GRC 3.0: Performance Analytics on GRC
perfect let's get started um um hi everyone thank you for joining us um my name is blurt alikai and I'm a risk advisory solution consultant in servicenow I've been nearly two years with service now and I'm based in London UK um specializing Financial Services sector but I do help in other accounts as well today I have the pleasure of being joined by my colleague Sam Francis and I'll hand over to him to introduce himself hi everyone I'm Sam pranks also a Solutions consultant service now I began my career as an auditor with KPMG in Chicago been working in the GRC space the last 10 years we're excited to talk about performance analytics today and how performance analytics Works in service now okay so before we start the webinar uh just to go through some housekeeping rules during the sessions you will be automatically muted please use the Q a feature to ask any questions you may have um the session will be recorded and shared within the servicenow community Forum or in the YouTube channel as well afterwards following the sessions you may be asked to complete a brief survey and we would greatly appreciate your feedback in terms of the agenda we will start with some of the reporting challenges within the GRC tools then we will go just make a comparison like what's traditional reporting what if you had analytics on top and like uh versus the performance analytics will follow with a demonstration with some of the reports and dashboards we do have out of the box in servicenow that have performance analytics enabled and at the end we will spend some time answering your questions so if we start with some of the challenges we see today with GRC reporting and I'm sure everyone can resonate we know that GRC tools are designed to help organization manage their compliance requirements and risk management processes these tools can be very useful for monitoring and Reporting on various aspects of the organization TRC activities but using these tools also can present several reporting challenges one of the main challenges within GRC reporting is data quality since uh GRC data often comes from multiple sources ensuring that the data is secured complete and up-to-date can be very challenging um hence also that can be also subject to human error and inconsistencies which then can affect the reliability of the of the reports another challenge that we see with with this is also complexity so GRC tools can be complex and the report they generate may be difficult for the non-expert to understand and this also can make it challenging to communicate important information to stakeholders and decision makers who may not have um in the in-depth understanding of GRC activities or may not use the GRC on their day-to-day activities grc2 may also lack of flexibility so the need to generate customized reports that meet the specific needs of the organization this can limit the usefulness of the reports generated by the tools and integration also is another challenge within this uh the GRC reporting as these tools may not integrate well with other systems used by the organization which can make it challenges to aggregate data from multiple sources and generate these comprehensive reports um the lack of standardization can also make it difficult to compare data across different business units or organizations this can make you challenges to I then identify Trends and patterns that may be indicative of broader issues or risks that basically can help you manage the the effective GRC or risk and compliance program some um could you walk us through an end-to-end process of generating a report and if you can emphasize any of these challenges I mentioned on that process yeah yeah absolutely and the um the current state of the GRC Marketplace the governance risk and compliance tools that we're used to are certainly not lacking in reporting capabilities it's it's table Stakes for GRC tools that have pie charts bar graphs other visual widgets what I like to call kind of two-dimensional reporting uh if you navigate to the websites of different GRC tools you'll see these you know basic dashboards just on their home page almost to the to the point where all all GRC sites start to look the same the the problem with this it oftentimes limits customers from building enhanced data visualization reports similar to what you'd see in a business intelligence tool like a power bi or a tableau risk and compliance themes often times need to present key performance indicators to leadership to show things like Trend analysis to see emerging risks over time percent increases or decreases month over month quarter over a quarter Dynamic filtering capabilities that to isolate specific areas of the business as well as the ability to kind of Stack data on top of each other to provide Consolidated metrics so because these GRC tools lack these kind of advanced reporting capabilities GRC teams work with other platform admins of Tableau power bi of data visualization tools to manually Import and Export the data so the process looks a little bit something like if we go to the next slide here's just an illustration of a a typical end-to-end cycle uh this is obviously embellished a little bit to kind of to drive home the point but there's basically three separate tools so we have the GRC Tool top row Microsoft Excel and then the business intelligence tools like Tableau power bi is that the bottom row so we start from the GRC tool there's a three-step process where you access the tool you navigate to the data source and perform some sort of excel export then from Excel there's typically some sort of a cleanup you know matching column headers changing the date format or the string format so you sort of clean up the data in Excel coordinate the upload with uh whether it's your admin team or the the data visualization team and then you manually perform that import into the business intelligence tool at this point there's typically some sort of a spot check you know did the data come in correctly you might be a little bit troubleshooting if there is any exceptions or any outliers information we've uploaded and then ultimately this data is being presented to leadership in the uh the third party business intelligence tool so that that's really the end-to-end cycle it's a little bit um you know error prone because there is so much manual export import of data so it's a Blair I'll kick it back to you kind of to alleviate this this time-consuming process players is going to explain a little bit about servicenows native performance analytics capabilities yeah before we drill in and we do any sort of demonstration I really wanted to give you an overview of what are like what is performance