logo

NJP

ServiceNow Federal TechTalk: Risk, Issue, and Opportunity Management (RIO Compliance)

Import · May 26, 2023 · video

good afternoon everyone caresoft technology would like to welcome you to our servicenow federal Tech talk risk issue and opportunity management just to tell you a little bit about caresoft we are a trusted government I.T Solutions provider supporting the public sector organizations across federal state and local government agencies including education and Health Care markets at this time I'd like to hand the floor over to our first presenter Andrew Scheer Andrew the floor is all yours um welcome everybody and thank you for joining us on this Thursday before a holiday weekend so we're really thankful and grateful that you're able to join us my name is Heather said my name is Andrew Shearer I'm a solution sales executive here at servicenow and today I'm going to start and walk you through probably four or five slides not too many as an overview and then we're going to turn it over to our partners from in-source to walk you through a demo The Lion Share is going to be a demo and what we're going to talk today is our latest our series our Tech talk series and we're going to go over the risk issue and opportunity management and how do we help customers with their journey in becoming real compliant and so as I mentioned uh from as far as introductions are concerned um I am what we're going to do just to save time is before anyone from our side one of the panelists speaks he or she will just introduce themselves uh that way we can save time and not go around the horn and introduce everybody so um with that I do want to mention one thing that you will be hearing my voice on with servicenow there'll be a couple other servicenow folks that you'll hear but you're also going to be hearing from folks from a company called in source servicenow is a partner company and we have technology partners that help us and help our customers succeed and Implement servicenow properly and and achieve all the wonderful things that servicenow can do and in source is one of one of the partners that I work quite a bit with inside of the dod and so I'm very happy and honored that they're here today with us and mark from uh in source is going to be the one due doing the demo of our solution that ties together multiple products that servicenow offers to to go out and solve the issue of um of Rio compliance so with that I'm gonna I'm gonna jump into our slides um and as Heather said just if you have questions feel free to write them in the chat box and we'll try to get them answered and close to real time as we can and if we can't we'll make sure we get you the answers uh in the next couple days all right with that let's let's get cooking here uh so the first slide is always our Safe Harbor slide I'll vamp a little so you can read through it uh basically what we're saying is forward-looking and can't guarantee them and and all those wonderful things but uh this is the obligatory Safe Harbor slide and and I assume everyone has read it now all right very good all right so the agenda we're going to we're already past number one so we're doing great we've already done our starting introductions and now what I'm going to do is we're going to give a really quick basic overview of servicenow if some of you aren't familiar with serviced now in source is going to do a quick slide or two on who they are again just so that you know who's who in the zoo then I'm going to go through one slide of Rio in the overview and so we can leave as much time for the actual demo which is the exciting part where you could see all the things we're talking about in in real time you can see them in our instance um as as Mark walks you through them all right so first servicenow who we are again very briefly large company I think many of you have heard of servicenow uh last year 2022 we had almost 7 billion in Revenue 6.891 this year q1 of 2023 I think we did two billion so we're we're on a pathway to to pass that 6.8 billion dollar in Revenue that just means we're we're doing a lot of business with a lot of customers um got 20 000 employees Etc the the the two numbers that I like to speak to here are number one we're in about 85 percent of Fortune 500 companies this is a global slide right made by our Global Marketing um so it's not specific to the federal side but I will tell you that as many of you may know we currently we in December of last year so December of 22 we signed uh an Ela an Enterprise license agreement with the U.S army we have multiple elas with multiple different groups inside the Department of Defense and on the civilian side so we're quickly becoming um you know a standard for the various products that servicenow offers and the one big number I always point out here when it comes to servicenow is our renewal rate we're at about global we're at about 98 which again just tells me that folks you know once our once the solution is implemented it's working the way that it should right and you know our tagline is we make work better the world work better for everyone and so once our solution is in and working folks stick with it because it really they really do make their lives and in their work day much much easier so move on um this is my last slide about servicenow the company I just like to point this out because it's one of the things that that really separates us from those that are in our space I I avoid using the word competition for lots of different reasons but oftentimes the juxtaposition between how Innovative we are versus other folks in our space um is really glaring as you can see we do two major releases every single year so every single year you're going there's two releases with additional functionality additional Solutions uh um and and a more powerful solution year over year over year if you've ever been curious what our releases and what the nomenclature means right now we're on cities and so it's in alphabetical order so Orlando De Paris op to Q Quebec