Welcome everyone, and thank you so much for joining us today for the Impero Q1 product update webinar. We are extremely thrilled to see so many of you here. Before we get started, there's just a few things that you need to know. This webinar here is being recorded, and we'll share it with you afterwards via email, and we'll also share it in our help center. Please feel free to use the Q&A button if you have any questions, and all the questions will be answered at the end of the webinar. Quick intro to myself first here. My name is Morten Christensen. I am Customer Experience Director here in Impero, and I'll be the moderator here for today.
Joining me, I have three fantastic colleagues. I'll do you first, Kristian.
Thank you, Morten. Hey, everyone. My name is Kristian Jensen, and I'm the head of product here in Impero. I'm really excited to see so many participants in the webinar and so many familiar names as well. Today I'll be focusing on the recent releases since the beginning of the year, but also talk a little bit about what's to come and roadmap. I'll do a deep dive into Entity Management. Over to Raquel.
Thank you, Kristian. Well, first of all, welcome everyone. It's great to have so many of you with us today. Raquel, Product Manager here at Impero, and today I'll be walking you through a new addition to the Risk Module. Over to you, David.
Thank you. I'm David. I'm CTO here at Impero, and I'm gonna talk a little bit about AI and all the quite amazing things that we're working on and what we are launching very short term.
Perfect. Thank you. You scratched the surface a little bit on this, but just to highlight what you can expect here from us today, we'll do a walkthrough of our most recent releases, and then we'll do a revisit of our product roadmap and what's ahead. We have a few features in focus, whereas Raquel will talk a little bit about our Insights tab and Risk Module. We'll talk about AI and our journey here in Impero. Wrap things up with Entity Management. Then as I already mentioned, we'll do a Q&A in the end.
Again, if you have any questions, please utilize the Q&A button in Zoom, and we'll answer them for the best of our capabilities towards the end of the webinar. Before we get going, we'd like to kick things off here with a poll and would like to know what is the biggest challenges you are facing today in managing risk and controls. Is it defining effective controls? Is it embedding these controls into the daily operation? Is it staying ahead of regulatory changes? Or that you have limited resources or lean teams? Balancing global standards with local requirements, or is it any other things? You can feel free to answer that or to write that in the chat as well.
We'll give everyone here a few seconds to answer the poll, and then we can see the results afterwards. Perfect. We see a fair distribution here between the answers. I think the majority for the majority of you, it's embedding the controls into the daily operations. And then it's also that, well, we are working with limited resources or lean teams. And then that's closely followed by designing effective controls and staying ahead of the regulatory changes. Thank you so much for the submission. It's really exciting. Let's continue with you, Kristian, and talk a little bit about the recent releases and roadmap.
Thank you. Yes, I'll be talking a little bit about what we already did, but also what's to come and trying to focus and highlight some of the things that we're doing there. Next slide, please. All right. We already have the control testing module as one of an add-on module that is used by our customers to maintain effective and efficient controls. In the last quarter, we have also added two key features to help with control testing, particularly random sampling, but also estimated sample activities. Random sampling enables the control test creator to require random sampling as a part of the control test, effectively avoiding potential cherry-picking of certain samples.
The other part, the estimated sample activities, is a helping hand when creating control tests to ensure that you have a wide enough scope, so that the control tests can actually run efficiently. Next slide, please. Previewing files was already possible with an Impero platform, but we have now extended that functionality to also include Excel files and CSV files. Previewing files can, of course, sometimes make it much faster to review or perform controls, but it also can remove a critical thing of like needing to re-download a local copy of a file to your local machine, effectively reducing some of the risk there. Next slide, please. We also added some negative filters and adjusted view functionality on some of our table components, particularly in the pending actions and testing activities.
These are smaller quality-of-life improvements that is basically trying to make the overall platform a little bit more consistent and having some functionality that you can recognize across the various tables on the platform. This is something that we are in the process of rolling out to additional tables along the platform. If you do next slide. We have a lot more, a lot more things that have released, but you can get a full overview of this and a deep dive into it with our knowledge center. Here's just a few of them. We added the functionality so you can now view previous control results as a reviewer. This is similar to how it already was if you're a performer.
We have also added the reporting period to all relevant emails that is being sent out in your inbox, so it's a little bit easier to sort through and get an understanding of what's the most urgent thing to act on. Within the risk map and the risk module, we have added the functionality to make it mandatory to add a control as a response, but this is something that would basically need to be configured for your specific risk map, and it's not enabled per default, but it's a fairly small task on our side to do so. That was a little bit about what we have already released. Now I'll move on to the roadmap.
Moving on to the roadmap, and this should hopefully be a familiar sight for those of you that have participated in these webinars before. I've already gone through some of the things that are in blue. If I haven't gone through them, that means that we will dive into them a little bit later in the webinar here. We'll start with focusing on the green boxes and then later going into the yellow boxes. The green boxes are things that are already in progress within the Impero platform, and that we're working hard on enabling for all of you.