analytics so basically it's a powerful tool that allows you allows the organization to gain easy access to their key performance indicators and metrics so like you can start leveraging these kpis these metrics metrics is to optimize the organization Services streamline processes you can align organizational goal to these dashboards and this solution uses real-time data within the platform so like you can use real-time data and then you can use these data to provide actionable insights you can allow businesses to make informed decision based on the data that you see into your performance analytics dashboard so essentially if you think about it performance analytics just adds that layer of analytics and performance to your reports so like while two dimensional report provides for example a snapshot where your business stands at the given moment performance analytics provides additional context and Trend information offering a more complete of picture this picture of the past present and future performance and if we basically do a comparison between reporting and what analytics adds into uh traditional reporting we can start with showing that what what what does reporting provide so basically provides a snapshot where we are right now for example if we know the number of risk events is five let's say that is a single data point that doesn't give us much information it doesn't tell us if that number is low it doesn't tell if that number is high if it or if it's trending up or if it's trending down or is bad or good for us analytics on the other hand um will add Trend information to that single data point provided by the reporting you can examine then historical data and you can see if the things are looking good or bad or looking high or low and this over time as well so you can see over time if you're trending up if you're trending down and this can give you a more complete pictures of where you have been and whether you have improved once you understand where you're coming from like based on the historical data and whether you're going to like you know whether you you've improved through that cycle of of time then you can start setting targets from where do you want to be so you can use past performance as a guide you can set reasonable and a table targets and then by combining the past and the forecasted performance you can identify areas for improvement take actions to ensure that you have full visibility in your risk and compliance programs so from this we can understand that reporting if you see if you just as a summary of what reporting is you can understand that it's that single data point that shows the current state of affairs and analytics will add on top of that context We'll add Trend information to provide you that comprehensive understanding of you know you looking at the historical data looking at the current data and seeing that the future Performance Based on that uh on that Trend so this was like if you basically add the analytics now if you compare reporting versus performance analytics a layer on top um you can see like from the the screenshot here that reporting focuses on the operational status so you can use reports to optimize your process that would mean delving through hundreds of records and just to understand the situations um where progress was blocked and for example in this case performance analytics on the other hand provide information at process level so by focusing on process indicators you can look at you can look at a visible if you're on your processes for example we mentioned number of risk events earlier you can have a metric to say number of risk events handled by the first assigned group and then you can have this as a trend so it provides you visibility on the performance of this process like how well are you performing and not just individual on the individual record so the approach basically helps you for Effective optimization of processes so you don't need to spend 100 or tons of hours to basically do that manual analysis that you would typically do to understand the trend or the process how well your process is around risk and compliance are performing so uh just to summarize before we go through uh to the demo like you can use that this platform feature that is performance analytics and you can add this to your GRC programs so like you can anticipate Trends prioritize resources drive effective automation like you can basically Drive continuous improvements by using uh key indicators scorecards time charts all of these uh on your risk and compliance programs so now if I will share my screen I've actually just share like an instance of service now I have just to show you exactly like you know how these reports or how these dashboards would look live so you can get an idea how this can help you drive those successful risk and compliance programs perfect so this is a uh this is a typical dashboard for Enterprise risk management in service now um um this has a performance analytics uh enabled so this will help provide the concise and easily understandable view of the organization risk program um if you look at the the report that basically have the operational risk metrics this basically has multiple metrics I think more than 10 metrics here which you can look over time like you can look at last three quarters and compare it with the last two quarters and compared with the current quarter you can see the trending of your data and then basically if you if you think this in a way it's a significant improvement over having to search for multiple reports that use different formats and different data points to inform on that or in the organization risk and compliance poster so but this allows you this allows you to Define most critical metrics or red flags that you have around your Enterprise risk program and track them over time so it's a comprehensive and continuously outdated view of the organization uh rest posture and this can easily be exported or presented to the leadership for uh on your meeting so basically these would be your most important metric starting from like number of high residual risks and then the last one for example number of impacts of risk events with impact higher than one million so you would Define like what are most important metrics that you want to track what are those red flags or like you know gaps that you want to look around your programs and you want to track them over time and then based on the data that you see and the trend that you see you can you can basically start taking decisions and use these insights to drive successful programs and um this basically makes it easier to identify like for example when where are you trending up when where are you training