R to Rome right now this slide is is from the Q4 of 2022 so it has Utah as dots but we are currently in the Utah release now I know that's not a city I don't think that they I think our marketing team decided to go with Utah instead of a city that starts with you so um and we're tracking of course to Vancouver in the fall and then and then Washington in the spring of 2024 so it's constant Innovation and it really does uh kind of uh separate ourselves from our from our from those that are are also in this space um with that I'm Dan if you want to just give a quick uh a couple seconds on in Source the next two slides Dan just tell me to when to click to the next one sure yeah thanks Andrew appreciate it yeah and thanks for having us um my name is Dan Gale and my role here at in source is Chief Solutions officer so I head up our Solutions team uh we are one of the uh the partners that Andrew had mentioned in the servicenow ecosystem that have been doing so and been in that space uh for just about 12 years now um we have a national footprint in terms of our you know what we cover in terms of the the territories and the regions uh we are headquartered in Philadelphia and we use a combination of we can use a combination on and offshore resources if we're doing that from a delivery perspective we are doing a fair amount of work uh with as Andrew mentioned in the Department of Defense as well as other branches other um you know Federal organizations as well and we've been like it says here an elite partner since 2012. we have over 1500 I think that number is getting north of uh of like 2000 at this point now but we have lots of different engagements lots of things that we Implement within service now and we just we also have one of the things that we're pretty proud of is a skilled skill bridge program which is we we basically hire and train military folks people that are transitioning out of the military to become folks that work in the servicenow ecosystem that is something that's a bit unique to insource and uh we're pretty proud of that right Andrew to the next slide and just how do we kind of cover all of this within the servicenow platform we are actually organized into what we call practices that are aligned to uh servicenow product lines right so that you know it service management ITI operations management strategic portfolio its asset and customer service management we are have dedicated practices across the organization as well as things like integrated risk management and GRC uh which actually doesn't show up on the slide but they are practices that we have and Mark actually heads up that practice um he's going to be walking you through he and Mike will be walking you through the solution that's a kind of a Better Together between uh strategic portfolio management and integrated risk and kind of see there with the number of certifications that we have within the organization things that we've done from you know the number of implementations the average uh tenure of all of our folks which is actually pretty good we keep keep folks higher folk hire folks keep folks involved within the servicenow ecosystem and pretty proud of our um you know 4.6 in terms of our customer csat which is great I think that's just a little bit about insource and I think at this point Andrew I'm going to return this over to Mark is that correct no I think I've got two more songs two more I want to hear myself speak for two more and then we'll turn it over to Mark so real fast we'll get through these quickly I like to show this slide this is just a little bit on service now right so this is I know it's a busy slide um kind of by Design I think um but what this just shows is it shows you all the different products and solutions that servicenow has um all out of the box um and what's interesting about this what I always like to point this is you know this is the secret sauce this is what's this is our barrier of Entry this is what's hard to replicate and it's basically all of these products revolve around a single source of data you know single data model single architecture single code and so what that allows us to do is it allows you to seamlessly interconnect between multiple Solutions so for instance um I'm gonna pick two at random if I'm picking I Tom i t operations management and itam it Asset Management those are two separate and distinct workflows but because they are grabbing information from the same data source and because they're using the same data model there's a seamless interconnection and actually we're going to see a example of that seamless interconnection today because for us to meet the requirements of Rio and to the best way that we know how to do it is to actually integrate two Standalone Solutions one is SPM which is our strategic portfolio management and one is our integrated risk management solution or irm now when we show this we're actually going to show you where one stops and one begins but oftentimes with customers because of our Integrated Solutions it's just that it's a solution and you an end user may not know I mean SPM now or I'm in irm now right they're all interconnected so that it's it makes the experience for the end user much more positive much more valuable and you're bringing in multiple Solutions um you know for the for the power to solve particular problems in particular particular issues so again we're going to be looking at SPM and irm but just know that we can we can sit across the entire solution and share with with our multiple different workflows so finally Rio this is what we all came for and again uh you know if if you're here you probably have a you probably are familiar with what Rio is um and so with risk issue and opportunity where I won't go through it um Point by point I think it's a 75 Page Plus document um but what I wanted to point out is it why we're so interested in it is it's really looking at effective risk management within program constraints So within that project management how do we how do we have