i think we've got a really exciting and interesting i think actually experts for you all today and thank you all for joining us um we really do appreciate your time i have a nushri verna randod with me today who is going to the product manager for audit and policy and compliance and she's going to run you through some of the cool stuff that we've done the reason that we're here today is because we have introduced some new applications on the servicenow store which we do on a fairly regular basis these are based on the quebec release so we've put together a series of that's the experts for you all we've actually run through the series this is our last in the series of four i'm so please go back and take a look at our our ask the experts for business continuity management where we went over some key new features a week later we introduced you all to the new um service secure um cis accelerators cyber security accelerators and we had radio on there with us to discuss you know how they helped us and then last week we talked about regulatory change management where we walk through the new features for that fairly new product and today as i said we have industry with us we'll be going through some of the new audit and also policy and compliance features and also touch on the cyber security controls and technology controls accelerator because we've had additional enhancements made to those so a nursery i will go ahead and turn it over to you but everyone else please at least put in the channel the email the url for this series we would love for you guys to go back and check them out and you can always ask questions on the community or in the youtube so feel free to go ahead and grab the screen on the screen and go ahead and take over thanks asa i will go ahead and share my screen we want to make this interactive so please everybody um please feel free to ask questions um it's always more interesting when we've got a lot of a lot of interaction stop that's green yeah please try one more time [Music] yeah give me one second oh yeah i can see that now here we go can you see my screen yeah i can we go ahead and put yourself in a presentation mode and i think we'll be in good shape all right um hi everyone as i mentioned i will be presenting the new features that we released in our quebec march release on both policy compliance and audit side um so this is the agenda for today where i will go through the issue management enhancements the policy acknowledgement enhancement and audit time tracking enhancements that we've done on the audit side as well um and uh so i'll start off with the first topic which is issue management enhancements uh what we've done here is we've added a bunch of features for issue management uh starting with the workflow that we've introduced for the issue manager so uh as we all know right issue management starts with issue identification last time when we met we spoke about issue triage workflow which goes through creation of the issues and then triaging it and identifying whether the issue is the actual issue or not now once that issue is triaged it is then identified and uh assigned out to an owner what we've introduced in the match releases we have introduced a issue manager role or issue manager persona basically what uh once issue is identified you can associate or you can assign that issue out to issue manager and issue manager is the one who is accountable for managing that issue and making sure that issue is resolved issue manager can also assign out the issue owners to the issue they can review once the issues are responded back and then then they close out the issue but during this process issue manager can also uh prioritize the issue they can assign a different issue rating and based on the issue rating the due date can be calculated and sles are also triggered for the issue owners so we've introduced all of this into our issue workflow which is existing workflow today and just to give you a quick summary of what we've done on the workflow here how how we've uh modified the current workflow so in the new state today uh the we have introduced issue manager field on the form on the issue and uh once the issue is signed out to the issue manager they are then uh uh they that they can then then assign it out to issue owners in a and analyze that uh issue once issue is confirmed um they can then go ahead and categorize our issue in two different uh different issue types so they can say if this particular issue is a high risk created issue and based on that um we we have introduced a capability where you can configure the different time frames and the due date is calculated accordingly um and of course based on the due date the slash attribute up uh in the response state nothing changes issue owners are the one who are responding to the issue and once they respond to the issue issues are sent back to the issue manager for review this is where the issue managers are reviewing their shoes and making sure the issues are resolved they can also request additional information from the owner and once the information is received and issue is reasonable and satisfactory they can go ahead and close out the issue so you can see a few changes on the issue form like i mentioned we've introduced a bunch of fields here so you have issue manager group issue manager we have issue rating that you can see and we saw the issue rating we populate the due date uh there are other dates there's one more date field that we introduced which is confirmed it which basically tells you when the issue was triaged and confirmed as a actual issue so that date is populated when the issue moves to either analyze state or when it comes to the triage issue once it's confirmed the state is populated apart from the uh these few fields we've always also introduced couple other fields