training down and then align them to the program with with the organization's strategic goals because you might have a goal to have like you know or a risk appetite or an appetite to or a Target or a threshold for something so this will have a look and see like how are you performing uh through those uh to the appetites and targets and thresholds that you put as an organization and rather than having 10 record or 10 reports to be presented at your meetings you can basically have this simple table with operational risk metrics this is just an example you can Define like what would be a typical important metric for you to track for your risk program and then you can take in these um these um data uh that look meaningful and show this to uh to others so this is I will go through and explain like you know exactly like what this dashboard has and Sam later on will drill in a specific use case but just to show like you start with like looking at your most important uh risk metrics that you've defined and looking at how they're performing over time if you have like any sort of heat maps you can have a look on your heat maps about performance analytics are like help you also um track the state of your um of your whole breast programs everything you see here is risk program so like you if you're if someone that sits and like you know has this dashboard and looks at this board that's where day to day can manage their risk program looking at like you know what is in the queue like if everything is overdoing if I overwritten the here you can see like everything is real time and everything is clickable like if I wanna I want to see the data for example here I can see like all the data that I have the platform but I want to focus only the six months I can always go ahead click and make like you know adjustments on the reports that I'd like to see and if I'm interesting to see like more like you can see like I can always click and open the analytics Hub here so this will like basically show me the data that makes the analytics and like other important metrics that I can gather and have a look at and this is basically like how this you know like you have you can see that you you have your uh reporting around GRC but you're elevating this reports adding performance analytics on some of your of your report and I I think we will go through this task I just wanted to spend some time in the the the last tab of this Enterprise risk dashboards and the the decisions that Business Leaders make are only as good as the data that supports them so like um making or taking an attention to the data preparation to ensure that you have uh good data that will make your analysis more accurate and meaningful is one a step that makes drive those risks and compliance successful programs so for more meaningful data that you will have better insights and of course better outcomes so this allows you to to set those important metrics that you may have around your risking compliance program so for example you want to see like your active risk your active controls like then that over time you want to see risk without mitigation controls and this can be like an important metric that you want to have a look for example if I just go in and look at this report I'm able to see that how this has gone over time you can see here I have last year and the this quarter as an analysis and I can see the data I can look at the specific quarter in time and see like how this data has changed obviously I can change the type of the chart if I want for example to change it to a line or if I want to change it to a spline here you can always have these different types or if you prefer a column you can always go in and check how many of you know the risk you had over without mitigating controls and this all helps you drive these decisions here you can see for example you can see like how this is driving over time here actually you may have done something that it started to minimize like you know the uh the this graph to basically go like from let's say three almost four thousand control risks without mitigating controls to in the Q4 to 700 and then in q1 to 300 so basically on the data and this specific reports that the analytic report that basically looks at your looks at your data on your risk program and finds out like you know those important metrics for you to track like those risks that have no mitigating controls then you can go in and take some actions I think if I just who hover in here you can see that here we initiated the campaign to review those risks with no mitigating controls and assign controls to these and then you can see like all these important analytics uh um metrics that will help like you know see like what was the maximum of how many controls or how many risks you had with mitigating controls over time and what's that what's the minimum so what you can do here you can look at these data you can drive Improvement initiatives like this one here to basically like initiate a campaign that you can have a look on your data and um assign mitigated controls to your risks and then you can set targets for example you can set like a global Target like for the organization or personal Target and that Target could look like for example you can write in that it needs to go down to let's say 50 records per per quarter uh like this basically aligns to your organization goals or if you want to put the threshold so like a threshold same again you can say like I wanna have less than always less than 50 and then when I say this I would be basically able to see where the threshold is and then how if I change this to area as well like I'm basically targeting here like whatever comes Above This threshold it means that's something that I should have a look and this should be flagged and maybe I should receive a notification as well that something is above the threshold I have defined and then again you can always add comments like like you can see here like that there's this comment that has been added to basically say like that that yes we can see the data and that's yes we are taking some actions to improve the quality of the data that we have around our rest program and then obviously information around um around the specific report so this helps you like you know looking at the data analyzing the data and taking decisions in your data because you can see the trend and then maybe like if you're someone where like you know you hit 3 000 here four thousand here you can basically say like why was this due to something that happened like you maybe had a batch of new data into your platform that's why that this this happened but the trend if you want to see like you know how basically the trend is going