#ServiceNow #Rome Antics: #GRC #Workspace - LIVE Unboxing
hello and welcome to phil goes deep it's friday and first of all i wanted to apologize if uh or to the live coding happy hour crew because um i realize there's a scheduling conflict so i did try to work around the friday night you know they just got back into the friday uh cadence and live coding happy hour is also live right now so if you want to see how our games are made on the servicenow platform check out the servicenow dev program and apologies for the scheduling conflict however if you are here for uh the new grc workspaces i'm going to unbox them live this is rome antics okay so first session i've done on rome grc workspaces have now been released you will have seen it in the press uh it's been announced there's lots of activity lots of information out on the community videos coming up i'll try and link them all in the description but rome patch one went into general availability yesterday i've upgraded my pdi i've installed the grc workspaces and i've all i've done is just check that they got installed okay i've not really looked around so tonight's session or today's session whatever time zone you're in yesterday's session is all about unboxing of the grc workspaces and i'm just going to apologize for my green screen it's uh it's not playing ball but i think it looks alright once i get into the screen share so before i get into that as well i just wanted to one thing i've been meaning to do yo 80 am akira anarag thanks for tuning in appreciate it one thing i wanted to do before i get into it tonight i just i was going to do a separate video i don't think i'm going to do that i just want to let you know why hackathons are worth entering okay because i messed around uh in may with now experience tonight is about now experience i messed around with that did a hackathon alongside the other rangoo crew they had a separate team um i entered the hackathon built and now experience to help me with streaming i'm not using it right now but i do intend to and i just wanted to just let you know the prizes because they've all arrived and i haven't really told anyone about this so um let me just uh let me just switch over yeah so um i've got a a very nice plaque this is metal and it's got a bottle opener on the back it's not really a bottle opener that's for um hanging out up on the wall but that's metal uh it looks very nice that'll go well in my trophy cabinet create a con hackathon what did i win it for finalist and best app started with app engine studio obs overlays with app engine studio so that was a you know in itself very nice the other thing i got was a rocketbot rocketbook fusion this is um i i don't want to open it just in case i've got some notes in there but this this is like you can wipe it it's real it uses a pen uh and you can take a photo on your app you get a rocketbook app you take a photo on the app and it will transpose it do ocr optical character recognition and it's got little icons along the bottom so whatever you tick it will automatically do that thing so it will email it or it will save it to your onedrive or evernote whatever yeah so rocketbook fusion and and it's completely reusable erasable geek error triple charger here this is a wireless charger so you you put your phone on the front um watch on the top bit and air pods there so it will charge all three in one go absolutely stunning i just don't have a digital watch uh or airpods right now but that's a good reason to maybe add them to the wishlist for christmas and finally i know i've got two two more things this is incredible this is a water bottle lark water bottle so um yeah it's it looks like a little alexa um play play clean my water yeah so that is a self-cleaning water bottle um it's got uv in fact i had to replace the lid and they lark were very quick so that's got a uv light in there and it cleans your water for you so yeah it's got sports mode that adventure mode so you can drink out of rivers and stuff like that i don't know but it's a nice looking water bottle it's uh much appreciated and this final prize i haven't tested it yet because it's still working remotely but um i can't wait to get this look at that that's a laptop north face servicenow anyway that's the swag update for the hackathon create-a-con 2021 so i just wanted to let everyone know i'm chuffed to bits with the prizes and if you're thinking about uh if you're thinking about entering a hackathon i think i'm not sure whatever it's well worth it okay so just just catch it up on the chat 18 man what are you logging off for just got here we're just getting started out to um out to dhruv out to 80 a.m where's rj rj's loitering or what do you call it um lurking rj's lurking man i've seen him he's not making himself known in the chat but shout out to rj uh and anyone else rj might have gone missing shout out to rj he had all the right intentions so uh if you're just tuning in this is phil goes deep and tonight i'm going to be unboxing the grc workspaces rome patch one has just been released grc workspaces have just been released they are dependent on rome if you've got early availability um rome installed on your pdi upgrade it okay you do need to upgrade it the new ui builder and stuff it's been enhanced okay so get rome patch one installed on your pdi i believe they're available on on all instances now as well hold on yes rj yeah he's he's tuned in man thanks rj yes he's in the chat that's a lot of swag yeah man i'm very happy with the uh with the prizes um let's get into it let's get into it uh so switch it's been a while since i streamed actually lower right yo so switch it up here we go this is rome patch one and by the way if you're maybe i need to find the link but disco beta release i've put it on share so if you go on to developer site go to connect find the share site and type in discode beta release is available for quebec i'm working on the scanners but you know it's a work in progress so rome patch room patch one if i go to let's where should we start ui builder if i just kick off ui builder um just so that's opening in the background and where do we start should we start with risk should we start with compliance should we start with audit there's vendor risk what are you drinking yeah 80 is getting mixed up with live coding happy hour but you know my what's that stream if i got a water i've got a watermark i put a watermark on my thing haven't i hold on let me just fix this up that should be a bit better i think i forgot i did that i added a watermark thought it was going to add it to all my old videos um and it looks like it's added it to all the new ones so hopefully that comes through okay right we've got shouts for risk vendor risk rj's trying to catch me off guard man calling out vendor risk right policy in compliance and then risk well let's start with risk i'm hearing a lot of risk there um but i appreciate that akira i'm going to get into it so if i type in now risk in fact if i type in workspace you can see now under audit we've got audit workspace business continuity workspace now that's kind of bcms had a workspace for a little while it's been revamped i don't want to get into that right now but compliance workspace vendor management workspace that's different to the vendor risk workspace risk workspace down here we've even got oh okay regulatory change has got the compliance workspace on there so we've got configurable workspaces if i click risk workspace let's just see what it looks like and by the way on the application plugin list i've clicked irm suite i've installed everything irm it took a little while i've installed everything with demo data so this is the workspace so you notice that when you click it you've got a little arrow there that pops out into its own tab and this is now i'll configure workspace okay i've not seen that link before but yeah this is your workspace so you've got here your home this is your landing page so let's look at the url i don't think you can see you don't see the url in the screen i'm afraid but it is you know servicenow dot com forward slash now forward slash risk forward slash risk so you'll see forward slash risk forward slash compliance risk forward slash audit etc so risk is kind