workspace (com.snriskworkspace)** plugin must be installed and activated. ## Key Features * **Role-Driven Customization:** The workspace adapts to different user roles, providing tailored views and functionalities. For example, Operational Risk Managers and IT Risk Managers see distinct home pages and task lists relevant to their responsibilities. * **Centralized Home Page:** Serves as the starting point displaying a comprehensive view of organizational risk status, including key risk indicator (KRI) breaches, risk heatmaps, risk classifications, and entities at highest risk. * **Task and Reporting Efficiency:** Shows day-to-day tasks assigned to users and groups, facilitating easier tracking and action. Provides clickable data for drill-down analysis and quick links to key functions such as scheduling assessments and creating KRIs. * **Configurable Visuals:** Allows customization of heatmap color codes and reports to align with organizational preferences. * **Support for Advanced and Classic Risk Assessments:** Displays classic risk assessment scores when the Advanced Risk application is not enabled, while providing an enhanced experience for Advanced Risk Assessments when it is. ## Role-Specific Insights * **Operational Risk Manager:** Focuses on managing risks related to operational failures caused by people, processes, systems, or external events. Covers a spectrum from minor errors to major incidents like fraud. * **Business Operational Risk Manager:** Acts as the first line of defense within specific business units, responsible for their unique risk postures. * **IT Risk Manager:** Oversees IT risk management programs, addressing threats to business data and critical systems arising from IT operations. ## User Experience Enhancements The workspace includes improved user experience features designed to simplify daily risk management tasks, especially helpful for new or less experienced GRC users. Advanced Risk Assessments can be accessed quickly within the workspace or the GRC Risk Portal, streamlining risk evaluation workflows. Starting with version 13.0.5, the GRC Risk Workspace provides a new and simplified user experience with a single-pane view. In the workspace, you can perform the same functions as the classic environment, but with more intuitive functionality. These functions include risk assessments, risk events processing, and so on. The Risk Workspace is highly configurable and role-driven. Being role-driven means that the Risk Workspace is customized or unique for each user or role in your organization. In the workspace, different users with specific roles can perform different functions and have views that differ from each other. The workspace also reduces the number of apps that the users must install to utilize the Risk Management application. For example, if you want to manage your IT risks, you must install only one application. The workspace makes the management and installations of apps easier. To use the Risk Workspace, you must install and activate the GRC: Risk Management workspace (com.sn_risk_workspace) plugin. The starting point in the Risk Workspace is the Home page ![Home page button.](). The Home pages show you the complete view of the risk status across your organization. Some of the key items that you can see are the key risk indicator (KRI) breaches, the risk heatmaps, the risk classification and breakdown, entities at the highest risk and so on. The Home page offers the following benefits: * Provides a different view for each role. * Is designed for the specific responsibilities of each role. * Shows the day-to-day tasks for each role depending on the user. For example, the Home page for an Operational Risk Manager differs from that of the Home page of the IT Risk Manager. * Displays the key tasks assigned to you and your group. This makes it easier to get a complete view of your actionable tasks. For more information on the new user experience for Advanced Risk Assessments, see [Advanced Risk Assessments in the Risk Workspace](https://www.servicenow.com/docs/oGwPdpg7jE3JwSydFCuWiA "The Risk Workspace offers an enhanced and a simplified user experience for users to perform Advanced Risk Assessments. You can quickly access the risk assessments assigned to you or your group from the GRC Risk Portal or the Risk Workspace."). * Shows the risk profile for the top entities. This consolidated view enables easier reporting. * Enables customization to suit your needs. For example, you can configure your own color codes for heatmaps and reports. For more information, see [Operational risk heatmap for Advanced Risk Assessment in the Risk Workspace](https://www.servicenow.com/docs/SFGblU8uUUNbTE7cW8oDfA "As an operational risk manager, you can configure and manage your risk heatmaps in the Risk Workspace.") * Provides quick links for performing key tasks such as scheduling risk assessments, creating new key risk indicators, and so on. * Provides data in a way that you can click and view the details. * Shows the classic risk assessment scores if the Advanced Risk application is not enabled. {#risk-workspace__ul_ky1_2zm_5pb} Figure 1. Risk Workspace home page without Advanced Risk enabled ## Roles and user enhancements in the Risk Workspace {#risk-workspace__section_zgz_ynq_2qb} The roles for the Risk Workspace are the Operational Risk Manager and IT Risk Manager. See the following sections for the description of each role, its responsibilities, and its tasks. Note: Because the roles in your organization might be different from what is presented here, use these roles as references or models. Multiple enhancements have also been made to the user experience in the Risk Workspace. Each enhancement is described in detail in the subsequent sections. * **[Risk Workspace for the operational risk manager](https://www.servicenow.com/docs/UhASrPPEjX17CTGk~skkDw)** Operational risk managers manage operational risks such as losses due to errors, breaches, or damages that are caused by people, internal processes, systems, or external events. Operational risks range from the small, such as the risk of loss due to minor human errors, to the large, such as the risk of bankruptcy due to serious fraud. * **[Risk Workspace for the business operational risk manager](https://www.servicenow.com/docs/bRrmwPA9QKKAxQm9~SDAzQ)** Business operational risk managers are the first lines of defense for each individual line of business. They are responsible to manage the risk posture of their specific business units. * **[Risk Workspace for the IT risk manager](https://www.servicenow.com/docs/tqq3~tVR0dGRPev74CPnhw)** Information technology or IT risk is any threat to your business data and critical systems. It is the risk associated with using and operating IT within an organization. An IT risk manager is the primary person responsible for establishing and maintaining the organization-wide IT risk management program. * **[User experience enhancements in the Risk Workspace](https://www.servicenow.com/docs/Lr50CISvYtU5R1Yyl_H0EA)** In the new workspace, several enhancements have been made to ease the way you perform your daily tasks. The user experience enhancements are useful for new GRC users or users who do not have the complete experience of GRC. * **[Advanced Risk Assessments in the Risk Workspace](https://www.servicenow.com/docs/oGwPdpg7jE3JwSydFCuWiA)** The Risk Workspace offers an enhanced and a simplified user experience for users to perform Advanced Risk Assessments. You can quickly access the risk assessments assigned to you or your group from the GRC Risk Portal or the Risk Workspace.