logo

NJP

Discover What's New: ServiceNow Yokohama Highlights for Compliance and Audit Management

ServiceNow Community · Mar 31, 2025 · video

all right let's go ahead and get started hello everyone and welcome to today's webinar what's new in compliance and audits management um we have a lot to cover today um so I want to just quickly jump in cover a couple of housekeeping items first um we're excited to share with you the latest updates from our Yokohama release for our compliance and Solutions um I'm Emily pki a product marketing manager here at service now and I am joined by Anri rad and anoop Sharin and we will be talking all things audit and all things compliance today before we get started um couple of reminders you are on mute but that doesn't mean that you can't ask questions please use the Q&A feature uh at the bottom of your screen to ask questions throughout the session we do have a team of experts on who will be answering your questions in real time also today's recession will be recorded and it will be available on demand on the service now Community forum and on our YouTube channel in the next 48 hours so in case you want to reference back to today's conversations or share it with a colleague it will be available within 24 hours additionally we have a few a short survey at the end of the session and we'd love to hear from you to see how we did we do use this feedback to improve our sessions and we' really value your input and so with that this is just one of a series of release webinars for the Yokohama release um if you've missed our previous sessions don't worry we do have recordings available on the community forum and on the YouTube channel for our sessions around geni now assist operational resilience business continuity management and a deep dive into our smart assessments engine our privacy management solution and ESG we also have um Tuesday session around continuous authorization and monitoring up and available and in our risk management session today we are focusing on our enhancements to our audit and compliance capabilities taking a look at the new risk and controls Matrix for our audit solution enhancements to streamline our regulatory change management and the new assessments experience for compliance case management but I will save all those details for Anri and a noop lastly we'll be wrapping our series on Tuesday with our enhancements to our thirdparty risk management solution we highly recommend you checking out all of these sessions because there are a lot of great features that came out within the yokahama release that you can use to your benefit so scan this QR code here on the right um this will take you to our events blog if you want to register for our thirdparty risk management solution session um next week um and I will post links to our YouTube channel in the chat here shortly for quick access to that channel and with that that brings us to our first update everything that you see today is available in the service now store so we're really excited to share all of these great features in hands with you and so without further Ado I will turn it over to anuri to get us started Anu thanks Emily um Let me show my screen hello everyone welcome to the webinar and I'm very excited today to talk about some of the new features that we release in our February release as well as November release and there are some enhancements to our existing features as well both on the compliance as well as on audit side so let's begin with uh quickly getting a view of what uh what are those enhancements so um so the first thing that I want to share here is the compliance score roll up on the entity hierarchy this is something lot of you have asked for many times and uh we have it available in the product now uh you can roll up the compliance score based on the uh entity hierarchy now previously it was just based on the uh directly associated ated uh controls on the entity there are some performance improvements as well that we did on compliance score uh calculation so there are enhancement on the compliance score in general uh the second uh feature I want to highlight is the policy redlining enhancements uh I I have uh demoed how policy redlining and the entire authoring flow Works in a previous webinar for SharePoint uh Google drive as well as um one drive the are some enhancements that we did on top of that one is support for Google Docs that many of you asked for that was released in November release um along with that uploading local document to Cloud so from service now from a policy doc uh record how do you upload a document that you might have in your local machine uh on Cloud on on either Google Drive SharePoint and uh one drive so you don't have to move away uh and Link that document directly to your policy and the last one that we en in the February releas is the ability to turn off the sync uh between your policy text as well as your Google Drive SharePoint and one drive some of you provided us feedback that um there might be larger policy text uh let's say more than 10 pages more than 50 pages of the policy if you want to sync that over to service now uh policy record uh it might uh it might be a really long policy text so they uh so some of you asked us to turn it off by default so all the policy is the sync could be turned on or off based on a property so you can decide how you want to handle that the next one is control attestation frequency enhancements uh we released the new assessment engine uh for control attestation uh couple releases back and um we went through that demo but in this particular release uh we did some some more enhancement to to the control attestation and the frequency um of the attestation the so we added a new field for control atation frequency which can be uh used for scheduling your uh attestations and the previously uh used field which was frequency now is kept as sort of uh for the reporting purpose on your execution of the uh control frequency so it has uh no automation around it and this is again something we've gotten feedback from customers that they want to use that policy um the control uh control frequency field for uh reporting purpose so with did that as well as the uh scheduling of the atation is now based on the created date as well so you can choose between either the last updated date or created date that whatever you want to choose based on a property then we there some enhancement on the uh UCF um import when if you