in the form which is for as you can see policy and authority document so now you have ability to create issues against policy and authority document as well um and reviews in the review state as i mentioned issue manager can request additional information from the triage or from the issue owner as well so with that i am going to actually uh get into the demo um and show you how this looks like so let me show you we've got a question here um so so the issue manager is a member of the audit and the policy team and issue owner can be anyone in the organization if so does it mean that any user without a role once assigned as owner can view and edit an issue that is correct so what we've done is we've also introduced a new role called as business uh grc business user role today the issue can be assigned out to anyone in the organization with the grc business user role so it doesn't have to be a policy compliance risk role so these issues the owner of the issue could be anyone in the organization with that particular role and they should be able to edit their issues and respond to it which already exists today so that is the existing capability we've done some more changes for the issue owner which i will talk about when we go through the demo but issue manager has the role uh will have a role of either compliance risk or audit user or manager okay i think that answered it so here i have an example of issue triage which we covered last time uh when we went to the demo and um i have uh basically it's in the analysis uh phase and i'm going to just log in as the triage owner here and i'm going to show how this triage issue when it's converted into the issue how you can assign out the issues while you're triaging to issue manager you can identify the issue manager at that stage or if you haven't then you can obviously uh when the issue is converted and issues created you can also associate assign an issue manager to it so i am going to go ahead and to this particular triage issue which is assigned to mac um and i will go ahead and select the result as confirmed as a new compliance issue when i do that i have uh i see a bunch of fields here these are the assigned to fields which are the issue owners and these are the issue manager fields so while triaging also you can assign a specific issue manager and when it gets converted into issue that manager manages the issue going forward so i'm going to go ahead and assign it out to uh one of the issue manager here say carrie and let's also send it out to someone from a user with a business year jrc business user all right so anyone from the uh uh like the associates or table with that particular role should be able to uh work on that issue now once i do that i can also see that there is a issue rating field here an issue due date these are optional so if at this point while triaging you already know uh issue rating for this particular issue you can assign it out like for example if i say hi it is and if i save the form it's going to assign out the due date as well based on the issue rating now that issue rating uh can be configurable so you can actually have the time frames for a particular issue rating assigned out so for your i have for high i have four days uh signed out but you can always change the number of days and accordingly the due date will be populated now if i choose to select some other uh issue rating that should change the due date as well so now i will go ahead and complete my triage and that's going to convert that into the actual issues so let's go ahead and complete the triage once that is done it is going to give you issue number and when you log in into the issue you will see the issue manager uh is populated from the issue triage you can see the associated issue triage here and all the details that were given in through the issue right so you can see the selected issue rating and the due date is also populated you can also notice that the confirm date is also populated that is basically telling you when the issue was confirmed and converted into the issue triage so that is today so it actually populated that date and so you can report on that and then you have the due date which is calculated based on the issue reading so i am going to go ahead and login as issue manager here um and i i will uh what i can see as a ratio manager i can basically move it to analyze once the issue is uh confirmed and in the analysis state if i want i can also in new orleans state i can go ahead and change the issue rating so for example looking at the issue i feel that this is rather than high it is a moderate issue when i select that issue rating it gives me that warning that based on the issue rating the due date is going to change and it is also going to affect the essay so before i do that i want to show the sla as well which is populated based on the due date so it is populated based on the due date and it is currently in progress so if i change the issue reading it is going to get cancelled and a new sla will be created so let's go ahead and choose this issue rating which is going to update my due date and then it's also going to cancel out the previous sla and create a new one so this is the sla which will help the issue owners to track the issue uh it will also send out the reminder emails to the issue owners to make sure that they complete the issue resolution within time over the due date now at this point um i can move out this issue or i can send it issue to the respondent or the issue owner so when i do that uh able tutor should be able to log into the issue and provide the resolution so i'm going to go ahead and login as able tutor so evil tutor is the issue owner here now if you see there are uh some fields which are read only for example they are not able to change the issue rating or any of the dates but they