effective risk management and how does how do we allow leadership um to understand and mitigate technical risk the shape and control risk and to anticipate possible Adverse Events and most importantly to try to do it in either real time or near real-time environment and talking to customers about what they're doing with Rio oftentimes what we'll hear is they'll do a post-mortem on a program man on a on a project so to finish the project they'll stop it and then they'll do a post-mortem to see where did risks pop up um how did they deal with those risks how did they alleviate those risks how can they uh how can they avoid those risks in the future not real time and so what we're going to try to do is do all those things but do them in a way that you're doing them as you're working through the project as opposed to post-mortem and so with that I will be quiet I'm going to hand it over to you Mark if you want to um if you want to share your screen and kind of start walking through the demo right nope I need to stop sharing there you go grab the red screen here always the guessing game when you start a zoom all right again my name is Mark Seeley I'm the practice director for secops and integrated risk management at for insource somebody walking through what you're going to see if we're going to go from SPM through irm and backed again so what that's going to look like when we look at it we're going to be starting out with project portfolio we're moving into the integrated risk and you'll notice I have errors going back and forth because we're going to have constant communication between the two different modules obviously issue management plays a big part in that how we resolving different things within a risk as we move forward then we're going to show you how that tie into New Opportunities right I get a risk I see an opportunity to make things better typically the stances nowadays oh there's a risk you mitigated or accept it and that's sort of the end right sort of drops off and and there's opportunities there there's opportunities so it doesn't come up again how do we fix it how do we make things better as we're moving forward we're going to drive that into an opportunity management team or risk management team whoever whoever would be assigned the role to actually cover that area obviously issues come into those as well even if I get an opportunity off of a risk I may see some addition issues I need to go into maybe uh certain policies at risk or different control functions aren't up there so sometimes we need to have an issue to address those factors and then we're going to go Circle back or write down the projects because if I see no opportunity and we see the ability to do something with it then we want to pursue that opportunity get in play which could reach another project right depending on what it is maybe I need a budget for it I need Personnel so we're going to do full circle as we go through this okay so let's dive in I'm going to be going a little bit back and forth between the slides and the instance so you'll see that here we are starting on the project workspace as we go through and I'm going to hand over to Mike guardias to talk about the SPM side a little bit and introduce himself yeah so good afternoon everybody my name is Mike guardiaz I'm the in Source SPM practice director and what Mark is displaying here is what we call the project workspace so for those of you who may be unfamiliar with the application any project that is specifically assigned to you would be visible in a tile format with some high level analytics such as start end date Etc or you could filter on all projects and have access to any and all project that is currently going on right if you were to select a project the application is capable from a project perspective to provide you details relative information and data about the the project you're managing that is where in which you would um log your risks opportunities and issues ETC it has a Gantt chart capable of providing visibility into critical path Milestone tracking cost information benefit information and also has a nice standardized uh analytics screen here that brings you to high level information around what phase the project you're on the status you're in the percent complete so for any and all projects that you might be managing you would have the opportunity to really get a handle on hey what is it that I'm looking at right I think the next one here you're going to go to Mark looks like that planning console we're talking about managing the critical path so similar to many other applications used to to manage project any other software you'd have the opportunity to manage dependencies start dates end dates assignment to tasks Etc right and then the last piece here is what we referenced earlier in terms of the status reports so these status reports are out of the box and they what they do is they provide an a streamlined consistency into which data is escalated up right or presented here you can have your risks your Milestones trending of your status report history and really start you know bubbling up what if and what's needed to the appropriate eyes and stakeholders to make better decisions and of course in addition to that you have your standard kpi indicators cost schedule budget red yellow green that enable the organization to have a consistent model of of data you know and data elements to to report up with this detail screen I'm sorry Marky I was just going to say this detail screen I think is where Mark's going to be essentially managing the rest of it through but this is what I was alluding to in the very beginning with the details and a lot of the data that is pretty much the dashboard for a project manager to be running their their individual projects go ahead Mark oh perfect thanks Mike so this is where we're going to kick off at this point from project and we're going to move into and you're going to see the tie over into the integrated risk management um and you'll notice there is a process