if you are using UCF integration uh there there was a problem that some of our customers faced where there were duplicate citations that that were coming in from UCF because of the control objectives that were associated with it so we took care of the duplicate citations and we D duplicated them so any import that you do from a UCF uh will will not have duplicate citation in a single Authority document all right so that was on the compliance side on the audit side uh there are exciting two features that we released one is risk and control Matrix uh this is a matrix report combining multiple columns or multiple tables together in one single view This is highly configurable and can be used not only for audit but in your compliance workspace or risk workspace for any any use case that you would uh like to so you can bring in the tables and the related columns as you like in this Matrix uh uh report the second feature which is document designer um this is uh something that we released in November which is available uh for you in the store already we did some enhancements in the February release uh we released a word add in in the uh uh in the uh to basically create word template for uh things like audit reports or you can use it for any other purpose we are trying to uh um we we made it available generically so other products within a risk U Suite of products uh will be able to leverage this capability so you can pretty much use it for your uh BCM plans or you can use it for um any other reports or templates like policy templates Etc so this is available and we did some enhancement on top of it in this release and we continue doing some enhancements on that so would be happy to show you what we uh developed so with that I am going to go over the first uh feature which is a compliance score hold up on entity hierarchy as I previously mentioned uh the compliance score roll up wasn't available uh the old formula would look at the average of directly related controls and calculate the compliance score on an entity with the new updated logic we are calculating the compliance score on the entity based on the average of directly related controls as well as Downstream entities so now the score will be updated based on your Downstream entities as well we can um you have a choice to turn on this logic based on a property so if you are uh not ready yet uh and you want to make sure that your you have entity set entity hierarchy is set up correctly and then you turn it on uh you can do do that on your terms uh there is a scheduled job of to update existing entity entity hierarchies so once you uh enable this property you can run the schedule job to update all your entities in the system and then uh we also have newly improved schedule job uh which also is performing uh has a performance Improvement around it which will reduce in the time uh that is taken to calculate your compliance score and save the memory while calculating the score so these are some of the enhancements with that I'm going going to get into the instance and demo it to you quickly so this is a property on our uh property stage policy and compliance properties page so which you can turn on and off which is entity hierarchy based scoring if this is turn on in this case I have checked it on you can um now leverage this particular uh new calculation logic to enable compliance score rollup on your entity hierarchy so let's take an example uh of the hierarchy here I have my Acme us um as a top level entity under that I do have customer support Finance HR it are the these are all the Departments and each one of them have business services and applications associated with them so if I open it up um I would see either Business Services applications data uh data servers Etc so at here now in in a previous instance uh The Entity score calculation would have happened only based on the directly Associated controls what I mean by here is U if I go to the downstream controls and show the directly related controls it would have calculated it based on these three controls so Acme uscore would have been um there are uh two two controls which are compant versus uh out of one uh out of the three so let me actually we add the compliance score status field okay so you'll be able to see that the two controls are compliant and one is non- compliant So based on that the score should have calculated uh in a different way but I think you can see now that the score shows 78 here right otherwise uh and that is looking at all the downstream entity score and we'll come to that how we calculated it now if I look at the uh it service it uh it is looking at the score that is coming from the IT services uh business business service as well as its own directly related uh controls as well same for HR Finance customer service and all of that score is calculated and um rolled up on top let me go back and show you how this calculation is done So currently the the way the Lo calculation is uh I mean done at the acma US level is based on these two controls that are control five and six which are both compli so your uh score would be 100% but in the uh future logic we are looking at the downstream entities and the average of directly related controls as well so it it is going to take into consideration the score coming from finance and it departments as well as scores from the directly related control and calculate your compliance score which is 75% instead of 100% in the previous case now uh this logic is based on the compliance scoring that we've done on the other objects as well so on Authority document it is the average of citations on policy it's an average of policy and control objective um and on the citation it takes the average of control objective in the child citations as well uh previously The Entity score of course was wasn't taking into consideration the average of entities and control but now with the new formula You' be able to see it's going to be the average of the children here so that's the new change now looking at the example that we have uh we had in hand um my compliance score was calculated at the department level uh customer support HR finance and it in this way which we saw in the instance um and and this compliance score uh would then roll up to my acma us level which is an average of all these four as well as the average of three control objectives here so my average average is 89 uh for for these four departments and 67 for the uh three controls which