would be able to edit other details uh your description or even under details they will be able to add action plan another change that we have done is the issue owner now can also create remediation tasks before this was restricted to just the uh grc rules but now the the person who is assigned as a assigned to person here should be able to create remediation tasks for the issue that they own so they should be able to create the remediation task and assign it out to the users or the members of the team um and once they complete the the their part the issue their mediation tasks are closed out now and then they can send it back to review so i'm going to go ahead and choose a respond here so this is giving the issue owners a lot more ability to manage the whole process really okay so it gives them uh to manage their own resolution including action plan remediation tasks yeah so just move forward and once they respond they can send it for review at this point the issue manager will receive notification that the issue is ready for the review and there are some modules that we've added for show manager as well that they can go and see what is pending for review so i'm going to go back and log in again as kerry so if the issue owner responds with accepting the risk basically they're accepting the issue does that require a policy exception be created no so it it does not but if they want and that's a good question but if they are for some reason not able to respond or immediate issue within time they can always create policy exception for it so we have existing capability uh for creating exception for an issue so that they get uh they can be exempted for some time and then yeah remediate it after that and then you we can also use workflows right i mean if people if you wanted to actually force that to occur you could actually put that as part of a workflow if the policy accepted it needs to go through an exception process yeah so is there a way to track well you're probably going to get to this there's another question that came in is there a way to track the time the number of hours it takes to perform the remediation tasks similar to how times are tracked in itbm or ppm um so that's a great question i mean out of the box we don't have the integration currently with the itbm time tracking or timecard but that's another enhancement that can be done easily or integration can be done where you can associate the time cards to actually enter time that you've spent on a specific thing or a specific issue i'm going to show a flavor of it when i come to the time card integration for audit but you can track time against an issue that you worked on as an auditor but from compliance or policy compliant side of side or the issue owner who's working on it we can definitely add that enhancement on integration in future yeah i think it might be interesting for another ask the experts for you to be able to walk through how you'd actually accomplish some of these things that you know you know you can do because you can do anything with the platform right but um you know how you'd actually be able to do it i think that would actually be a really interesting um session coming up yep that sounds good all right so what i did here is i logged in again back as an issue manager and there's a my pending reviews uh option here uh they should also get receive an email i'll show you the emails in a bit and then they can go to this issue which is pending for the review see the resolution provided by uh yeah by the issue owner and once the reviewer they can go ahead and close it out uh what they you can they can also do is they can request additional information from the owner so they can add comments here and once they request additional information the issue owner will also see send information button where they can actually add comments back so let me say info when that happens your uh substrate changes to information requested and it remains in review so now if i log in back as evil tutor they should be able to see the comments and also the button to send information so they should be able to track everything under activity and see the comments provided by the issue manager for information that they need and they can also send information from here once that happens the subset changes backs to information provided they will receive emails appropriately as well let me go back again as carrie who is the issue manager and then review the issue and close it out all right so once they are satisfied with the resolution and everything looks good they can now go ahead and close out the issue so we do have a question um back on remediation tasks so there's no restriction on the remediation task to the response of remediation um there's no restriction on what kind of a remediation task i don't i think the question is tied to remediation tasks versus response remediation okay so no so the remediation tasks are basically uh any number of tasks that you can create for that issue too for for you to resolve that issue right so as a issue owner you could create a mediation task for the various team members or even other teams from your like security team for example if it's a security issue in this case it's a facility access control so if if there is any remediation that you might want to assign it out to different teams you can but there's no i mean basically uh what uh what is uh usually done by the showner is based on the action plan they create a mediation task and assign it out and once they uh all the remediation tasks are completed only then the issue can be closed out so the i mean that we've kept it open so that you can assign it out as many tasks and however whichever task you want two different uh users and there's no restriction against what kind of remediation tasks you can create so it's very flexible