flow up here you're going to see that repeatedly as we go through all the different functions that we discussed today risk issue opportunity and back to project that's one thing about the servicenow platform you do have a lot of standardized things so it's easy to maneuver and understand different screens no matter which module you're in gives you just that nice ease of action but we're going to be going down here and what I'm concerned about is risks we're going to dive into this area here so when I look at what we're going to tie back to so that workflow that we're talking about we're going to be going from Step One into step two and then eventually into 2A okay so when I look at the risks associated I can add new risks at any point but I can also edit so when I look at the edit function this is where I'm actually pulling in Risk from the risk registry so anything that's already been out there because we know the same risk can apply to multiple different projects so why are we Reinventing the wheel all the time adding a new risk I could pull them in from the risk registry at any point select those and bring those over that way it's nice ease of use but obviously if I have something new right we run into those new risks all the time every uh new adventure brings some new issues so we're going to select on new today and this is where we're going to start taking off and now you can see I'm actually in the risk record but I've moved in to the irm space at this point okay so let's go ahead and we're going to start filling this on the blanks now there's two different ways I can do this I can inherit information from a risk statement this gives me different attributes that are already out there that have been developed within the business unit or organization saying hey these are particular things that span across different risks so we can go ahead and grab those for statements across or I can create from scratches what we're going to do go through because we don't want to take the easy route to do that so category I'm going to select operationals what we're tackling today now you're always going to have a required entity because we need to tie it back to something what what is the target area that I'm scoping okay so we're going to Target accounting and finance it could be anything now an entity depending on organization or business unit or or company that can be anywhere from a laptop computer to an airplane okay so that's depending on organization really determines what an entity is but really it ties back to something functional something that requires action around it whether it be a project obviously from building an airplane there's a project involved there's a lot of moving Parts there's a lot of risks involved there's a lot of financials involved so you know that would be a solid entity but inside of that there's a lot of different there's an engine to the airplane right so the engine could be its own entity so just keep that in mind when you're going through and building some of these things out that that can go on and on there's a lot of different registry you can take there okay so I'm going to go ahead and submit that Okay so as you can see we've moved into that risk space like I said this is where we're going to go ahead and take off and we're going to go into the risk workspace so we're going to get a little more Dynamic with this thing and within the risk management workspace I can see my overall risks that are out there any new risks that have been created I can see my high level okay I have 26 very high that I need to tackle obviously if you've worked in servicenow at all you know every one of these links I can drill down into the actual data and get any results I need back so I can see what these 22 different controls these 22 different risks that don't have mitigating controls I can drive into those I can track different controls by testing status obviously controls are are very important when we get into risk do I have controls in place have the controls tests be done to roll out and make sure you're mitigating the risk or I just need to accept it based on that result and then any attached issues so now issues is a is a nice touch because these can go across the board these can apply to different areas they can be as simple as a small task or something more very something larger where I need to tie a budget to it depending on what I'm doing issues can come off of projects that can come off of risks they can come off of engagements or Audits and opportunities as we'll see unless the Light Flow across the entire platform in these different regards I'm speaking to okay when we look at the tasks involved so obviously as an individual I need to see what I'm doing I have different issues I need to take care of I'm a owner of risk responses my groups obviously I can get into those and then there's also issues right this is similar to that risk a lot of times issues are overshadowed but they are a big part of our day because a lot of times I can issue I can set up an issue for someone that's external to the irm team but I need them to actually handle a task before I can mitigate a risk at any point so I can track those I can look at overdue issues by priorities what's the timelines on those who they assigned to I could track those in so these ones are mine I have two assigned to me so I guess I need to get to work because I can do my tracking on open remediation tasks out there overdue remediation test so if I have 115 open and 98 or do I'm not doing too good somebody's gonna get mad and then obviously I can look at trending on the performance of how we're tracking those open and closed issues okay so nice training abilities there we're going to go into looking at this flow here I can see I have two different list agents here my lists are really my favorites so how is Mark working today I might set up some different favorites but so you can do that because sometimes we don't want to go through this whole lengthy list but I'm going to dive