calculates to about 78% which we saw here and the score that if I look at the finance department alone I am able to see that it has sap accounting um as a business service and sap CRM under it as an application so my sap CRM is 100% compliant and um sap Financial Accounting has six controls out of nine which are compliant which calculates about 67 and along with that uh it is rolling up score from sap CRM and the total is calculated as 67 here an average of both 67 and 100 is calculated as 84 here on the finance which is what we see here so if I look at the sap CRM at 100 sap Financial Accounting 67 because six out of nine controls are compliant um and then finance department all of that rolls up as 84 and then in total everything if I look at all the uh departments it rolls up at the acma US level so that is the change in the compliance score logic if you have any questions you can add it to the chat and our experts here will answer your questions all right with that I'm going to move on to the next feature which is SharePoint or Google Drive uh support for uh Google Docs as well as uploading a local document to one drive SharePoint Google Drive and turning the syn text feature of these are all the enhancement on the policy redlining enhancements or policy redlining feature that we released earlier uh the first feature is the enabling policy relining with Google Drive uh and also ability to connect with Google doc or or create a new Google doc while uploading a document from your local machine uh you can either connect to existing Google doc or you can upload a new file on Google Drive as a Google doc um those are some of the features that are available apart from that uh you can um enable the sync text uh off and on here on the policy text which I'll take you which I will demo demo it to you in shortly but you can turn that off and on and accordingly the policy text uh will be sync with the document that might be available on the Google Drive SharePoint or one drive so with that I'm going to go over to my instance and I've taken the example of this information security policy here I do have able tutor who is the owner of the policy when I come to policy uh text here I would be able to able to see the enable document editing option where I can create a new document connect to exising document or upload a document let's take an example of upload a document because that is another new feature that we released uh in November so if I look at that and it gives me an option to upload this document as Google doc or as word on Google Drive and it ask me for the folder location of the Google Drive so I'm going to go ahead and choose this folder location copy the link here and I will I am going to upload it as Google doc going to go ahead and upload a policy here information security policy once it's uploaded it'll be uploaded in the F folder uh link that you have provided so here my policy is uploaded uh and I can open that policy in Google Drive as Google doc so You' be able to see that there's a new document support which is Google dog and the policy is uploaded here you can perform your redlining um updating adding comments Etc and all of that will be synced back to the policy if this particular sync was turned on now in this case the sync is turned off by default uh because there is a property uh that we turned off so if you look at this property here enable redlining document Tex syn by uh off by default or texting by default it is turned as off so the syncing of the document uh text from Google Drive uh to the policy text is not happening in this case uh you can turn it off by default so any new policy that you create that sync will be off but if you want to turn that sync on uh on the policy you can always go ahead and manually turn it on and that will enable you to sync the policy text from Google doc here so this is is uh the new capability capability that we release uh now the Google Doc uh thing Google doc integration is available as well so if you're using Google doc you can go ahead and use this feature all right so moving on control attestation frequency enhancements so we added a new control uh the attestation frequency field on the form which is uh an additional field apart from the frequency field that we used to have on the control form before um this field is used to set up your attestation frequency and uh you can also use a property to Define uh whether these attestation should be uh sent out based on the last created date of the last attestation or the updated date of the last attestation so let's go ahead and see how this feature looks like so I I have an example of this control here on this control I do see a frequency field here which used to have logic of scheduling attestations before but we have removed that logic so this field is purely used for your reporting or defining execution frequency of control uh which which has no execution or scheduling logic here then we added a new field on the under the atation section you can see the atation frequency this is a field which can be now used for scheduling your atation so you can choose daily weekly monthly Etc and based on that your appliations will be sent out now uh there's a property that is uh set for you to define whether the accusation should be sent out um based on a creat date or updated date like I said so I'm just going to go to this property quickly and let's look at this property uh where you can select yeah this was on the other page all right I loog in as able so let me go ahead end that in personation but here is the property that I was talking about uh so which is trigger control aration based on the created or updated date you can choose which date you want so in this case I've chosen created date because I've chosen created date and in this one of the example that I have here I've chosen the frequency as uh daily and that's why the uh the attestations were sent out daily I have some examples of attestation that were triggered automatically so you can say they were triggered on 17 18 and uh 19 as well so uh those attestations were triggered based on the created date here similarly I have an example of ATT a station that was sent weekly uh and those are uh generated every week based on the frequency here again both both of them are based on the creative dat so this is a new enhancement U to the control AR station all right so the next one is D duplication of UCF citations within one Authority document what