of the the base so i think like at saying let's start with risk yeah um everything's kind of surrounds risk this is the landing page risk management um we've got the overview on the kind of two-thirds on the left and we've got tasks on the right it says i've got no pending tasks we've got some quick actions here conduct control tests manage open issues create new control risk indicator but in our overview panel risk profile risks with rating three i wonder why it started with three there we've got 36 it says where's three 37 okay so three moderate 37 there 36 here so something's not quite adding up these are entities calculated scores three i'm just wondering whether calculated score here is a calculated score from the kind of legacy risk if you if you see what i mean rather than the advanced risk so we can have a look at that needs attention 25 open highest risks okay so we've got 25 risks without mitigating controls interesting and you can see there that's clickable the 25 can be clicked overview tasks across organization so 1000 overdue tasks nine issues 985 each of these are clickable 94 remediation tasks so 994 998 okay maps are good there tracking control test status remember this is the risk dashboard okay so this is risk management but just it's curious from a risk perspective we are looking through the lens of kind of an auditor here control test they belong to audit issues and remediation tasks they're generic but over here we're talking about control tests again we've got no data for our indicator status uh anarag's asking have i migrated to advanced um it's a good question um you have to excuse some of the styling on this pdi as well if i go down to i'm thinking for anyone that's building an app you should prefix your you see properties is properties properties properties right i think if you called that risk properties it would be so much nicer is it in grc properties properties is it not in here anarag i don't think it will make much difference on the workspace to be quite honest with you i've got glc advanced risk got it installed ah advanced risk it's got its own menu it will bring in additional charts yeah but this is workspace yeah i like my great okay so i haven't migrated it's a good call though let's see does it make any difference okay that's updated my bet 80 i bet it doesn't how much because we were talking about the the scoring concept in this workspace i don't think it's going to make any difference if we're on advanced or not wow 80 man you win the bet i was wrong happy to be wrong about that though it seems to have changed it's changed it all up hasn't it let me just refresh that again see if my eyes are deceiving me no look at this let's change the inherent rating risk profile okay there's no data because we haven't fully gone through that process let's just see this again if i change this back then anarag were you guessing were you guessing there or were you informed was that an educated guess so i've unticked the property i did not expect that to to come through on the on the experience itself so that's actually pretty sweet yeah yeah look at that you see how the list switched and the data's changed okay that's nice well i'm going to switch it over because i believe within the risk um within the risk experience part of the experience that we're we're going to benefit from here is the taking of a risk assessment you know for a risk assessment methodology so that should be if i click in here tasks so we've got home tasks issues overview and list says i've got no pending tasks i might need to go and assign myself something let's just look at the issues overview i quite like that icon you know it's kind of a clipboard with an exclamation mark overdue issues okay so we've got the overview what a group by state finalize with vendor so it's pulling through vendor vendor risk issues as well new respond review i don't like the colors first impressions i mean i don't mind the pink i don't know that it looks like a snooker table that's my first impression so my issues managing to review it's quite interesting the way they've broken this up and i think if you've not seen any of the work um workspace now experience stuff just take a moment to consider the complexity of grc right you've got if i was in a workshop now with a customer and trying to explain grc to them i'll get the pen out i get the whiteboard out and i'll start with the authority document so you've got your iso 27000 up in the corner and then i'd start drawing out all the different um elements of it now that's fine but in the platform in the back end of servicenow for somebody that's new to servicenow new to grc you you end up getting a bit lost because you you're in the form you're in the related list and you click and you click and you click and you're going the right way and you're navigating around but you lose that context okay in here in the workspace it's presenting like relevant information to you at a glance now i've only gone into home pages right now i'm telling you this these are kind of like dashboards these are overviews but that's where that's where the power of this is if you imagine on a dashboard you can put a chart and a chart right here you can put a chart but this is not a chart over here this is this is like a widget or a component okay that's the correct word for it it's a component plus we've got some actions we've got filters okay so i can actually i can actually filter my issues by entity i don't know which ones i want to look at though so if i just do that and apply it that is nothing i'd have to work out which one it is but i've also got actions okay so i can create an issue a remediation task or i don't know what an issue rating is create new issue rating issue rating is mandatory what is this remediation time frame asap i don't know what an issue rating is okay save or delete and maybe we'll come back to that but look at these breadcrumbs okay so we know where we were and we can get back to it issues overview it's contextual and and you keep that journey let's go into an issue let's look at our 909 overdue issues that's a vendor issue facilities these all look a bit it might be tied to vendor risk so now i'm in an issue okay you can see how i got here i came from the issues overview list view issue so we've got our breadcrumb if you think what what is a breadcrumb i don't know how many people uh know the fairy tale of hanson and gretel but they got lost in the woods grc is a perfect um analogy there because it's very easy to get lost in the woods in grc if you sprinkle bread crumbs you can find your way back so here we know where we came from now our related lists rather than being buried down the bottom they're at the top so we've got all that related information up here plus we've got this section on the right hand side the sidebar so we've got some additional information here and we've got our attachments we've got our state flow across the top which is something we've all come to know and love with the chevrons in the platform here it's looking a little bit more modern maybe um is this changing the actual state of it that would be strange if me clicking that change the state let's just see if i hmm status details now state new that's a bit misleading isn't it that's a bit misleading why would i be able to click there click save it's not actually saving anything okay so our details tab so here okay that's nice you've got the overview tab the overview is giving you a summary type something here post the work notes brackets private but if it's comments this is for everyone where are they coming through here type something here slight delay there not quite real time but yeah if we go into details and we change the state respond hmm we've lost our kind of tabbed form sections at the moment on issue so if you went into the platform you'd find that you know this okay so we can let's just grab that issue number nine that's great that yeah let's just grab that issue number and look at it in the platform and we compare notes yeah akira i know you wanted to see policy and compliance and then risk uh sorry so i started with policy comply with risk um i've gone into issue there's so much here there is so much here um i don't know i've got no no