and it's not it's not really tied to the response when you're accepted or whether you're remediated it's not like you're not restricted in any way whatsoever every organization is different correct it's not tied to a response right now like you can create it for issue even if you've accepted it but that's something that we are thinking of enhancing in future to provide that acceptance workflow as well if you've accepted the issue if you have any tasks associated with it but for now remediation tasks are open great thanks all right so that was end-to-end uh flow of issues uh basically issue manager review workflow and the changes we've made um and let me know if you have any other questions before i jump in there's no i don't see any other questions right now i think we probably will get some we get we're getting some great questions so thank you all for for asking these questions awesome so the next one is the policy acknowledgement enhancements that we did um and i would i would like to give a quick summary of what we've done so uh what we've done is we have provided an ability to schedule policy acknowledgements uh today it was all manual so you could create policy acknowledgement campaigns manually but what we've added is an ability to schedule it based on a frequency so you can select a frequency and based on the frequency and the first acknowledgement date the campaigns will be scheduled uh that is one um the change our update or enhancement we did the other enhancements we did is today there were some uh limitations and who can receive acknowledgement for example when i choose an audience for acknowledgement campaign and if someone uh while the campaign is going on and acknowledgements are sent out for the users under that audience if any new user is added in the audience the acknowledgement tasks were not sent out to them so we've updated that and we are providing now capability even if the ongoing campaign if anyone's added to the audience will receive acknowledgement tasks the uh the owner of the campaign could also extend or provide more uh time to the newly added user to complete the task so example for example they they were added to the campaign towards the end of the campaign and they don't have much time left for to respond the owner can extend uh the due date for them and they can respond similarly if anyone is deleted from the audience or removed from the audience their acknowledgement tasks will be cancelled and emails will be sent out accordingly so with that i am going to go ahead and demo um the policy acknowledgements the policy acknowledgement is great because it really could be any any functional group in the organization that could get this this this is a very again like if these were flexible this is a very flexible um enhancement that can be used across the integra across the enterprise yep absolutely all right so what you can see here is uh under acknowledgement set up for the policy uh the new fields are added for the frequency so you can choose on any frequency monthly quarterly semiannual annually and you can also choose the first acknowledgement date when the first acknowledgement campaign should be created and uh once you choose that date uh that campaign will be created automatically here instead of you creating it manually of course you still have choice to create campaigns manually but based on the frequency and the first acknowledgement date the campaign will be created automatically we also provide an ability for you to provide number of days to respond here which is basically number of days uh the users and that audience should take to respond back to the acknowledgement um and all of these are the existing features where you can uh specify audience and reference material and the campaign will be created there are also options around allowing to decline a request exception for the policy acknowledgement so all these are existing features now what i've done here is i have scheduled it annually and i have um stated that the first acknowledgement is of april 15 which is today um so when that scheduled job runs which runs every night the acknowledgement campaign should be created now in this case uh let me go ahead and run that schedule job and show you how that would work let me actually log in as a segment and let me go ahead and execute the scheduled job when i execute that which happens automatically usually the acknowledgement campaign is created because the first acknowledgement date is today this acknowledgement campaign is created with all the details that you've provided here so let me go ahead and open this up uh you can see that the audience is copied over the valid form is copied over um you can choose a valid to to be say end of um i mean you can all go ahead and modify it but for now it is based on the frequency which is annually so it's been april 15 2022 is going to be the value 2 which is automatically calculated but you can always choose to extend it as well now a number of days is also copied over so these are the number of days that the audience should take to respond back to the acknowledgement um and the call the policies copied over here acknowledgement results are shown here uh so we haven't yet sent it back to uh acknowledgement so nothing everything is zero i'm going to go ahead and click on request acknowledgement when that happens it generates the acknowledgement tasks for all the users under the audience and you can see that the acknowledgement results says that there are eight acknowledgements that are sent out and none of them are responded to now uh let me go ahead i'll just ask a couple questions here initially um so with policy acknowledgements if the user doesn't acknowledge in the time to respond is there a default response or does it close the campaign showing no response and stop the user