we doing here is uh the issue that we had or uh customers were facing before is when you are importing the citations or importing The Authority documents from UCF uh UCF has a structure of citations and the control objec is under citation in this case let's say citation one is a parent citation two is a child and citation two has control objective one and two now if there is a new control objective update that came in for the same citation uh in the same hierarchy it would generate uh this control object of three but it'll it'll create the uh duplicated citation two and one as well so that was a problem customers were facing on uh to resolve that resolve that problem uh we we create we fix that in um our recent release which will now enable you to import your citations which are not duplicate citation so instead of a set of like four citations here it would just have set of two citations one and two and all the three control objectives will be associated with this citation uh so this is uh the new uh fix that we have in place any new import from UCF will have unique citations in place now let's see how it looks like in the instance I have an examp example of aor document here uh where I I see that uh okay again uh so in this example I do see that there is the citation a 1.1 uh it has three instances of citation and if I look into each one of them it would have unique control objective associated with it now these three citations are exactly same with three different control objecs so with the fix that we play uh put in place now you can see that uh with the new system if I look at the same Authority document I would only have one of those citations and if I drill down into the citation I would be able to see those three control objectives now associated with the citation so that is a fix that we have in place so you don't have to worry about having duplicate citations anymore all right so with that let's move on to the uh next feature which is an enhancement of feature new feature that we release in order this is very exciting and something like I said before is configurable um so this is a Riskin control Matrix in which you'll be able to display uh different columns from different tables which are related to each other you can configure it for any table uh by default out of the box we have it for our audit workspace and on the audit engagement you'll be able to see it and you can configure it for any other table as well this is a generic Matrix support framework like I said so you can configure it as as per your uh requirement so let's go go ahead and look at uh it how it looks like give me one second log in go to audit workspace on the audit workspace you'll be able to see a new icon here for Matrix report if you click into it you'll be able to see this Matrix report here which uh I will go to the configuration uh shortly so here I have my colums from RIS uh risk name and risk number and I have also uh colums that are added for control so I'm showing what are the controls that are associated with these the each of the RIS so it shows me okay these are the three controls that are associated with the details of the control here uh which is associated with this particular risk now if I want more information I have some configured some more additional tables as well so if I click into a detail of a particular risk I would be able to see this panel where I we see I would be able to see all the controls that are associated with this risk all the control tests that are associated with this control the controls that you were uh able to see in the previous tab as well as the control issues of course you can configure or different tabs as well here uh as long as you have that configuration in place these tabs will appear automatically here and the columns will show up here so this is on the audit workspace on a landing page now now let's go to a engagement here and let's open up this engagement this audit engagement will also show you the risk or the Matrix support tab here which will show the this particular Matrix now you can configure a different Matrix to show here versus a different Matrix to show on the landing page so all that configuration is available I've configured the same Matrix for both so you'll be able to see the exact same information here now let's see how this is configured so if I go to the Matrix report registry I would be able to see the different reports that I have configured in this case I've just configured one so if I click into the risk and control Matrix I would be able to see uh what is my Matrix name what is the base table I'm starting off with I'm starting off with the risk in this case and then you can Define what are the different columns that you can uh you want to uh enter in the risk uh The Matrix report so in this case I have entered the risk and the risk number risk name and the risk number you can add additional columns as well you can also Define some filter condition to only show let's say high priority risks if you want to then the next one is the controls so it shows me uh these are the controls which have relationship with the risk so there is a source table uh and the relationship as well as the target table which is control and the columns that you want you want to Define which which would we would bring into this Matrix similarly we have the control tests and control issues that are configured now this is how you configure your Matrix report but now you can also configure it either on your landing page or on the engagement uh form as I was shown before so if I look into this particular configuration this is for the landing page and this is for the record page engagement so if I come here I can choose what my base table again uh is what was my Matrix report so this is the one we just went over so you can choose that Matrix report uh configuration that you've defined um and you can also choose which workspace to show it on as well so you can choose any other workspace like Risk in compliance and configure this on that particular bookspace as well you can choose either you want to show it as a landing page or a record page in this case I want to show it on the landing page so I defined what is the engagement um what is the table that I I want to filter on I can filter on the engagement table and show what is the relationship of that engagement table with the base T so everything that you see on this particular landing page is associated with all the