[Music] foreign [Music] it's Justin thank you for watching and welcome to my house that's Justin's house in this video we're talking Advanced risk I'm gonna go over a new Tokyo feature with Advanced risk called simulated assessments that's right you know you might be trying to do a risk assessment and want to try it out before you start affecting all your results all your aggregations all your roll up values and they introduced in Tokyo the ability to simulate your assessments before you actually use them so I'm inside the risk assessment methodologies menu item this is under Advanced risk if you look up there in the upper left I'll just type in advanced risk and under Administration we have a menu item called risk assessment methodology so that's where I'm sitting at in this list view I'm going to pull up the it risk assessment remember risk is more than than just about it it's about your business it's about your operations and it could be about information technology and that's what I'm going to pull up in this one I've got this I.T risk assessment and I want to point out something to you notice the buttons that are available here in the upper top upper right and the buttons that are available here in the lower left of the screen as I have it right now those are my UI actions or my actions that are available one of them I have is copy this particular risk assessment is in a published state so I can't simulate something that's in a public shape but maybe I want to make a change and I want to try out that change before I actually publish it and become as part of all my risk calculations and my risk scores so I'm going to go ahead and copy this it's going to create a copy of the entire assessment all the assessment types that were associated with it and all of the ancillary metadata type of stuff about calculations and whether to copy responses or allow override of results and stuff like that so it's going to bring all that over but it's going to put it for me in a draft State and that's going to be key that this is going to be draft so then once it's draft we're able to simulate this risk assessment so I've got this copied now I've got copy of risk assessment up here you can see my draft is set or my state sorry is set to draft and if I look down here I've got all my reference information my rollup configs my other configurations associated with this there's my three different assessment types for inherent control and residual assessments and now I can actually go simulate this so notice I've got this new button right here under simulate and right there next to publish is simulate so I can use this to go ahead and pick a risk that we want to do an assessment on we'll do one I think there's a messaging doing service in here yeah electronic messaging loss of availability for electronic messaging I'll go ahead and submit that and when I do this it's automatically going to assign it to me Justin Meadows if it wasn't clear what my name was um so Justin Meadows will get assign that assessment you can see up here it's been created and if I click on that it's going to take me to the assessment experience for integrated risk management or GRC governance risk and compliance because servicenow can't make up their mind what they're going to call it so we are in the DRC tasks home page I've got my loss of availability a loss of availability risk assessment and notice a little Banner I've got at the Top This is a simulated assessment and not used for risk aggregation it will get deleted once the risk assessment methodology is published that's key right otherwise you've got test data out there skewing your metrics especially if this is a risk or an assessment you've been trying to Trend over time so let's get started I'm going to go through this assessment really quickly if you haven't seen risk assessment in service now this might be new to you so I'll just walk through we're going to say this is a minor impact by clicking there likelihood is going to be possible and then I'm going to go ahead and save that and I save usually because I want to see what that did in my ratings and I want to go in and look at those and see what the qualitative score for each of those and also once I save it's going to compute the inherent risk for me this case it's moderate F6 I could override it because someone's configured this for me to override but we're actually showing the simulation here so I'm going to breeze on through and we're going to look at our controls I'm not going to add any controls but I'm going to say they're all effective for the sake of Simplicity Now controls are usually stuff that's in place to mitigate a particular risk and so in this case I'm saying hey all my controls are effective they're mitigating the risk as we expect and I don't need to do any review of the controls everything is perfect and no additional things are necessary we'll move into the assess risk and here this is not going to be applicable in this case so I get to move on and Define my risk response and here I can choose one or more tasks to accept avoid mitigator transfer again I'm simulating so I just want to review and submit and go ahead and get this submitted for approval um did I miss something yeah I created the task and then I'm going to review and submit and request approval Hello is my comments to the reprovers so that's moved it all the way through the process there and now that is done and I can close this window out I've simulated my risk assessment now if you're coming back in here and you're like hey I sent this out to Bob to Susie to Joanne and to Frank and they were supposed to simulate this and see if it's all working with the new calculations what you can do is you can use this new related link over here called view simulated assessments again this is available when we're in our draft state which isn't showing and I've got it as refreshing but there's my draft State at the top that this is an address date so we'll go ahead and do the view simulated assessments here on the lower left I'll click that and it'll take me back to my risk assessment workspace and I would be able to see any simulated risk assessments and as a reviewer I can come in and click on this is going to look really similar to the person who was completing it but I'll show you the button there for review assessment instead of complete assessment I think or start assessment and and now I can walk through and see all the responses as if it were an actual assessment and I'll just wrap this up with saying we're going to go ahead and say hey I didn't like this it shouldn't do what I wanted I'm going to start over maybe we're going to change something or in the easy case for a demo that we're showing this real briefly I'm going to hit the delete button here not published but I'm going to hit delete and you're going to see where it's not only going to delete this particular assessment it's going to delete the corresponding residual inheritance control assessments that were associated with that particular risk assessment so now my copy is gone from my risk assessment methodology and the simulated assessment that I did is gone and none of my metrics are going to change none of my aggregations none of my scores are going to be messed up by me testing out some changes to the configuration or the workflows associated with that risk assessment methodology so that's it that's the new feature in Tokyo for advanced risk I hope you found this video helpful if you did please like Please Subscribe or share with somebody who you think might be interested in practicing or simulating their risk assessments before they go live in production until next time don't forget to always be learning [Music] [Applause] [Music]