from responding completely yeah it's a great question so what happens today is uh the users even though we are saying they should be responding in 30 days uh after 30 days from the uh valid from before 30 days they will receive reminder emails to respond if they don't respond even after that uh that they will be tagged as overdue but they can still technically go ahead and respond to it it is similar to the certification that we receive every year from our organizations and it gives us a reminder email or overdue reminder as well that you're overdue and you need to certify it is a similar uh mechanism so they will be able to still respond until end of the valid two but once the valid 2 is hit the campaign value is set the campaign is auto closed and all the responses are now locked down so then they would not be able to respond anymore so if there's somebody that is past the date where you've asked them to respond and they're getting these reminder emails is there some way to flag that in the system does it show up on the dashboard someplace that you know you've got certain people that have not responded yeah so we do send the consolidated email to the owner uh telling that after the due date is passed these are the users that have not been respon that have not responded as yet but you can also uh go ahead and create a report on it we have few reports here uh on on the dashboard which tells you like how many are pending uh responses or how many have been accepted you can also see the acknowledgement status so uh how many have not been responded to as yet uh if you want to see it by policy acknowledgement campaign or by policy you can also see the state by policy uh here you can actually see policy uh acknowledgement status by policy so you can actually see how many responded versus how many haven't per policy and there are other filters also that you can uh select and so and so forth so here you can see past it not from this is sort of an aging report where you can actually see how uh how what is the aging on the past you uh right how how if they have passed you by say five to seven days or more than two weeks or even more than two months this is the aging report which shows you that and this is the report for pending acknowledgement so you can actually see how many are pending acknowledgement per policy finally the report that you can see for the exceptions as well so you can actually see how many exceptions have been requested for a policy acknowledgement per policy so these are all the detailed reports that you can see and track the status and i can drill down into any of those to find out who the people are that are overdue with their with their with their policy acknowledgements so i can i can very easily action this um so so another question here is um if the user is added to the audience after the acknowledgement is already sent out yeah is there a way to trigger it to them or do you have to wait until some other time frame or frequency of that's a very good question and that is what uh what we've done uh we have enhanced that and that's what i was about to show so yeah yeah very timely so here uh for example if this is the audience right and the acknowledgement campaign has already been triggered the uh the acknowledgement tasks have already been created for these audience which are existing now let me go ahead and go to the audience and let's add some additional user here you can have uh you can add different users by different criteria you can add users directly you can also add a group or you can add user filter and based on the user filter the users will be automatically or whoever is part of the group will be added to the audience let me go ahead and add some in here ad hoc so let's say let's add able here so once i add evil tutor and i update this there is a scheduled job again which you need to uh which will run every uh nightly which will go ahead and look for the audience uh the additional uses that have been added to the audience and and it will send out the acknowledgement task to that user so i'm going to go ahead and run this so once i add that uh once i run that schedule java that is automatically run there will be acknowledgement tasks created for evil tutor and able tutor will have the same due date as everyone else now in case if i've added able tutor towards the end of the campaign like for example towards uh say i but today's date is april 1st 2022 and i have added ebay tutor at that time ableton will not get enough time to respond so they'll they will only get 15 days which are left right so in that case we also notify owner that there is an additional user added uh to the campaign but that particular user does not have enough time to respond so that is the information uh email that we send out to the owner so they they know that this is the case and if they want they can come here and extend the valid tool when they extend the value to the valid view date of only the additional or newly added user who does not have enough time uh will get additional uh i mean will get the new due date so they can respond um and respond in time and complete the campaign can be completed once they respond so those are some of the flexibilities we have provided that where the owner can come in and extend the campaign if required otherwise they can just keep it as is and it will be closed out when the valid 2 reaches so the system is smart enough to recognize that i have added teresa law to the campaign and when you as the owner extend the valid to date it will only extend it to me okay okay and everybody else after the valid two day the the campaign closes and they no longer can acknowledge the policies okay yeah well okay that's great and we have a lot of emails going on going out to remind to provide information to the owner to let them know what's