risk controls that are part of all the engagement tables so that is my filter here and on the other hand for the record page I can also configure something similar where I can define whether this is the display type is record page or landing page and similarly I can Define uh where do you want to showcase this I want to showcase this on engagements and this is my relationship between the risk in engag engagement um so I would pull in the risk that associated with that particular engagement and then the related data after that so that's my resin control Matrix if you have any questions so far please post them in the chat or Q&A section and then we come to uh the last feature um of uh my section today so this is document designer which we released in November and we did some more enhancement on top of it uh in this particular relase this is a very exciting feature again this is available generically uh for for you to configure it for not only for audit but for other tables as well so what we did in this particular feature is we created the audit report template uh you can basically create audit report template using uh Microsoft Word addin um you can create configuration uh based on a specific table and service now in this case I'm going to take an example of audit engagement table you can add custom variables um uh you can Define custom variables if they don't even exist on audit table uh such as high priority issues and pull them into the report you can of course pull your all your fields from the audit as well audit engagement into this particular document or Word document along with that you can um uh pull the various related lists that are on the engagement you can even Traverse down to multiple related list that uh and and the related list of the reference fields on the audit engagement form so it goes multiple levels down uh and you can bring them on your word document as a table uh you can choose the columns like you see here uh which you want to put in your table order them as as per your requirement and once you add the table uh it'll be added here so um you can also add the content block content block is nothing but the repeater block so if let's say if you have like high priority issues on your engagement or observations you want to repeat the entire description and various fields from each of the issue uh multiple times uh from from all of the issues uh one one after another in in a block format instead of a tabular format You' be able to uh do that by just adding a Content block with fields that you want to you want to ingest here and that block will repeat itself based on the number of issues that you have or based on the number of observations that have you can apply this template of course once you build this template you can format it the formatting will be retained and once that is done you can apply this particular template to your um records and service now so in this case you can apply to a particular audit engagement and that audit engagement will look at the template and generate the word report this word report can either be generated as an attachment or it can be uploaded to your SharePoint Google SharePoint and one drive so that is based on the cloud document management feature we have so you can generate the word report and upload to pre-configured folder location as you like there are some of some of enhancement that we uh did in the current release we used to have limitation of 10 columns in a table or 10 columns in a Content blocks which we increase to 20 in this particular release um and uh you can uh if you see on the top right corner uh right corner I have design template which is the word template that I word template uh addin that I'm talking about but there are two other addins of insert content and update content these addins uh were released as part of ESG which were which are available for you to insert the content directly into Word document in this case we are creating a template so we are inserting the placeholder fields or tables which you can apply to a record to generate the uh word report but in the insert content update content U addins uh we you can actually insert a report from your existing service now tables or you can uh insert a particular field uh Etc so that's a inserting of the direct content into your word document so we've combined all these plugins or add-ins together so you can use them um uh interchangeably you can use them one after another you can create a template generator report and then you if you want you can insert content in it so all these capabilities are available uh there are of course some y rails uh we we put in place there are some limit ations that this particular document uh will have to like look at so you cannot add more than 10 images that is restricted you can't add a Content block inside a Content block so these are some of the limitations uh that we've put in place so that your word document um is generated accurately and there's no performance um um problem there or there's no problem in come getting an error while generating the report so with that I'm going to go over this feature quickly okay go ahead and log in all right so in in your um instance you would be able to see uh office add in manifest if you click on that you'll be able to see all these manifest manifest that are available for you document designer is the new uh manifest which you which you can download and once you download you can um uh that'll be available for you you have to go through certain steps for for that addin to show show up on your word document so that is the new addin that we've created for document designer and a service now reporting is the other one which I was talking about uh which would give you those two additional addins for uh insert content and update content so these are available for you to download and use now let's go to the order report uh this is a new section we added where you'll be able to see the template configuration where you can configure your template here so if I go to the template configuration and let's take an example of uh engagement template configuration so this is the one that I've configured for the audit engagement and in this configuration you'll be able to see uh the various Fields various tables that we've added in this configuration so while that is loading up I'm going to switch over to my uh word report Word document here This Is The Word document template that I have here second let me