you're basically going like uh from high to low so you're in a in a good path of like achieving your targets or goals or thresholds that you have around improving the quality um of the risks that you have without mitigating controls and that's like some of the figures that you can use you can always go and look at the trends look at the confidence band like look at the um initiatives and like any sort of things that you may have around your programs and what does this help as well you can compare the data for example here we can see like quarter one with today if we look at today with the core term Alaska of the year you can see a difference between like you twice as good as last uh a quarter four of 2022 quarter three you can see like how good you are like you've improved 200 percent on like this quarter just because you've seen something that indicated that that's an area that you should focus on and improve the quality of your data so if I go ahead and basically show like what else this dashboard has you can see that as an organization you may have some metrics that you will always track that you want to always to look at these are some an example of the of the metrics around the data quality as I said like some of the decisions you make will be as good as the data that supports them that's why like for driving those risk and compliance programs having a look on your data fixing like improving the quality of your data will make will basically come with better insights and better outcomes as well and this is a typical example of like how many of these metrics that you can set up and it's an example that's what you see here is completely out of the box so you can you can use these what comes out of the box or you can improve because you may have other metrics that use an organization track and have those in your one dashboards for that that you manage your Enterprise risk then again like you know the same information that I was tracking against specific um a specific different metrics around risking controls I can always go ahead we were previously in state here I can always go ahead and check like for example I'm interesting to see the data here you can see like with the click I go to the analytics Hub and I can see the information if you want to see the records for example like what are those records that basically make uh make this graph go like this or like if I change this to an area or um to another graph like I can always go ahead and I can see show records and you again you can compare like uh previous targets and other data like how they look like uh over time for a specific kind of reports as well so like typically if you if you have a look yes this is looking like a report but when you're clicking on it it's also allowing you to look there to look more also the context and if something actually less 127 if if it's a good if it's a bad if it's low or you're trending down or trending up so um or are you aligning with your organizational goals as well based on your targets and thresholds that you put uh into these kind of reportings and typically like you can do this um this is this a State field here basically allows you to look at your whole program and manage everything that you would have around your program look at those overdue tasks and issues and everything that you may have and start taking actions based on the data that you see in here and obviously this has a view and whole program you can have separate tabs like for example tabs around your assessments like how your residual risks are are across your um across the rest categories same for inherent risk you can see the trends so basically like I think one of the most important reports is to see how how like how well you do those quarterly risk assessment or yearly risk assessments what's the trend over like you know not only six months but over a year as well are you improving on your brains or like you're having less threads and so on so this can give you a view on um your you know quarterly risk assessment that you're performing around your programs and again like uh as I said the overview tab can have like all the most important metrics that you can just take away and then go in and have a look of like how you're performing against those metrics but you can always go ahead for example we had I think one or two metrics in the review tab about your risk events you can set up those targets or those um metrics on risk events with more details around like you know losses um like events with non-financial impact what's the reason of like you know that these are happening how freaking those are happening we which are the business units or the department that are causing these these types of risk events or which is the type of risk that it's like you know trending more than the other so like this is like what you can do and you can put these metrics the these risk of event metrics as well so like this is like some sort of report that you can basically take away because you basically have real-time data on your um on the number of risk events that are happening the score the change the trend of this risk event over time and as I said like for example this is with impact more than one million if you this happens like you can set up notifications and um things to to Target or to um to basically inform people in the organization that's a thresholder target has been breached so they should look at the dashboard and see like analyze the data why this has happened and then again same reports you would have for your control Assurance program for your um issues program so like you can have a look or as you can see with this dashboard I'm able to have an overview of the program like I don't have to look at several reports to look at the how my risk program is performing but then if I want to drill into the details and see like a specific area of risk how I'm performing I can always go ahead and look at the um at the reports that I have and how I'm trending over these reports and like what is basically the context of like what's this this is happening and I'm and I mean improving over time so I will hand over to Sam now so he can give you like a specific example for example around a risk event workflow and like how that would look like into um into the platform in terms of reporting yeah thanks Blanca and I think one thing uh that I just want to emphasize before we we dive into the risk events here is Blair to mentioned this is uh these PA dashboards are ready to go out of the box um now of course this the demo data that's driving these dashboards is kind of unique to our instance but all these these placeholders for performance analytics metrics are provided out of the box so it really