happening if they need to extend it if uh based on the schedule there is an acknowledgement uh new campaign which is going to be created so the for the one that is uh running before is about to close we also send out reminder that there is a new campaign which is going to be scheduled based on your uh frequency so make sure that the current campaign is closed on time if you need more time you can extend so we send all those reminder or information emails to the owner so they are aware of all of things that are going on because a policy acknowledgement campaign is something that they don't come to very frequently so if something of this sort happens they need to be uh reminded or they need to have that information absolutely absolutely i think i think the reminders i think the reminders that are automatically generated is are some of the most um helpful that you know that we can do for for people because it that saves them so much time it's the time you spent going back and reminding people of what they need to do that it doesn't seem like it's a lot but when you actually add it all up that's a lot of time that people are are just in a sense wasting um by just reminding people to do their jobs absolutely and these are all the different properties as well they can set like so they can define how many days before the due date they should be reminded if they should be reminded every single day after that there's a flag for that uh if they want to uh number of days policy acknowledgement due to send the overdue acknowledgement so how many number of days after the due date you want the notification to be sent out if you want to send out every single day uh if you want a summary of all the acknowledgement the status like how many are pending versus how many are still not before the due date we also have that set setting your uh sorry property here so you can have that uh so a lot of like uh flexibility as well to whether you want to send out an email or not so you can configure accordingly yeah that's fabulous that's probably one of those this is somewhat simple but it's probably one of the most useful enhancements for quebec for policy compliance yeah and lastly when a particular user is removed from the audience they will their instance will be cancelled out so let me go ahead and remove ableton once again and you can and i can sorry run the schedule jar once again and once that happens you can see that the instance for our acknowledgement aspirable tutor has been cancelled and i also want to note uh specify i also want to show something here that when we show the total count here we actually omit the cancelled one so previously the total cent was nine and since it was one of them is cancelled it is now our total centers eight so we've also accommodated that into uh this acknowledgement results calculation so there's a question um i think we actually might have shown it um are there any out of the box dashboards on the policy acknowledgement responses i think i think we went through that um just previously yep so this is the out-of-the-box dashboard for all the acknowledgements related results yeah fantastic yep that's great and then you know people you obviously you saw where you find it under policy acknowledgements um and then overview on the left-hand side there's the navigation yeah if you want to see anything which is over you yeah good question though i like the dashboards dashboards are still very important to be able to summarize information and really bubble it up so everybody has the information they need and it's a great way to have a conversation where everyone's on the same page and you're speaking the same language yep absolutely all right so any any other questions on policy acknowledgements no i think we're good awesome all right so the next thing i want to show is sorry the audit time card integration this is a new feature we've added to our audit planning capabilities so last release in last october uh quebec october store released we released bunch of audit running features including audible units audit plan milestones evidence collection and observations and along with that we also released uh cost and resource planning uh integra and integration with our project planning portfolio project planning application from itbm so uh those were the features that were released in october what we've done in march is additionally we've indicated with the time card uh management from ppm as well so that is something i'm gonna show today so a little bit of background on the uh time current uh basically so all of us know that uh tracking time for the things that the auditors worked on day to day and understanding how much time they spend versus how much was planned tracking that manually can be really cumbersome so if we can capture that into the system where you can see how much time a particular auditor has spent on certain uh tasks versus what was actually planned uh that would be really good to see so what we've done here is we've integrated as i said with ppm timecard and we are providing capability to the auditors to submit the time cards against that things that they worked on like uh any um any audit tasks any issues any milestones or any other things related to the engagement that they would have worked on and once they submit the time cards uh there is an approval flow around it so someone from engage as an engagement owner or from the ordered team can approve those time cards and then you can actually see the rollup of the actual time which was spent and the even the actual cost that was uh related to it on the engagement and also on the related plan so this is just a quick view of how we've integrated with ppm so uh on the ppm on the left hand side you can see portfolio program project uh resource plan cost plans coming from ppm uh what we've done uh is