map about where this journey's gonna take us so this is the issue if you look here we've got our kind of summary at the top details tabs you know it's kind of organized regulatory task wow because i clicked installed the irm suite when i upgraded here we've got maybe a little bit of yeah and i've collapsed assignment and i've collapsed schedule now that makes sense but i feel stacked for you can we change that then i feel like that's not the best use of of layout so i've moved to respond now i see the respond phase if i move back to analyze i've lost a response okay so let's just see that in action if we collapse these details surely details should be at the top right so if i change the state to respond hey look at that okay so it's quite nice it just you know what it is there's so many changes here i cannot expect this to be perfect so i don't want anyone to think this is critical i'm just i'm just taking it in and i'm thinking out loud response remediate this is fixed now yeah save that mandatory fields are not filled in dot dot dot okay assigned to issue manager cool where are they assigned to i guess assigned to save that so this is part of the reason i wanted to do the unboxing not just to look at the workspaces because there is a ton of material coming you've got stuff coming on the community that is not just um it's not just a kind of let's figure this stuff out they're going to present this stuff in a very meaningful way and how it's intended to be used and what the thinking is and where it's going and and i will share the links on the description for that this is absolutely um not trying to not trying to answer some of those questions the questions i'm trying to answer is issue management particularly is is an area in grc that comes pretty open it's up for you to decide as the customer how do you want this stuff to work so for me as a consultant working on a project for a customer that wants to help those customers achieve their objectives and they get this new workspace well first of all i wanted to take a look at it um ui builder is going to allow me to configure that workspace okay now we need to think about how do we stay out of the box right that's that's the constant challenge right now because we want to make upgrades easier so how do we stay out of the box when we're dealing with a new workspace that needs to be changed and i'm still getting a bit more information on this but if you look here risk workspace you can see here the url path it's risk slash risk um risk has got a portal as well uh maybe we'll dive into that whether we've got time risk slash compliance risk slash audit and okay this is common workspace elements i don't think there's actually a persona based thing here in grc workspace i think this is enabling all the others so if i click risk workspace and am has got a question am's asking do client scripts work in ui builder um it's a bit different it's yes is the answer but are they the same client scripts that work in the platform no okay it's different it is different now so um let's see if we can see if we can explain that but there's a ton of another ton of material on ui builder check out developer.servicenow.com check out brad tilton's blogs and everyone else check out ashleysn.com ask these blogs on ui builder andrew p so much stuff out there okay so let's take a look here we've got our risk workspace grc risk management workspace okay so in terms of scope now grc wow there is loads loads and loads and loads and loads of grc applications now i did install every single one of them so it's my bad but glc risk management workspace it comes with its own scope let's just so we just switch that over here let's just um ask because i've got this code selected up there i was going to refresh the whole ui builder so my understanding of ui builder now experience and this new user interface is that it's built on web components using similar technology to react it is not react but it's like react it's using events to pass information between components on the page so an experience is a collection of pages it's like a site or a kind of what you might have thought of as a portal before but don't get confused with portal and hopefully i don't blur the lines there but an experience is a collection of pages that all lives under a url so you can see here our url is now slash risk slash risk slash home so this part of it risk slash risk it's kind of that's our experience root and within risk slash risk that's our experience so within there we've got a set of pages and a page is a collection of components those components are standalone and if you go to developer.servicenow.com you will find in the api reference material lots of stuff about out of the box components that are available for workspace those components on their own don't really do a lot you need to connect the components to the data or to events and those components have got their own events so for example if we look here you know if i look at the home page for for this you've got you know a number and if we look at that workspace if we go back to the home there will be an event on there that's on click yeah so down here maybe it's this one okay the 1088 is not clickable where are we oh we're in a risk home overview am i in the same place risk summary that looks like a drop down hmm risk slash ah that's risk slash risk home i think i'm in risks less risk that's home not risk home different page so that's home home okay here we go you can see where these when i'm hovering those there's some kind of interaction and if i go and look at this as a component in the config events sorry look at that okay saying deprecated but visualization clicked so that's an event so it's saying when this happens do something now that event might pass information to another component and information moving around now one thing to be aware is this it's asynchronous so i don't think it's predictable what order events move between components on the page uh there's pros and cons to that but it's just worth being aware down here on the left hand side of ui builder you've got data resources so this is how it's connecting to the database and this is using typically using some kind of glide query no not glide query graphql some kind of graphql api there's not a lot of data here actually considering what we see on the page then we've got client state parameters and then we've got page scripts so these are called page scripts but they are running in the client so it's it's kind of front front end just trying to catch up on the chat i got distracted because i i switched over and saw quite a lot quite a few in there so yeah there's i'm not trying to teach you ui builder here there's loads for me to learn but just to try and give you a bit of a bit of a starting point you know can you use client scripts everything you know about the platform is still true however everything you know about the ui is subject to change now in ui builder in now experience that that's the kind of what i've gleaned from it but your data model your logic your flows everything like that still works exactly the same way a lot of these data visualizations for example this is going to if i connect that if i click on it you can see where it's connected and the data a lot of times it will connect straight into a performance analytics indicator so you're seeing you know that advanced analysis very easily visualized inside of the experience and it's contextual so how do we configure stuff we come into ui builder but we don't want to go changing this page right we're in the root so we've got variants here you see risk home default what we would do is oops i scrolled as i clicked we would click create i'm going to discard changes because i don't want to make any changes to the out of the box what would we call this variant i'm going to call it pgd now if you start using templates they become read-only so this is the thing i'm i'm still going to get my head around it's going to take a bit longer and and if i can i'll try and share some of this stuff with you but i know that if i in the past when i've created a variant or a page from a template that then means you get the template and you can only configure certain certain parameters there