into this risk right here now I'm going to grab this one now when we look at the different risks as we get involved in them you'll notice there's multiple different areas here I have assessments details risk response tasks issues that are open out there where am I going with these different risks as we're tying in it um the time across the board okay so I have my draft State that's where I'm just I was just simply putting in that information and you saw which is going to be on the details and we'll go back to that in a second I have my assess that's where I'm sending an assessment out it needs to be scoring so I can get back a score on my risk from extended party now depending on the type of risk I need to determine who needs to answer those questions to give me my risk scoring it's probably not me it could be an outside party it could be a security team firewall team whatever it may be I need to send that risk assessment too to make sure that I'm getting good scoring back so we can track this properly okay and then obviously I can do more monitoring if I have risk events involved I will cover those you can see there is an assessment that's already been processed on this one we did complete that out and then I have multiple issues so going back to the issues here again just like we did with the risk if I can add a new one or I can pull some in so I can add them in so any issues that are currently out there maybe they pertain to my risk and other risks I can pull those in if need be or I can create a new one so I'm going to grab a new one right now fill in some blanks here we've got vendor policy we're going to go to observation this is a compliance so I'm saying there's a vendor risk access policy that needs to be reviewed make sure we have things in the right place well that could be a high issue so we're going to put a high priority on that what's my issue rating we're going to go with a high on that as well what is my description maybe we need to review access policy with that my assignment group so I'm going to get it assigned to somebody so I'm going to go to Risk Managers because I know that team there's this guy Mark in there so we'll we'll assign it to him and issue manager so there's two different things here there's going to be somebody that manages the issues and then there's somebody that might be assigned to again I said this issues can go out to outside groups outside of irm obviously there's licensing things involved there but depending on who that is but I need somebody to control it so that'll be my issue manager watching out what's going on there and then I want to put a due date right we're just filling in some Basics here we go through otherwise what I could spend days on issues as we go through it and we don't want to do that so just some basics in here creating this new issue we're going to go ahead and save that now when I first went in there you saw some basically fill in the blank stuff once I saved it now you can actually see the issue workflow that it ties into very similar to the project workflow we looked at and the risk workflow but I'm going to analyze it I'm going to respond to it review um if I if need be and then close it out as we get there because obviously we want issues to close out over time otherwise the risk is not going to get mitigated or accepted because we need to take care of these issues okay I have my work notes comments that I can fill out on here I can dive in some more detail tabs this is where I put that general information obviously I can dive down put some more specific information but if we look over here and pull in some other things I can add in different other risks to it I can add in different entities I can assign policies to it because maybe what did I say before this was definitely something we wanted to look at as far as a policy I'm going to add that policy in because we were talking about access issues so I'm going to grab this one okay and then if need be maybe I need to add some controls on here maybe something with stamping all right so you can see all these parts are part of the irm area when I get into policies and compliance controls all these things have moved over so easily we move from Project into the irm space and down to issue management right I can also put child issues to it and then any also remediation test if necessary you can go ahead and save that and go back to that parent risk okay now right back to my risk I saw my assessments I see my new issues here so we can take care of that next thing we're going to move into is looking at how does that get me to opportunity management so I'm glad you all left we're going to move on to that question when we look at these different risks here which I'm going to jump over to risk bear with me a second I didn't want to show up one thing we need to do is make sure that we have a risk that has been responded to okay if it's not responded to already we cannot put it into opportunity management so we're going to go ahead and do an assessment we're going to assess this risk okay across the screen and should give me a nice assessment to take we're going to come in here now this is a typical assessment that goes out obviously configurable and you can have multiple types of Assessments maybe I need some particular to infrastructure I need some Financial depending on whatever the risk is we're going to go ahead I'm going to treat it like I was in high school and do a little Christmas tree here we'll do some High stuff but this is where we get that scoring from we want the folks to give us answers back on what we need to know is it something that's happening rapidly once a year once less than every 20 years obviously that's a low risk so we're going to go ahead and submit that okay once that's submitted reload this form now you can see we moved to that respond phase and you'll see this create opportunity button showed up over here because once I go through this and say okay this looks really good I think we're covering everything I'm going