log in here okay so once you log in into this addin um you'll be able to see uh this particular UI which I'll I'll go over in a bit but on the top You' be able to see design uh template which is the addin that we added for template designing and then you would also be able to see insert content and update content uh which I will go over as well so these are the three add-ins available for you with those manifest that you download and um install it your word so here what I've done is uh I have chosen a business domain as order uh We've defined certain domains so that you can Define your templates based on uh different categorization and it becomes easy for you to pull them here so uh based on the audit I do see different template configurations associated with this particular category and I've chosen the engagement template configuration that I'll take you u in a bit so the engagement template configuration will give you access to various things that are coming from engagement and these are based on the configuration so here I'm able to see all the different fields coming from my audit engagement and I would also be able to see some of the custom Fields like high priority observations count of high priority observations which is not there today on audit engagement table so you can Define these fields as well along with adding the uh in ingesting the fields you can also see the table here in which you'll be able to see uh various tables that you can pull into this particular word uh template and then lastly the block so you'll be able to create a uh block for let's say repeating the information of the issues and I'll show it how how it looks like uh as well so in this case I'm going to go ahead and uh maybe replace this engagement name with the engagement name from my uh tables I'm just going to go ahead and add name let me go and keep this and add the name here I want to retain the formatting of it and I'm going to go ahead and delete it now this is a metadata that I've added similarly I can add the type if I want and it'll replace uh the the the type here so again this is the metadata that I added here uh similarly you can add your engagement plan and date you can add your objective result opinion this is where you can go ahead and add the custom variables as well like high priority number of high priority issues observations Etc then you can add your tables here I'm going to go ahead and add the entities table so if I come here I'd be able to go to the list of entities and I can also edit the columns that I want to add so this is the new enhancement that we did in the February release I can go ahead and add the columns I can reorder if I want to um so I'm going to add four out of five columns once the these are added I can say okay maybe the compliance score should go last owner should go first uh second field once I do that I'm going to hit okay and add this particular table so it's going to add it in the same order as I um added here I can also go ahead and format it so if I want to go ahead and maybe change the color on the header I'd be able to do that all right so I just highlighted them in PL and then once the report is generated you'll be able to see how that formatting is retained similarly uh I've gone ahead and added tables for issues and observations and this is the content blog that was talking about so I went ahead and added a Content block inside a Content block I have added Fields U that are associated with the issue so show number name description and I've also added the remediation task uh table here so it'll not only show me the issue information but it'll also show the remediation task under it so once I do that and I configure my template I can apply this template to my audit engagement and it'll generate the whole report for me based on everything that I've added retaining my format so I'm going to go ahead and uh go back to my instance this is the configuration so here I have taken I have chosen the table as engagement I've added the fields that I want to show in that uh Fields uh drop down so I've added the fields here and then um this is where you can add the uh different either custom variables like count of high priority issues or you can add the list of entities or H uh list of uh let's say isssues Etc and based on all this configuration You' be able to see uh these fields populated on the word document so that is where you need to configure first and then You' be able to see the same here and add it now let's go to the one of the audit engagement and actually go ahead and apply this template so I'm going to go to audit workspace and let's take an example of this order I would now see the generate report button which was which used to be available only only on the follow-up state of the audit engagement but now it's available on all the states uh so I can use this generate report and choose the template that which I want so in this case I'm going to choose Advanced audit report template and go ahead and generate it once it is generated I'm going to uh refresh this and I will be able to see how this report looks like now we added a new um couple of new Fields here in the reporting section we used to have a previously classic report template based on XML and HTML now we added a new uh option here for word report template so once you choose that this uh you the button will start showing up and the report that we just generated has been updated in this particular field either it's can be updated as a uh attachment or you can Define um Cloud document configuration and that particular report will be updated to a folder location which you specify now let's go ahead and open up uh this particular report and let's look at how that particular report looks like so it generated the whole report for me taking the name of the engagement the type of the engagement the uh the end date of the engagement and it also calculated the number of hyper issues and observations for me as well as the recommendations it it invested the objective uh if you also notice it actually added the um the table as well for me with retaining my formatting uh so it added a table it also added the list of issues here list of observations and then let's look at the content block as well so it added the content block a block for is shuee uh since we only have one isue it it didn't repeat itself but if you look at the observation we had more than one observations here um so each observation and the details