you can't really customize it it's it's not really configurable so you have to start from none but what i really want to see is kind of i want to clone i want to copy whatever that is if it's a variant of the same page you know let me copy it and then change it that's what i'm hoping that's what i'm expecting just reading some of the uh some of the chat i missed out on okay so look success i've created the variant now we set audiences and this is a key point of experiences if you look at how uh these experiences these workspaces are being kind of touted how it been talked about it's persona based and in fact i want to check but we should be getting some new roles if not now but in the future some kind of risk analyst role operational risk analyst operational risk manager and you will get a different experience you'll go to the same url the same workspace but because you've got this role because you're that kind of audience you'll get different experience and it's tailored to you and your persona so that's one of the other kind of high level benefits you can set the conditions order for audiences i'm just going to say done look it's a blank it's a blank canvas now so if i want to make changes i kind of have to refer back to this one and start from scratch but you know you've got some pretty nice way of laying this out you've got containers you know you've got an icon there stylized text stylized text here you can see it's running some code api context session so all of these are objects that are available to us the api.context.session session variables and it's saying welcome back all right so then it's got my name from from my session because it knows who i am what's this over here i intend to i intend to heading so this is a component what is it a link set okay so it's just it's taking an array so you can push arrays into here result.push result.push so if i wanted to add new links it's not quite low code but you can see here result.push it takes an object as an array so it's an array of objects and it's doing some checks actually it's saying if if i've got this plugin installed and probably 80 that's where it's checking have you got that property enabled then you get this behavior if you've got that property enabled you get that behavior so you know that's how we can start to configure this stuff a lot of this stuff is just summary so up here we can go risk home that's a page but i've got two variants so i can create a different variant a different experience for a different persona or just customize it deactivate the other one you know keep it out of the box i'm not sure exactly how we maintain you know can we copy can we copy that duplicate there we go man that's that's what we want so let me just this one can i delete this idiot in ui builder it's worth being aware there's loads of menus that you might not see so you've got kind of these vertical kebab menus there's also where have i seen it before yeah there's they've put a lot of functionality into into quite a small space it's very compact so just be aware don't don't overlook these things it doesn't look like i've got the ability to right click doesn't work um doesn't look like i've got the ability to delete that one oh there we go delete edit get rid of that so i'm very thankful that the ability to duplicate is there because i was a bit worried i was a bit worried that i was going to have to start from scratch so duplicate just trying to catch up on the chat as well so how is rm more misleading than risk no way to ignore um do you know what i've i've missed the whole load of this um yeah irm would be misleading yeah kieran there's no way to ignore ui builder but it's it it's not something that's going to be that intuitive okay it might in my experience i've been trying to get my head around it all year but not that actively so i've kind of dipped in and out of it i was really waiting for this i was waiting for the used case if you want to know more about ui builder check out developer.servicenow.com check out ashleysn dot com um ashley snyder's written so many blogs brad's written so much content as well if you want to know how to use ui builder there's there's a heap ton of stuff over there this is now kind of the the business units within service now so risk compliance audit saying okay we know how to use it here's how to present all of that information all of that forest of uh information and here's a few breadcrumbs so you don't get lost along the way so i've got a new variant but look at it i can change it now if i change this i'm not changing the out of the box so i can change this and say howdy there we go okay so just as an example let's have a look james foot yeah shout out to james thanks for tuning in man hope everything's good with you i doubt they are utilizing the risk event part in here i would love to see the component templating in uib yeah this is the thing once they're kind of once there as a component that you're consuming you don't have access to the back end source code of of that component there's there's a kind of compiling that takes place uh that that means we can't access those components i believe 80 says i will build all the components i don't think i will wait to be honest with you hacktoberfest last year we tried to build components and we uh we got a bit lost but if you do want to build custom components check out brad's blogs on developer.servicenow.com because there's a guy that knows this is the the this is my workspace so i could change this if i want but let's have a look at some of the other pages and how they're built um so record that sounds like a kind of template it's read only so you see that message at the top page template has a protection policy but look at the parameters risk record table sys id which means if i go to let's find a risk in here risks how long have we been going 45 minutes i've unboxed uh like only open one box but this is this is what i wanted to get into really it's just looking underneath it seeing how it's configured if you want to know how the workspaces work and what's the journey what's included like i said i will update the description there's there's i've also got an article i've posted on to the community i'll try and link all the material into that as well but there's articles on the community now talking about some of the ask the expert sessions that are coming up so you know i'm not trying to answer those questions far from an expert let me just copy this sys id if i go to the workspace here and say risk slash risk slash record slash sn risk slash sys id you might not be able to see my url but i've taken there like risk okay now risk risk slash record slash table slash this id okay so therefore i've entered it and i've found so i know how to access my my risk through the workspace loss of integrity and this is again the experience side of things it's bringing it all together it's saying you're in that risk but from that risk you care about these other things so look on the right hand side highlighted details parent hierarchy so we know where this risk fits into the overall kind of risk framework or risk taxonomy and we can see that there's child hierarchy i clicked it by accident but don't worry i didn't get lost because i've got a breadcrumb and this is a breadcrumb used properly james by the way not how i use them if i'm messing around so yeah the risks okay so that's a risk that took me to the risk statement so i click back to the risk look we've got some information up here entity slack risk statement loss of integrity we've got this overview so how does it handle overview in it's a record that's just one big component here ribbon okay so that's the ribbon component and then the form yeah so i think this top bits the ribbon you can't see the action bar here look at that action bar api state okay so returns true if it's not a valid record what did i click i didn't mean to i'll learn more okay yeah so you know if you i'd imagine if i duplicated this i won't be able to configure it it's quite interesting to take a look at how this is built though because this is a record with a form with a ribbon with some settings and sn risk is not a task i've had an experience i've had a situation we've now experienced before