to put some response on this we're going to go to mitigate remember we want to make sure we tackle this risk even though we see the opportunity already we still need to close these things out so I'm going to have a response let me go ahead and save that we know how the system doesn't like it when we don't save and now I'm going to go ahead and create an opportunity okay where is that taking me now it's taking me right into this opportunity management where we're going to start building that out okay now we look at that what does that flow look like I'm going to have a draft that's the form we just jumped to where I'm going to initiate so I can set up my plan I may need to reevaluate it or defer it defer by putting it into like a backlog I'm going to request approval if we think it's a good idea we want to move it forward and pursue this action based on that approval whoever the approving party is that group is going to evaluate it they're going to review it with the team submitting it or other approvers and then they're going to make their decision based on that if I approve it it's actually going to create a new project or if I reject it then we will close out that opportunity okay now as I go through the opportunity you're going to notice some things this actually directly from the dod um real document of what sort of information do we need to gather and I'm sure this is a small subset of some of that information this gives you an idea if I'm looking at three different opportunities what's my likelihood and so forth this is sort of what we're going to step through okay so I come back over here you're going to see on my opportunity we're going to put some information in here I'm going to grab we're going to look at schedule reduction we're going to say it's moderate one there okay the cost of implementation you saw that on that spreadsheet as well we need to have some costing in here what's my program priority we're going to give this a two expected date now we're always a few months out September 1st what is my description of this opportunity because obviously the more information we give likelihood of approval the better right so what are my objectives and then what is my management strategy when I look at this okay so revise summarize the mitigation plan tomorrow's mitigation plan that's what I'm going to need to do back on that risk and see what we need to do there okay now this is just in the draft phase what we're going to do is we're going to go ahead and initiate it just like I did on that slide there a second ago and you're going to see now I'm actually bringing up my financials what do I need to do here maybe r d is going to be 25 000. um one m is going to be 375. okay we're going to do a three-month margin on this thing for the schedule what's our performance right is it a four percent greater lift possibly okay so we want to get that information in here and we're going to save that okay and that's the information that's going to be driving this opportunity for that evaluation so I have activities obviously I could put in additional comments more work notes and then down here you'll notice there's three related links I have issues related projects and approvals so we're going to do is look at that issue just like off the risk I can create new issues coming across because I saw this opportunity but guess what I think it needs um some more information so we're going to go to those Risk Managers and Mark's going to get assigned Market to sign a lot of work we're going to do this under observation because we mentioned that before when we were looking at the risk compliance isn't meeting what we need again I need that issue manager because somebody has to be responsible for it and even though I've moved this to an opportunity that same issue sort of raises its ugly head right that vendor access what's going on there I have my issue rating all right again I can add in different policies if I need to so let's see we're going to look at the operating access policy and we need to track some of these different things now obviously you can have multiple issues or one issue but we need to keep that going okay now I'm back on my opportunity you'll see I'm going to initiate phase from here I can do a reevaluate that's where I'm just hey syncing it up with my team I'm going to put a status on that or I defer it hey we're sticking it in a backlog if we need be or I can request approval now we're going to go ahead and request approval because we like it we're going to move it forward and we only need somebody to approve this for us so you can see down here here's my approving team Mark's going to come in here and he's going to get a notification saying hey you have an opportunity to request to that's been requested you can approve it to your diet marks and see the pertinent information and then he can add his comments and make a decision so I'm going to prove it because we want to move forward and what happens is when I prove it it's going to come back here we're going to reload real quick there's my approval it's moved through the process and now this team this operation is this opportunity management team see that they've been approved and they can pursue this opportunity doesn't mean we're going to pursue it today maybe we need a budget maybe it's in six months but this one's been approved to move forward and so at this point we're going to go ahead and pursue now okay what's going to happen then is this actually going to create a new project below this and I come back to these related links there that were all blank before so I have my issues I have my approvers that went in there and I have my new project that has now been created off of this opportunity okay so now this is in motion it's going to go to the pmo team to start moving forward right so what does that mean where where do we go from here is probably the big question right well here's my opportunity management dashboard so I can see what's going on I have my total opportunities I can see