of the observation will repeat itself uh so there's observation number one observation two three Etc so these are the content blocks that those that will repeat itself and lastly you see the number of like names of the entity owners and the audit contacts here so all of this is coming from existing service now record and you can Define this template for not only for engagement but for other um tables as well all right so that is uh what we I had so with that I'm going to pass it over to anob to take you over other uh some of the other features from the compliance side go ahead and awesome thank you so much Anri wonderful demo on the compliance and audit side hello everyone good morning and good evening this is ano I'm be covering on the corporate compliance um set of features that has been added so just give me a second I'm just going to start sharing the screen uh in the interest of time I'll just skip few slides just focus on what has been added as part of the yokohoma release this one slide just give an outline on what are the problem statement that has been added so just to give an flavor when we dealing with regulatory change management activity in the application for a compliance user the first and foremost activity that has been involved is to review and ass the nature of its impact what used to support in the tool till date was we used to provide you a risk-based approach where you determine these are your entities that is your business or your operations or your functions that are likely to impact it because of this regulat change now we have taken this to the next level by the adoption of smart assessment which has been launched last year we see a lot of benefits where the compliance team can involve multiple members and not to mention ability to configure and set up your own regulatory specific templates now what that means is if you're a compliance member dealing with multiple jurisdictions different type of regulations press releases and you want the system to have it configured in a way that if you're dealing with European Union a act here's your assessment set of questions if you're dealing with data privacy here's your set of questions now you can tailor it as per your need so with the power of smart assessment what we've introduced is you can fuse this capabilities into the whole regulat change program assign it to various members be it a compliance member the legal team and get their response accordingly documented which each of those responses will now influence you to perform a detailed applicable assessment study which you can actually initiate whether you are now ready to implement the change for your business or not so in the life cycle this is a uh an introduction of allowing you to do an either a risk-based impact assessment or a regular change impact assessment which has been powered by smart assment now what I will do is I'll dive into the application to give you a preview on how this has been configured and tailored for this I've just impersonated as a compliance member where on a daily basis this is a regulat change which is residing in their landing page now as you read through the details you will notice there is a change in the overall UI operations that has been laid out to start with there is an assess impact so depending on the nature of the impact that you wish to perform we giving you the options to either perform a risk-based impact or a regulatory assessment so what this allows you to do is based on the templates that you have configured here are some of those assessment templates that we have predefined be depending on the nature of the jurisdictions your Global regulations you can configure any number of the templates now as a requestor you have the option to select and choose which is the most relevant that you want to go ahead and initiate is it a gap assessment or a preliminary assessment where you want to determine how relevant is this regulatory change for your business followed by that you also have an option to assign it to either a group or multiple members within your business line of course within a stipulated temp time frame where you want the response to be completed say for example if you pick up an assessment template and these are the assessors you want to roll it out with a specific time frame you can hit the send button which will roll out a unique assessment to those respective individual members so for C reference here are set of those regulatory assessments that has been assigned to various members some of them you can see the progress activity which has been ranging from closure to open state for C reference we're going to run through the one which has been assigned to the self member which is Allison and as I preview the details this is the same structure and the responsive experience that you've seen as part of the assessment layout once you Kickstart the whole assessment response you can document and capture the response for each of the questions starting with the nature of its applicability how relevant or important is this and based on that if there is the nature of the conditional questions that can be considered for more details if you wish to see as a respondent what is the nature of that regularity alert that has been identified you get to see on the right hand panel where the details has been laid out in a nice card style view you you more detailed information what is the source of that information and additional details that you can uh review and work out on the subsequent sections depending on how you structure and organize you can go ahead and respond be from a yes or no base to free text or even if you wish to identify which are those relevant requirements or the controls measures that need to be revised in respon to the regulat change so as you can see this with the power of smart assessment we can actually embed within the regular program and tailored as per your need so this is one of the significant enhancement that has been of the Yoma release now I'll just move on to the next slide uh which is covering on the compliance case on similar lines um as part of the whole process of reviewing a compliance case we introduce the flexibility to work on those compliance assessments which needs to be you reviewed by various members with the power of smart assessment again what we have leveraged is the ability to Define multiple assessment templates roll it out to different members and get their response in a collective