where i tried to kind of consume some of those form or record components because it wasn't a task it wasn't very happy with me so it's quite interesting that we've got a kind of template page for record that isn't a task on here and and it seems to be working lovely so we've also got look at this record not found security constraints i'm guessing hide component yeah look at that so hide component is a i clicked it i clicked learn more i was thinking that's closed done okay so a bit of muscle memory there hide component i'd imagine if you got rid of the script out of this hide component would be a true or false on or off but what we've done we've scripted true or false so as long as we pass in the result of that script to be true or false it decides whether or not that component is visible so that's quite a nice way of of operating um you know giving you these different ways and we've seen that in the code before i think james is talking about how service portals worked it's not the first time but it's just quite nice that it's made available from here so we can say yeah that's a true or false but let me set the value of it from a script from some other parameter that might be available on the page or related to the record so in the in the uh risk record ourselves we've got this 360 view i'm holding back on that uh hopefully you've seen it on a couple of the other screens i've shown i haven't clicked it yet um yeah details just standard stuff now but we've got this kind of working on the records okay so comments there additional comments here what's the difference so if i that's odd if i save that it's the same thing so it would probably change that what's the difference it's the same thing okay we've got to see the compliance view um just just quickly how does this form get fed into this page i'm guessing that it's a view yeah look at this so on the actual record itself you've got your standard kind of views for advanced or default workbench but now we've got workspace workspace advanced risk workspace new item so if we go to workspace i'm guessing it's workspace advanced risk actually because i've switched the i've switched that over let's go workspace advanced risk i think it will be that so this should be using yeah look at that this should be using the form layout inherit from risk statement loss of integrity blah blah blah then we've got activity journal which is activity journal and additional comments there so if we wanted to change this layout how this looks we change it here i'm curious if we wanted to create our own view how would we tell this to use that view i believe it should be in the form section somewhere it should be something in here that tells us what view to use uh it could be in the client state parameters related list refresh is valid disney record maybe it's in here it could be on the page setting so when you look at body i'm trying to answer a question that no one has asked but i believe that's something that will cause us that will cause us some challenges um interesting we've got open builder template table layout documentation so these links look new new for rome uh maybe new for around patch one let's have a look at the 360 view and then we'll go over to compliance maybe we'll take a look at the um audit and so on um but like i say this stuff is if you want to see 360 in context how does this work how does it tie into the whole narrative of irm the ask the expert sessions that are coming up are going to be great for that here you can see right so how did i start i went into 360 view i went into the risk loss of integrity so you can see at the center the risk loss of integrity with the category and we can see that upstream we've got one risk statement and it applies to one entity no relationships are included if we go back to and look at that risk statement and click 360 view now we're looking at the 360 view but our entry point is the risk statement loss of integrity with the category operational it says downstream no relationship so i'm thinking that must be talking about no risk statement relationships as in the parent child hierarchy upstream we've got one risk statement applies to an entity type now and it's included in we've got a risk assessment okay we've got 17 risks all tied to this okay it's funny that it's gone kind of sideways makes sense if you think about it let's go into the entity type if we click that entity type wow okay so when i'm clicking it from within the 360 view it's keeping me in the 360 view but i've got my breadcrumb up here so i've gone risk statement entity type business services let me click into an entity i'm going to pick on uh i don't know sap and now my breadcrumbs up to date so i can start to click around i can see where i came from now sap financial accounting i've got 52 controls 14 risks one entity class entity class makes me laugh to see it on the screen because it will only ever be one it could be zero but it can't be more than one at the moment so unless that's going to change but we can see what entity types it's in includes issues engagements and tasks so from an entity we can also see upstream downstream and i'm going to click into a control i don't know approvals before finalizing water's running out it's very warm in here i think it's all the lights but i love this i love the fact that the it keeps it contextual and not only here not only at this level but at the level above it as well so i know where i was a moment ago i can get back to it um this is quite interesting so we've got control view here but risk view so i'm looking at a control from a control view what happens if i switch that so it's still the control but from a risk view that's interesting it's nice that you've got the kind of switch lens capability there so how does this work if we go to data navigator data navigator is is the page for the 360 view so if i go page data navigator i'm guessing it's just a single component that's my guess okay now we've got data nav breadcrumbs breadcrumbs label okay that's never going to change node manager oh node map display layout configuration but look at the data it's coming from state state is the client state parameter so there'll be something here called node map node data yeah node map node data and there's json and what we'll find is that there'll be a client script that changes that so update node data and that's going to pass that in so how this is built and how it kind of it visualizes all of that information that's going to be pretty standard it's going to i assume look at the information that's coming in possibly take a couple of of arguments it's going to say oh you're in the risk view or the control view and so on but the component itself is going to say well you're an entity therefore upstream downstream is if you're a risk statement upstream downstream left right but think of the potential to scale this up here from this perspective i'm in a control i've got three sections if i go into okay let's look at control objective maybe it's going to start talking about policy from a control objective it might be that that control objective is not related to a policy we're going to entity type hello entity type split in two so it's very nice that node manager it kind of your 360 view it could be 10 parts it could be two parts that's what i'm that's what i'm liking there as well that looks pretty neat yeah it applies to so dell applies to it's funny that's gone left applies to yes it might take a bit of getting used to navigating through this 360 view but i do think this is really going to help customers if they start asking us to change it i think that's where we're going to have limited ability to to change things there that's the 360 view let's just take a quick quick dip into the compliance workspace now this is going to take a lot longer to fully appreciate and and get a head around there's four apps on here we'll take a quick look at compliance we'll take a quick look at audit as well i know rj was shouting for vendor risk so um we'll do that but effectively what you've got each time you've got when you click into that home page and start you've got your your home page okay and definitely this is something that is going to want to be tweaked right customers are