If we start with the green boxes, we have Entity Management and dynamic data sheets, which is something that I'll go into a little bit more detail in a deep dive on Entity Management and the current progress there. From left to right, we have control analytics, which is basically an add-on or something that is related to the dashboard functionality, but where we're working on giving you a little bit more insights into specific challenges across the full control life cycle, and expanding on the existing dashboard functionality. On the AI features, we have David Højelsen with us today, which will be going into a full detail of what we're working on and our approach to AI, so I'll let him cover that in the section.
Moving further to the right, we have connectivity, which is where we are basically trying to upgrade our Power BI connector, and we're also in the final phases of supporting provisioning and deprovisioning of users through identity management systems. We're gonna start with Azure. We're also gonna be adding functionality for Okta, so you can basically through this system provision and deprovision users. If I move on to the yellow boxes, I'll start over on the left side again with the postpone activity due date, we recognize that there can be different reasons why you need to postpone the due date of a control. We want to make this a little bit easier while of course still logging the action that we had a specific activity here that was postponed.
Besides all the things that are in green, we're also working on additional prototypes with AI, and it's generally speaking an area where we see a lot of potential, but of course, there's also a lot of risk, so we're trying to balance that. Over in the section around user experience and user interface, we are basically trying to do some changes with our emails, particularly around like potentially supporting a wider labeling of email logos and colors. We're also trying to investigate the possibility of doing custom mail servers, so that emails that are in theory being sent by Impero will be sent by an organization's own mailbox to hopefully reduce confusion around like what is this email from Impero for internal users in your organizations.
If I end at the right section of integrations and connectivity, we are exploring additional ways to have a to deepen our integration with SAP, as well as overall integrations, overall improvements to our APIs and MCP. That's what I just covered on the roadmap. I'm sure there's a lot of questions, or if there is, please feel free to ask them, and then we'll make sure to answer them in this process. Now over to Raquel, who will be presenting our new tab in the risk module.
Thanks a lot, Kristian. Definitely a lot of exciting things coming up this year. On my side, I'll be introducing the Insights tab, that is the newest addition to the risk module. This is something that we developed to address a common challenge we see when working with risk maps that is basically getting a clear view of how risks change over time. Previously in Impero, if you wanted to understand what actually changed between two reporting periods, you had to compare those views manually. The goal with this new Risk Insights tab is that now you can compare two points in time directly and then clearly see how your risk landscape has evolved. Let me just share my screen. I'll be showing you exactly how this looks like. Okay. Hopefully you're able to see my screen now.
Here within the risk management module, in the risk map, you'll now see a new tab that is called Insights. The structure of the page is very similar to the risk map tab, with the difference that here on the top left corner, you're gonna find this date selector that basically allows you to compare your risk landscape between two selected dates. Here you simply need to choose a start date and then an end date, for example, this one. This will allow you to see how your risk have changed between these two selected points in time. There are essentially two parts in this view. First of all, the map, and then the table.
Starting with the map, it works very similar to the regular risk map, and basically, here you can see the distribution of the different risks that you have for the latest date. What's new here is that it also highlights how this distribution has changed compared to the earlier selected date. For example, if we look at these bubbles over here, each bubble represents the number of risks in that quadrant for the latest date, and then the indicator on top shows how that number has changed compared to the earlier one. If we take this quadrant as an example, here we can see that there are three risks in this quadrant, which is a two risk increase compared to the earlier date in that same quadrant.
Basically here the goal is to be able to spot and understand where the different risks are increasing, decreasing, or remaining stable across the map. If we go below the heat map, you'll be able to find a table that shows you a more detailed breakdown of the risks that are included in the comparison. Basically, for each risk, and then for each entity, you can see the value that is at the earlier date, and then the change to the value at the later date, if there was any. If we take an example, we can see that here in this specific risk, when it comes to inherent impact, it went from high to very high. When it comes to inherent likelihood, it went from likely to highly likely.
Just like in the risk map as well, you can apply the filters to focus your analysis, and you can do that directly by clicking on the heat map or by using the filter on the top. One new addition to this as well is that you'll be able to spot the new and removed risks between that selected period, and you can see that with these green and red labels shown on the table. Also, if you'd like to go deeper into how this all works, we have a detailed Help Center article that also includes a walk-through video from William, that is our implementation specialist. The next step for here.
For us here is to help you interpret this data even more easily, and that's why we're working on using AI to explain all these key changes, but in a more plain language. With that, I'll hand it over to David that will go deeper into all these upcoming AI features and our approach to it.
Perfect. Thank you very much, Raquel. It looks really good. Can you share the presentation, Morten?
Yes.
I'm gonna talk a little bit about AI in Impero. We have talked about it before on previous webinars. Since then, we've been working very hard on building actual features. Please, the next slide, Morten. Yes. That will actually be able to create a lot of value for our customers. What we would like to reiterate a little bit is our stance on AI. There's a lot of platforms in the market in our space that is basically promoting an AI first approach. We are a bit cautious to this as we see a different path.