fashion in addition to that we are also introducing a task-based assessment experience which means for a respondent who is going to review and capture the response to each of these assessments you can perform it in a life cycle State approach ranging from new to in progress and identifying multiple members who can also contribute to your assessment as well so what this what I'm going to do right now is I'm just going to impr presentate as one of the case manager who has a case that has been currently assigned and waiting for further action or investigation over here as you see in the landing page screen here's a case that is currently being assigned and waiting for further investigation as you navigate to the action task here are a range of those assessments that are currently being assigned and waiting for further action let's go ahead into the details and find out what has been improved the first and foremost activity that you'll come across is with the uh the fusion of smart assessment you will have the option to select what is the type of assment questionnaire from your drop- down list for here for the example purpose here are some of those questions that has been configured and based on your selection criteria you can assign it to a task owner of course within a specific time frame that where the response has to be completed once you have acknowledged that this is now ready for collecting the assessment here's the TR progress activity of those assessment that has been generated now let's go ahead and review those assessment from a task based approach now this is a new improved experience that that I've just talking about where the case member who has been analyzed to respond to each of these assessments you get to see a home an improved homepage experience where they can review what is the nature of the question what is the purpose of that assessment that has been identified and of course more details that you can actually initiate for starters you can also initiate something called as discuss which means you would like to invite multiple contributors or collaborators into this forum where you would like to get their response into the consideration as well so this is another way where in you can actually bring in the whole notion of collaboration from multiple stakeholders in your business line you also do have an option to reassign sensing that you might not be the actual owner you always have the power to go ahead and change this ownership at any point in time now let's go ahead and start the whole assessment Journey this Remains the Same process as you have witnessed in across all the smart asmen life cycle demos where you can actually respond to each of those questions that has been structured for the specific case that has been identified and these are the range of question question that has been structured from data access to data entry and data integrity and you can provide your response on your timely fashion and as you see on the right hand panel you also get to see a glimpse on what is the nature of that case where and of course the action task that has been raised as well so everything right in front of your fingertips so you can actually get to the details of what needs to be responded in a timely fashion now as a respondent you have all of these options right in front of your screen ranging from submit and of of course to cancel if you feel that this is not something that I need to work on with that being said so these are the two major enhancements I would call out that has been added part of the yok release for corporate compliance to summarize for the compliance management team what we introduced with the flexibility to organize your questionnaires roll it out as part of regulatory change program as well as your compliance case assment and have your identified respondents respond to each of those questions in a timely fashion so with that being said uh we kind of reached to the end of the hour for the uh Journey for corporate compliance I will now hand it over to Emily to um probably the next set of action over to you Emily thank you so much anoop and wonderful demos uh you and anuri gave really really excited for these updates um just a reminder that everything you saw here today and more is available on the service now store and so since we're coming up to the hour if we did not have time to answer your questions today um please be sure to reach out to your service now representative and schedule some time with our team so that we can address your questions and talk about specific use cases that you may have you can also post your qu your questions in the GRC Community which you see here on the screen go ahead and scan that QR code or visit servicenow.com Community um here is your One-Stop shop for all things risk you can access onboarding kits assets to help you with your implementation planning training resources release notes and you can get all the information on our upcoming workshops webinars and Live Events so scan this QR code bookmark this site because you'll definitely want to check it out and speaking of events if you you haven't heard already upcoming is knowledge 25 knowledge is our exclusive in-person user event where you can explore new Innovations and gain practical guidance from thought leaders and customers expand your knowledge with on hand handson training labs and interactive sessions while networking with other industry professionals registration is open and it is filling up fast so don't miss your opportunity to join us in May in Las Vegas and if you can't make this event save the date for our October event we're joining forces with our security teams uh to host a three-day risk insecurity conference in Santa Clara join us for a deep dive into our risk and Security Solutions hear from our industry experts peers and product experts including an and um where we will learn uh how you can transform your risk and Security Programs with service now registration is open and seats are limited so make sure that you register soon and with that thank you so much for joining us today um make sure that you complete the survey it only takes a couple of minutes we'd love to hear how you uh how you feel about this session and others so that we can continue to improve thanks again to Anri and ano for all of the great enhancement today and thank you for joining us have a wonderful rest of your day

View original source

https://www.youtube.com/watch?v=jpg9nK44f6s