going to say could i have this here this it makes more sense can we move things around i don't think that's a problem if we do it in the right way using page variants that shouldn't be too harmful okay regulatory change management has got itself a little icon there that's a bit different so this is interesting um lots of activity here but it's tracking tasks it's saying this is what you need to be aware of um and everything in one kind of screen so i can really manage the the um the workload that i've got tasks again you know if you think about the different types of tasks that exist in grc it does make sense for us to have tasks um kind of centralized things like issues and remediation tasks go hand in hand there's that's probably where the bulk of this stuff is going to be but then you've got risk response tasks all of the audit tasks control tests etc um you know walkthroughs and interviews activities what other tasks are there out there so we've got tasks we've got issues we've got policies here as a task attestation grouping policy oh this is probably this is some test stuff i did before actually this is uh this was something to prove that we could automatically group um at a stations i forgot i've actually um got a bit of a lager here so this is a policy we've got all our ui actions at the top let's take a 360 view of a policy so policies tap to entity types included to control objectives etc so yeah this is this is nice now that i've clicked around i've seen this demonstrated but now i've clicked around it i kind of feel more familiar with it i know how it's going to behave i know what to expect if i access 360 view through a policy through a control objective through an entity through an entity type through a risk risk statement it doesn't matter i can go into that record with the 360 view and i know you know how that kind of navigator is is going to look and actually i forgot that's what it's called data navigator so that's very i'll say that makes a lot of sense so this is the compliance workspace again we've got issues overview if you think about compliance manager really wants to come in and say how how's everything going what do i need to do so we can see authority documents here iso 27000 when i look at this yes i'm looking at an authority document and i can see the overall compliance the breakdown most non-compliant entities issues related to it policy exceptions i mean this is beautiful stuff this is absolutely what we need and if i click over here highlighted detail okay there's not much in there that's interesting we've got the description if we go into a citation i'm going to put this out here by the way because i had this idea when was it i don't think it was for hacktoberfest last year it might have been the thing that i didn't put forward for creatocon i don't even know if i would have the skills to do this even with a team would we be able to achieve this just too many unknowns but my idea so i'm going to put this out here on the record is a component that takes the document and the content model from grc and produces a book in the workspace experience so if i go into iso 27000 i don't want to scroll a load of rows what are they those are even not pages they're not pages are they they are elements on a page so if i open a textbook up i said 27 000 i've got a table of contents then i'll click uh well i can click on a book would i flick through the pages and you know it's ordered chapter one section one 1.1 1.1 1.2 1.2 blah blah blah i think that it's possible to take this information now and that kind of really the set the the structure of grc content makes so much sense whether it be risk statements or control objectives within a policy or citations within an authority document but the way we're consuming it at the moment is kind of form list rows that that's that's the big problem right now so i want to see this as a book like adobe pdf or bookshelf kindle whatever let's render all of this data into a component that's like a a book that you can flick through navigate to and understand that that line item that's green that's red you know that's going well and you click into it drill down and then go into your 360 view i can kind of see how to do it that's my idea steal it if you want i'd love someone to solve that problem so i'm going into 360 view from a from an authority document and we can see compliance score that's nice 84 and we've got 251 uh citations you know this is not this is not user-friendly stuff right now this is why it could look a bit scary if you go into dlc and see this i mean these characters they all mean something but that is not really helping me if i click that yeah what does that mean 5.1 included one control objective awesome idea thanks akira you know i've been sitting on that one for a while maybe it was gonna come out it hasn't come out but yeah this i want to bring that to life basically i want to bring it to life it's a book ultimately let's consume it let's treat it as such and then embed the the relevant grc content around it i can really see the solution so if someone's got you know the skills i'm happy to kind of spend a bit of time talking about that one a bit more okay so this is the compliance workspace this i i get a feeling now if you if you go in here and you click around it's going to feel pretty familiar right if you go into the i've gone into a compliance workspace let's just take a look at the audit workspace which i don't think i've seen at all but now it starts to feel familiar and it starts to feel like i've got this kind of common grounding so i'll go into the homepage and i land okay we've got timelines now interesting plans yes tasks on the right hand side create all my stuff up here now if anyone's looking at this and going oh it looks a bit you know doesn't look great it's got square buttons or it's got green or it's got whatever you like every piece of this has also got css attached to it i'm saying every piece but you know components potentially have got every piece you can go and apply a theme you can go and you know configure specific components and that's only going to become more common i'm not saying you should go out and style it now but if you're looking at this thinking it looks a little bit square or not square enough you know that that's something that will be possible but i wouldn't be spending time right now worrying about the styling just that that the main thing here is the consistency between one workspace to another it might not be the most beautiful yet but it can be and and that's really the next stage i think once we start to bring this information together if we want to make this look and feel like my company's information then that can get branded that can get styled and themed so this is the audit workspace again we've got a home page we've got information that's relevant to us and then if we want to go into it we can either drill into it from from here and that's gone into like you can see here list view but list view has taken the table names you probably can't see the url but yeah it's got params up there so i've gone into an engagement see how this looks again engagement got the overview this is nice timeline milestones all related information kind of aggregated on the front page and if you want to tweak it if you need to make some changes to it yeah it might be possible certain things you know it's not going to be possible so if i went and looked at this and saw the details maybe i can't change maybe i can't change that component i might have to build this whole component but servicenow is not really expecting us on projects for servicenow products to be building our own components i don't think not to say it's not possible and not to say that we won't end up doing it but first first stages um yeah really get these embedded get those workflows embedded and maybe configure the workspaces maybe theme them let's have a look if we go to vendor risk i doubt rj still here rj hit up the chat if you're still here man i'll be impressed with you so i've gone into vendor risk that went ah vendor management that's different isn't it vendor management workspace i thought there was a vendor risk workspace is it the same thing okay oops vendor risk here we go