where they're tied to if they came from risks or other opportunities because an opportunity and come from another opportunity any risk events so this can be populated from anywhere available opportunities obviously I can sort these by the state whether they've been approved deferred or they're still in drafter or moved forward some rejected and then the projects that have been created recently from different opportunities that have moved forward okay obviously I can see different states where are they at is why one rejected and 11 were pursuing because we definitely want to clean up our act and get things moving forward okay so when we look at that now we're going to look at tying that back so when we looked at all those risks and we moved through opportunities what does it tie back to well it's tying back to some different financials so we can look at hey here's my gross losses my net losses what's going on I have events in different states I can analyze those this is all real-time information so no matter where you work in the system you're putting in your risk you're putting in your events based on those projects I'm gathering real-time data across the board okay when we look at that I'm tying it right back to the projects okay I'm back in the project Rick's risk overview here and you'll notice this heat map this is based off of those risk assessments that one little assessment I did those risk assessments come back here to the projects and give me scoring based on my different projects so I have three right here with Major Impact um unlikely likelihood here with a Major Impact for my residual risk again some moderate and unlikely but these are from those risk assessments that we did okay so I'm tying it all the way back to project no matter what part of the system we're in okay so what did that do I'm going to tie back here that brought us full circle back to that strategic portfolio manage so everything we did at the beginning we built that project we've built out our risk that information is flowing back into those heat Maps it's given me my scoring any issues are being tracked off of that we saw opportunity so we created an opportunity from that we're tracking some issues there we get those resolved and then we went through an approval process to say yes we want to tackle this and go into a new project okay so yeah let me jump over here and I'm going to go back to the beginning and show you this is that brand new project that we created right from that last opportunity so I started here and we com we ended here so everything is tied through in a circular fashion any questions I was not talking to myself the whole time because no that was great thank you okay okay good questions in the chat all right yeah um so one thing this is Andy the one thing I wanted to uh just reiterate and and mark thank you as you can see it gets it gets uh you know we have a very powerful solution for SPM right it's it's dense our irm solution also dense with Advanced risk there's so many uh different ways we can go so much so it's so flexible so what what Mark really showed was that idea of of once all those risks are put in and he showed you how to get the risks in there and once they become opportunities how they then tie back to the Strategic SPM which is the requirement of Rio is that from that project management phase you know while we're doing project management while we're in that project management record we can see in real time all the risks we can do those heat Maps we can see the dashboards um to be able to assist uh you know to uh to go over the risks uh and and to either solve them or close them out or or work through through them as the as the project management continues on so again it really is it ties into all of these Solutions tie back together um into one record that we can then track uh to meet the requirements of of of Rio right exactly in in the and just one more point when you look this this workflow that I'm sharing right now is simplistic compared to what we actually walk through um if you were looking at some of those screens and then I cannot play stance back to them the issues we were tying them back to controls we were tying them back to audits we could tie it back to policies it was very intertwined uh the irm area is like a spider web because you can cross all the different boundaries with it you're not in a linear process flow even though we've sort of stepped through one today but I can jump from one area to the other and what we've done here is we've tied the SPM into that right so so now SPM has now become part of that web between the two areas and you saw that from those heat maps how I'm tying that information from irm we're getting true risk management on Project risk where in the past you would have a project risk it would sort of stay in project and then the project would wrap up and we say yeah we have the address through it and we're just going to categorize them at the end of the day and you really didn't have risk management during the project as it was happening what we've done here is now you're getting true risk management as you walk through and tie those so as the Project's going on you could be mitigating those risks you can be creating opportunities from them for the next project um so at the end of the project you're saying hey yeah we had a couple risks but guess what we work through them they got all worked out during it and we have some new opportunities off of it so we've really pulled SPM into that the irm web of different applications policy compliance audit risk issues all that stuff is now tied together we do hope the information you received during this webinar has been helpful if you have any further questions um that come up later or like to request any more information please feel free to reach out as mentioned at the beginning the recording will be emailed out to all of the emails you guys use to register with so um thank you guys again

View original source

https://www.youtube.com/watch?v=cVKFZ0fZloE