helps with the question of when you're implementing a program or when you're taking the next step in your maturity Journey for building a grg program it helps with the what am I not asking that I should be asking what am I not tracking that I should be tracking and what type of metric should I be presenting to kind of executive leadership um so that's that's a good I think it helps with that journey to take the next step in your uh GRT program now we're going to focus on these risk events risk events in service now are basically tracking items that have an implication on financial gain or loss so nothing gets you know executive leadership's attention like putting things in terms of dollars and cents so if we drill into this risk events um screen here this is going to show our or actually let's go into the this is the total number of risk events let's go into the actual dollar loss figure here so we're gonna look at this gross loss this is going to show us the trend analysis quarter over quarter um and you can choose his blurred to mention you can choose the type of visualization if you want to do columns or lines or these these area charts you can adjust the the period so here we just did a manual show us q1 through three if we want to have a running four quarter sum or other different ways of kind of categorizing this data over time to identify different Trends you can do so through these uh kind of this visualization area feature up here uh we also have the ability to show the underlying data so if you actually want to see what what figures are making up these visualizations you can just go into the underlying data by showing records so here these are uh sorted and descending order by the actual net loss so here's all the risk events that we've realized the financial loss they're actually feeding into these uh you know visuals that you see on the screen um so you know very easy to toggle to the the underlying data as Blair to mention there's a lot of ways of setting different targets thresholds Improvement initiatives so one thing I want to start with is is this Target and this is actually it's similar to a uh I would say the risk appetite feature which is a new uh kind of feature we've rolled out for the the entire risk solution basically allows you to set a new uh threshold so let's say we want to capture all Financial losses that are less than you know five hundred thousand dollars you can add in that threshold and that just puts a line on this data visualization if there's a specific threshold you need to track maybe this is you know has implications on different regulatory or kind of external implications or that's just the threshold that you've set internally you can supplement these figures with any any limits um there's also formal Improvement initiatives so if this is a kind of strategic objective that's um you know kind of being delegated down from leadership there's a formal tracking program where you can set your kind of your target metric and track specific Improvement initiatives in the system to uh to reach those overall um you know Target figures and then the other thing here within the data there's you can do a lot of different comparisons so if you want to see total dollar change percent change year over year a lot of different ways to kind of decise and dice this data one thing that's my favorite if we zoom out a little bit here some of you who you know who are using the the GRC or the the integrated risk management solution and service now will will be familiar with entities so there's no entity is essentially a a way of grouping it's a hierarchical structure for grouping everything within your GRC program so entities might be you know physical locations you know different offices they might be business processes or business units that you have kind of established that structure internally or they might even be areas from the servicenow platform such as a you know a class from our cmdb our configuration management database if you're tracking all the critical business applications it's just a quick way to instantiate controls against all your critical business applications or any any entity structure that you've created so how that actually affects this performance analytics is when we're looking at all these metrics all the the overall figures that players have went through you can apply Dynamic filters from your entity hierarchy to do so again whether your entities are made up of processes or physical locations or business units or even like I said classes from the cmdb if we want to say show me all information from Acme Europe that's just a dynamic filter that only displays the information related to that specific area of your business so a quick way to apply Dynamic filters and pinpoint a specific set of data with leadership or a certain team might be interested in it's a pretty powerful feature there if we go back to the loss events so I'm just going to turn off that filter and we'll we'll go back to this gross loss figure as we looked at earlier these are made up of different risk events in the system so I want to quickly show you the what a risk event looks like and how this data actually makes this makes its way into these performance analytics dashboards so I'm going to pop over this other tab here's a risk event in service now and again a risk Advantage is any you know issue complaint anything that has a financial implication so first thing the risk event record will always have a life cycle so we can tell if this is newly submitted there's a a whole review and approval process that takes place until the the item's been closed and on the overview page you can see the total gross and net loss and some other figures just summarizing uh key information about this risk events we also have a predictive intelligence tool and not to be conformed confused with performance analytics essentially we use predictive intelligence to create rules with all the risk events you have in servicenow and really help you with next steps so so has this risk event been realized previously do we have something existing in the database where we might want to create a relationship between these two have we successfully remediated a similar risk event and can we reuse some of those remediation tasks so the predictive intelligence really helps us sort of recycle data or you know make informed decisions based on a log of all our previous risk events that have been successfully closed in the system some other important field we have the details here this is all the metadata data fields for a risk event where all this information is tracked impacted business area now this is really what drives those Dynamic entity filters so if you only