you've got quick actions up here as well i'm glad that i did click into into that so if i go not to risk workspace if i go back to the home experiences vendor management workspace probably going to start on home it's just loading you can see this whirling up here wow there we go home page so what i was going to just check these quick actions is it the same thing is it an array of objects so if we want to go and put our own quick actions in there oh look there's two options so i guess this depends who you are wow edit content look at that what does that mean as because of my scope common vendor core you think it would be prefixed with i think it'd be prefixed with glc wouldn't you that's common vendor core is it not happy with my scope i'll tell you what i can't wear these headphones for too long my ears are too big i need to have headphones on so i know that things are working that's why you've probably seen me on other videos wearing these ones yes i know we've we've gone over the hour oh that's a bit about my ears can breathe uh we've gone over the hour but just trying to sum this up now like i said this is not supposed to be an intro into ui builder or anything like that um plenty of material out there and also the the kind of the consumption side of the workspace is i'm not trying to to answer those questions this is really digging around poking around because if you watch those demos they're polished um and i respect anyone that can polish a demo um not it's not quite what i'm what i'm about okay look at this actually sorry so this i didn't even look at it it's a landing page tab set so if you're on a ui builder you can see here tab set so i click edit content yeah i have seen this was new this is one of the features i think that came out in rome on ui builder so you won't see that in quebec before you used to have to create a tab and and and tab sets weren't really a thing but this is this is a lot easier to manage so you can see here quick actions um and yeah that's that's kind of is scripted roles roles roles okay so roles is from the user session let you know this is uh this is uh one of the challenges i'm going to have is not writing es5 code so if roles equals admin return false oh that's a script right that's the hide component i want to talk to the links yes look at that create vendor yeah so it's an it's an array of objects so i think what we've seen on another page is that it is scripted and it populates this as a script but here we've just pushed them in so you've got create venda create vendor value root record root record fields table cis id minus one parameters okay icon plus outline the line right ends with opens window okay so we'd have to copy that out put that into something like vs coding i'll try and read the the schema for that but yeah effectively that's that's objects that's configurable so if a customer says yeah i just want to add that in there it's quick actions but it's an it's an array of objects and those objects have got a predefined kind of json structure this fender stuff looks nice though it looks really nice and what we've got here risk activity okay i haven't shown you any of the when we went into the risk workspace i didn't show you any of the kind of advanced risk take take a risk assessment risk identification workflow or any of that stuff there's going to be a lot of stuff but utkar she's going to do a session soon as well ask the experts i think that's i think that's next week is it i think that's next week so um he's gonna he's gonna show you how this stuff is supposed to work i'm just literally opening the box and breaking stuff or trying not to so risk activity from a vendor perspective vendor risk assessments risk issues risk tasks again it's that home page it's that summary but once we start to drill into it then we can actually start to um perform the process that's expected so i've got a lot of love for the iso 8601 date format this saves any confusion if you're in you know one part of the world or a different part of the world but i don't know how it looks to the average kind of compliance user or risk user are they going to are they going to look at that and interpret it i would like for everyone in the world to start using this date format kids at school when they fill out the you know new term new page new day whatever they should use iso 8601 that's what i'm gonna tell the uh the teachers so then we'd all be how many problems would be solved in the world if date formats were stored consistently across all systems and it also it goes macro to micro that's the other thing if you if you're going to name file name sorry i'm getting stuck on naming conventions for for date formats but there is an iso standard for that if you name your file names that way guess what if it's called like imagine it was called risk 20 21 09 one seven when you order it it orders it in day order if you do it the other way around like dd month month year year and it thinks that the first is the first of december is before the 30th of january yeah so use that date format i love it not sure customers are all going to but we've got questionnaires in here this hasn't been submitted to a vendor i would like to see what happens at a stations so if i i'm going to go back to the compliance workspace and that's where i started but what i'm seeing is generally these workspaces they're coming with that common home landing page here's some information at a glance here's a summary boom then go into the data and drill in um you've got your my tasks you know you've got your stuff if you want to work the tasks here these are tasks but how do i go into my controls my attestations that might be missing but i guess my attestations if you're a control owner that's not the this workspace is not for you just now there is a risk portal as well i want to get to that but i just want to get to a control very quickly my task open overdue okay so that's nice it's taking you to the tasks page initial tab i wonder how it's risk compliance work here okay so those must have risk now risk compliance you that's ad hoc control does not meet requirement that should have a link to a control assigned to me thank you let's have a look observations this is an issue details should tell us what our control is uh issue type control why details there we go control risk open record okay so you know if you were if you've done anything with ui builder from the beginning of the year when it first came out just having that little bit that i had there the little eye for the reference field some of these things were missing to begin with or at least they weren't immediately obvious or immediately available it's those bits the maturity of the servicenow platform the fact it's been around for so long okay it's bedded in moving over to this now experienced workspace we can start fresh you know i really believe that this is going to have a very beneficial positive impact on on every customer's workflow experience but it's not it doesn't come easy to get to this point there's been so much work going on behind the scenes so we have to appreciate some of those little things like a little eye that takes me to the reference field so i'm in a control now i want this control now look up here a test so before i do that let's assign it to myself yep okay and well we haven't got an attestation let me save that probably belongs to a control objective yeah like that little eye i'm just going to appreciate that so i've gone from the control to the control objective and this is again i keep banging on about these these breadcrumbs but i don't have to awkwardly like click back and try and remember where where i was if i go to details in here i want attestation let's set one i don't know basic create controls we've already got a control so that'll be fine if i go back to this control now it's not i might need to refresh it just trying to double click see if sn utils does anything for me um no i've got a refresh i didn't see any little refresh arrows there but i have got some information at the top as well so even though i'm going through the details looking for that stuff at the top we can see this yeah so the attestation is there now if i click a test that's given me an attestation okay there