we've on the engagement side we have integrated our engagements with projects from ppm um so that under the engagements when we have audit tasks milestones issues the auditors can track time against these tasks as well as they can that track their time against the engagement and once they track the time or they submit the time cuts these time cards when processed create expense lines on the project side uh which provide the actual cost that is related to the time that was submitted so this is how the integration works uh and i will show you how that works in the system um so this is just a screenshot of how what the changes that we have done right so on the engagement you can see under project details the timecard approvers field which you've added by default it is populated with the engagement owner but you can add multiple approvers as well and there is the time card related list which was also added to the engagement where you can see summary of all the time cards that have been submitted for that engagement so with that i am going to get into the demo and show you how that works um give me one second there's some glitch so we're doing more and more of the um these integrations between our products um not just in in audit but also in our risk products you um hopefully caught our risk as the experts where we talked about our ppm and our apm integrations to be able to do project risk assessments and application risk assessments the cyber security accelerators that we talked about a couple of weeks ago actually provide a fabulous integration with security and itom um we have actually quite a few products that our that are utilizing other products in the servicenow ecosystem because that's one of the huge benefits of having servicenow is once the information is in the platform you're able to use it for a variety of things whether it's through audit to be able to track time cards or resources or costs or whether it's to be able to identify new applications to be able to automate risk assessments um lots of different applications yep all right so sorry about that can you see my screen absolutely yeah all right so here i have my engagement which is the cyber security engagement and i do see the time card tab here this related list appears when you enable uh engagement or pro plan as advanced planning uh which creates a project in the background uh and uh and and then shows up all these different tasks so it shows resource plans cost plan and time card which is the integration with the ppm application now on the times card side which is from their ppm they do have a time sheet policy so this is how the time sheet policy looks like so what what is what we want to pay attention to is this non-project time approvers here is where uh you can either choose i mean there are different options here so if you choose auto it's going to auto approve the time cards which are submitted if you choose a user manager it is going to send the approval to the user's manager who submitted the time card but if you choose a none which is what we've done by default it is going to go ahead and request approval from the user that you've selected under time card approval on the engagement so that's what we've done here so we'll keep that as none here and i'll show you how this works now on on your as a auditor let's say i have a login as amaz i would want to submit time cards for the work that i've done how we i can do that are is through different means so let me go ahead and log in as amos once i login as most i can submit my time cards in different ways so this is the time sheets menu that is available from ppm side so i can actually go to the time sheet portal and submit my time card from here or i can go to the engagements and submit the time card from the audit tasks that i am working on so let me go ahead and a time frame now you can see that this is the control test that is assigned to me is available here so i can actually go ahead and add it to the timesheet i can also add something else if i want to like a field work or i can go to other types of tasks as well which is basically if you have like a training that you've done or a time off that you've taken you can actually add that to the timesheet here let me go ahead and just submit this particular time card um and let's say submit i can also add like other things as well but uh let me actually go ahead and add time here so 8 hours once i add my time here it also calculates the total and show it to you and i can go ahead and submit it once i submitted it is going to now show up under the engagement as well so so the submitted time card will show up here now that was one way of submitting your time card another way could be from the engagement server so i've already submitted a time card for audit tasks now if i want to go ahead and submit a time card for for say uh this particular milestone i can go ahead and create a time card from here as well so i can go ahead and add some hours here and submit the time card which is also available at the engagement level or i can go ahead and submit some time against the engagement itself so let's submit eight hours per day so all these time cards are now uh visible at the engagement level let me go ahead and submit it so the time card approver which is by default bird will be able to see all these time cards that have been submitted and they will be able to go ahead and review and approve it so let me go ahead and login expert they can either go to time card uh time cards and pending approval and approve it from here or they can go to the engagements and approve it from from there as well so what will be able to see all the time cards that have been submitted now one thing i want to show you is the expenses and resources so this is uh basically the expenses and resources here you can see that