want to see items affecting a specific business unit this is going to be our uh it shows the one or multiple areas that are being affected and then of course these risk event entries are uh the the financial statement line items or line items to track the law to realize based on system downtime resources some teams oftentimes create a kind of an integration with different you know Erp systems or financial reporting tools if you want to have more of an automated feel and ingesting these from something like the orx or any other source of risk events that you have of course we're going to link this to risks within our risk register and then there's other fields here that are captured in this 360 degree view so this is a nice for that rescue events it'll tell us the the overall loss down to the penny as well as any uh entries so these are kind of the the financial entries that are feeding the uh the overall uh gross in net loss the business areas that are affected which risks is this related to from our risk register so a lot of information which is tracked at the risk level as this progresses throughout its life cycle and ultimately all this information is feeding back into this dashboard it's updating our performance analytics real time in service now so we can have this data at our fingertips to make informed decisions and present this to leadership in a concise fashion so that'll conclude the demo piece I'm just going to go back back into the slides here and let's close this out with with a couple slides so we looked at our Arc end-to-end reporting cycle so this was all the all the steps we saw earlier there was um kind of the diagram with the nine different steps they would typically take place if uh you know a GRC tool doesn't have something like data visualization or performance analytics a lot of swivel chair exercising get in this data out of a system into Excel into our bi tool so what what that's going to look like with service now it's just a more streamlined process because our tool has the native performance analytics you can access the data from servicenow and have those PA dashboards updated real time in the system so you can present these the leadership from one Central platform so I'll um I'll kick it back to Blair tonight and then give some um taking some closing thoughts or if we go right into the QA uh but that's the you know the paps I hope this demo was useful and informative and how this can be I kind of used in a real life scenario thanks Sam I think just to conclude this uh it's basically what we try to to show this is like you can on top of your reporting you correct you can add performance analytics and they can play a crucial role in understanding your GRC programs while looking at the past you can looking at the present and you can always enable forecasting methods to look at the future as well and those forecasting methods can be um linear or seasonal you can use random Forest like you know all these type of algorithms that can help like you know forecast like how how your data is trending so um access to like in platform data like basically provides you valuable information at all levels of the organization and you can use performance analytics to like you to see the value of this data so like if you have the data you can put the value you can put the visibility into into this data and uh I mean uh get get the power of data and use that for useful or insights and outcomes around your uh your programs I know that there are like uh some questions I think some of them I already answered I will try to answer the ones that I haven't answered um yet um for example I think we have a a question into um do we have any of the out of the box Trend reports for indicators and indicator results for policy and compliance yes there are like there is I think that there was a tab around the uh in the Enterprise um uh Enterprise dashboard which basically it's around indicators and you can have this trend on your indicators as well we do have this enabled within workspaces as well so if you're in a workspace and you want to see like how your indicator results are trending the performance analytics reporting has has been embed embedded in the workspaces for such cases as well uh in which version these performance analytics dashboards is applicable specifically to the to the Enterprise dashboard you were showing this is applicable this is a platform feature so it's if you are in um I think not sure like in a type of licenses of irm that's something I can definitely double check but it's a platform feature it should come within the platform and you can leverage this platform features for before your UH like basically driving some of your reports GRC reports as well this enter this Enterprise dashboard that you just saw like based uh basically because it has like a lot of data around your risk programs risk events like this is uh I think it's if you want to include the rest events as well it's Enterprise but I think some of the reporting and data it comes within Iran Pro as well um so that should be applicable and comes there uh do we have to enable a specific plugin in order for us to be able to utilize the PA dashboard I think it comes so if because the PA as I said again is the platform feature when you update or when you um install the GRC plugins around your Enterprise rest this comes um within within um the the plugin for your um Enterprise risk packages do we have anything showing then the risk assessment in performance analytics uh apologies I don't think we have something at hand that we can show around Avenger risk assessments but right similarly it show it follows the same logic as what you saw there you can basically Define your most important metrics around your vendor risk programs and if you want to see like trending or like an analysis analysis of data around your vendor risk assessment because you already have the data you would just need to start building this indicator this metrics and put these kind of reports into your dashboards I think I've answered all the questions that we have in the Q a tab um we will be uploading this to uh YouTube to our YouTube channel we will be uploading this I think to our service now Community as well and then you're always um I'm happy to answer any questions that you may have I think we have our contacts in the in the ends of these slides which you can contact if you have any questions or reach out to specific servicenow teams if you want to know more about performance analytics GRC or happy to run like a more detailed demonstration from respective teams on this topic thank you everyone and um see you in the next webinar I guess around bye
https://www.youtube.com/watch?v=hSJrINtSGdU