is a risk portal i don't think that is going to i don't think that's going to give me my attestation in here no so my attestations so the end user the control owner the person that's going to take this why why did that not trigger my stator test was draft something wrong with that survey definition um i'm not happy about that i'm gonna return that to draft probably didn't need to because control objective change would have figured that out so yeah that's gone back to draft want to go up to control objective here details i think that reference qualifier might not be working yeah that's weird glc at the station it's funny that we had loads in there i i figured it was demo data um or the fact that i've installed lots of lots of plugins there we go created one at a station so there's something wrong with the attestation i'd created let's just uh let's just check from here we can't get to the atta station it's not going to show up that's issues any tasks oh the list view down here as well i haven't covered that before just want to check that oh look at the station's in here okay nice i haven't got to go back to the platform i've got an attestation take assessment and it looks like a button oh my god sorry oh my goodness i don't have um i don't have any sound effects um yeah i don't that's a that's cut off isn't it i hate depart i probably cut off in the back end so if i click this take yeah assessment cut off here so it's embedded just check if it shows up on the portal no this risk portal is very much bare bones this is this is the start of something it's not it's not really very helpful so if i click x there okay take assessment thank you to whoever built this and put this in okay just the ability to take the assessment from here i know this is an embedded ui page and it's a ui it's an iframe i'm gonna have to say no because i'm not attaching any evidence right now i am over the moon with this if i submit that oh we've got real-time real-time field updates as well but it's giving me as a username rather than the oh dear when some of you lose some you know kind of need that form i need that form update if i click take assessment now what's it going to say you've completed it excellent need that to to refresh i've got to refresh the whole experience here and i don't want to tags attacks cool or not i don't know me okay so they're just my tags delete it's a bit harsh collapse that so we can get ourselves a bit more real estate but i've really i've got to refresh the whole the whole experience just to refresh that form that's a little bit heavy i would say okay so we're in the assessment let's go back to detail i don't i don't want to consume the answers in this way i want to go back to i don't even know what it which one it was hr workday application i should have a new issue now it's not updated i did update there my issues overdue assigned to must be this one oh no because i'm not the control owner i just want to see all issues in the state of new load moody's ratings hmm i'm struggling with navigation a little bit here i just don't know my way around uh i'm doing one attestations that's filtered let me click into that so i want to view the attestation i don't even know what the control was so we lost our kind of recent history um although we've got our breadcrumbs which i'm loving if i go in here i know where i was a minute ago this way so i feel i'm feeling like i've i've lost that i want to go to that control i was in i mean regularly change management so entities control assurance let's go to the list so i haven't looked at this yet and kind of know what i'm expecting down here all controls so i can't right click and show it's not right click so much and it's it's got a little kebab menu there at least we've got show matching you imagine if we didn't um we do need to go and personalize our list copy url for all controls that's quite nice now we've got this little refresh list button we need that refresh form button that's that needs to come into the the form uh i want to add filter contains this a bit um we're missing then we've got nlq queries now how do i i want updated i want the updated column here i'll copy the clipboard reset whips all right selects everything right what is that okay do you know what that's nice how many times have you wanted to do that in the platform resize whip so i've wanted to do that many many times so that's welcome to me but i want the updated date because i want to order by the updated date and i can't so advanced view okay new condition sir that's all i want to say and this is a component by the way this is a web component so i believe um updated on today that will do shouldn't be too many of them this one workday now there's a little bit i had to go around the houses there to find the control that i was just in a minute ago so i totally had to station and then i i lost it and all i wanted to do was go and find that attestation and view response like i want to click view response because i'm now a compliance manager there's a control in the state of review and i want to view that response so taking of the attestation is bueno and viewing of the attestation no bueno hmm how can we finish on a hike cause i got so excited about that and now i've kind of can't even whistle hold it compliance risk ui builder i mean this stuff is is changing the game it really is uh do cut across yo we're back so i'm going to summarize we're going to wrap it up i thought i might do an hour i've done an hour 35 minutes thanks to everyone that's tuned in sorry for these they're glowing red now um i won't wear those headphones again on on camera let me just take a look at the chat as well uh busy busy on the chat tonight um very very grateful for that i will update the the um description and try and share all the links shout to the live coding happy hour crew sorry for the scheduling clash you know i'd normally be tuned in workspaces roam patch one get your pdis updated install the applications and have a click around see what you think just going through that now i've got a few takeaways i'm going to i'm going to give give my feedback on my first cut feedback now i've got real hands-on to it but i don't think any of the things i've found are kind of going to stop a customer from starting to consider adopting these workspaces right i think the majority of them what we've seen they're going to be it's going to be possible to just get value from them straight away you might get the odd kind of conversation that's can we change this or can we change that at that point in time have a look at the using variants right try not to change the out-of-the-box stuff that's the recommendation um thanks for tuning in akira really appreciate you tuning in man and you've been around for the whole session you're saying thanks for the demo uh i don't know if i want to call that demo because um i'm i'm really just finding my way with this stuff i i don't know it uh very well i've held back on learning it because i really wanted to see what came out of the box i've i've i've looked around i've seen how difficult it is i've seen how complex it is like i say shout out to i'm shouting out brad and ashley there's other people out there that have done it but those two have been absolutely um relentless in the content they've put out i'm still over the moon there's a couple of things in there like i want to personalize my list i need updated date i need updated date on my lists i need to order by updated date i need to view responses on control attestations if i'm a compliance manager i mean i want to see what answers you've given and i want to see them in the context of the questionnaire not on the list view that said the ability to take the attestation from there i don't think i i think we might be able to even work with it without too much overhead so i think there's a workaround hopefully uh anyone watching this back um don't forget as well like and subscribe but i'm pretty sure from the stats that most of my viewers are already subscribers but if not um yeah don't forget to like and subscribe and thank you so much take care have a great rest of your day weekend etc etc thanks all and take care stay safe cheers bye you
https://www.youtube.com/watch?v=I5mKgBI9HiE