the planned resources are 200 hours um and plan expenses are 15 uh 15 000 so when i submit approve these time cards the number of hours that have been submitted in the time cuts will be rolled up under actual resources and the associated cost will be rolled up in the actual expenses so let's go ahead and approve all these time cards once the time cards are approved like i said it it looked at the total uh number of hours and it rolled up at the actual resources now uh at the same time based on the submitted time cards it would create expense lines on the project side so let's go ahead and look at that so if i go to the related project this is the engagement project table that we have created which is a inherited table from the project so here you can actually see the three expense lines that have been created for those uh submitted time cuts now there is a scheduled job which runs every night which uh processes these expenses and once these are processed the uh the actual cost will be rolled up so let me go ahead and uh basically process them manually for now so um this is maybe a way that you know the earlier question a way that to track the remediation tasks that the people are inputting to be able to address issues yeah absolutely okay okay yeah yeah so these are the timecard submitted for the issues as well you can submit timecard against issues and once the expenses are processed you can see the actual call hold up here and when i go back to engagements you'll be able to see that on the engagement and also on the related plan so these are the actual expenses that have been brought up and if you want to see uh on the plan level as well you can actually see the actual expenses rolled up at the plan level and these are the total of the actual expenses from all the engagements under that time currently we only have one so it only rolled up that but it will roll up from all the engagements under that time so this is so this is available through project portfolio management yep so the customer does have to have ppm um in order to take advantage of these these enhancements yes okay awesome and we have only few minutes left so i just want to highlight one more thing which i have not covered today is around the uh accelerator the technology controls monitoring accelerator that we had released in october but what we have also done in march is we've automated uh more indicators so there were some manual indicators uh that we converted into over 50 indicators that we converted into automated uh and uh scripted indicators for the our cis or cyber security uh controls which are uh the securities uh cis controls as well as the iso controls so these indicators are monitoring the control that we're providing as part of the accelerator so we've we are providing more automation around it so uh you can actually uh see look i mean download that application and see uh the number of indicators that we are providing you which are automated indicators yeah and and that's that's actually a really good point um because we as we mentioned earlier you know we did do a session uh with credio a couple of weeks ago so if you know we encourage you look in your chat you can get the link or if you go out to the channel you'll be able to find it we do encourage you to go back and watch that because that's going to give you a lot more information about the cyber security accelerators and also what tradeo has done to help us facilitate that so thank you so much industry i don't see any more questions right now in the um in the chat and or in the q a section i'm going to look really quick but what i do want to point out for everybody is that you know we do have our grc product site servicenow.com risk where we have lots of information about policy and compliance and audit and a lot more you know please join us on the community and as we just discussed there are a lot more other ask the experts out on the youtube channel where we um we look forward to to interacting with you there please ask questions post questions in the community or on the youtube channel and we will be very happy to to interact with you i do see one more question um can you use i believe it's around the accelerators can you use the accelerators even if you're not using the security operations module yeah absolutely so the accelerator actually uh points uh like have indicators that are pointing onto different applications so of course there are some um indicators that are useful when you have like that that will be run when you have the security products installed like vulnerability response or security incident because if you're talking about cyber security cis controls many of them are related to the security right so there are indicators that will help you monitors or security controls but if you don't have this security product installed but if you have for example like a cmdb or other discovery products that are installed there are a bunch of other indicators as well which will be used to monitor some of those controls so it really depends on what applications you have installed these indicators will be useful uh and we are actually coming up in june we are providing you with the status operational status report which will let you know what applications you need to install in your system to you make use of a certain indicator right so it'll give you that view of what is installed in your instance what is not installed and what indicator you can use to monitor certain controls wonderful all right i think that's all for today thank you all for joining us i hope you found this as interesting exciting and worthwhile as i did thank you initiary for walking us through all of that you know it's always really great to see all the new stuff that's coming out every couple of months on policy and complying as an audit thank you everyone