I think it's extremely important to utilize AI in the right ways to basically reflect on the first poll that was filled out to solve some of the things that are actually relevant in the day-to-day work meaning how can we improve the completion of controls? How do we make controls operational? How do we also make the managing of controls as easy as possible? We wanna use AI where it makes sense for risk and control processes. We don't believe that AI especially in our realm will be able to replace human validation and verification. It probably can but I think it will require legal changes. That's not something that we are gonna be looking into short-term.
We don't believe that AI should make governance decisions independently. We want to make an AI feature set that is as frictionless as possible to use, basically giving you guys a little bit of superpowers in running the Impero platform. Again, just to reiterate, we are not enabling AI for any tenant unless explicitly opted in by the admin of the platform. We are not training on any of your data, and we basically design features to decrease the risk of leaking data to AI and models. Just emphasizing that because I think it's extremely important that we don't just throw data around to different AI models without thinking about it. Next slide, please, Morten.
How are we prioritizing AI? Well, basically, these three pillars underpin it quite well. We want to accelerate the risk and control processes, we want to simplify the day-to-day operations, and we want to support insight-driven decision-making. It's about assisting, basically assisting giving insights into the current processes, have AI use metadata to assess patterns, identify potential problems, shortcomings in the setups, but it's also about removing manual time, repetitive tasks, and providing as good starting points as possible, for building and managing the entire setup.
I think underpinning all of this is a philosophy that AI has to make sense from a margin perspective, so essentially lowering the time operators spend in managing the controls, but especially actually lowering the friction in your organizations in collecting the controls and reviewing them and so forth. If we can lower that time by even a few%, then we'll save your organizations a lot of money and increasing your margin. That is sort of the underlying main goal of the initiatives that we're taking. Next slide, please. In late April, early May, we are gonna launch this what we call the Impero Assistant.
It's basically an AI assistant within the platform that basically covers a lot of the things that we just talked about. It's meant as human-validated and always audit-ready. It's basically a set of different features that will start out by optimizing the different workflows, but it will also be set out to give you insights that you might not see yourself in the platform.
The two features are being launched that are covering the control modules, or basically the setting up of control controls, and two features in the risk module that will utilize metadata to summarize and shed some insights on the risk maps and the risks that you have in your organization. Next slide, please. As you can see here, these are just some screenshots. We are gonna have a launch of this that will be communicated, and you're of course very welcome to participate in that. The first thing that I could just elaborate a little bit about is the Impero Assistant.
That is basically set up for building or helping to build controls and setting up controls. We've seen a pattern where some customers or some users actually leak data to external LLMs by, for instance, in the description field of a control, copy and paste between ChatGPT or other not necessarily validated platforms in order to get writing help. What we did was we basically built a context-aware writing assistant within the platform that can actually help you suggest things, rewrite, shorten, and basically make anything that you would expect from a writing assistant within the application.
We're also gonna do task suggestions, for instance, so you can, based on title, control program, description, have a task section already be suggested and pre-built, lowering the time and effort for you guys to set up controls. On the right-hand side, there's a slight preview of some risk insights. It basically speaks a lot to what Raquel presented. It's also been done by Raquel's team, so very good. Nice work there.
Basically, it adds a section that, based on the data that you see in a risk map or a time span of a risk map, it will be able to summarize, give you pointers, and actually underpin specific things that you might need to either do actions on or similar. Lots of things coming. We have a stack of prototype features that are really exciting that we're also working on, but we'll have more on that later. Looking forward to showing it to you guys.
Thank you, David Højelsen. It looks really exciting. Now we'll send it back to you Kristian , for something that a lot of our customers are also really, really looking forward to.
Yeah. Talking about things that excites one. I'm really excited to talk about Entity Management. We had our co-founder, Morten Balle, in the last webinar go through a little bit of the motivation of, like, why we're doing Entity Management and what will be possible within Entity Management. I will be trying to focus a little bit on the value that can be generated in terms of central governance and local management, whether for teams of five or 500, all focused on this principle here, one control framework centrally governed and locally managed. Next slide, please. Impero already today allows organizations to define and operate a central control framework aligned with the internal governance model.
Entity Management is effectively an extension of this by introducing an organizational layer on top that enables a more granular access control and a clear delegation of operational ownership within the organization. As a global or group admin, you can create one single control program and apply it across multiple entities. Each individual entity or each local entity will therefore only have access to information relevant to their own entity, and they can be granted access based on standard access rights, whether they need to be able to change things, whether they only should be able to view things, or whether they should be the owner of their local entity.
In that way, they can be set up so they can be granted access to set performers and reviewers on the tasks, and this can still be managed on a global level, as well as the local admin can also send reminders and follow up on assignments in terms of things going on at the local entity. This effectively enables organizations to maintain one control framework with a granular access control and a strong data separation between various entities. What does this look like in practice? Let's take a look at a feature, a specific feature. Next slide. Yes. Some of you may know data sheets, some of you may not.
Data sheets is a way that can already be used today of pushing data in, either manually or through an ERP or API integration, where you typically would have structured data that is used as a part of a control today. This could be an example here of a balance reconciliation. With Entity Management, a data sheet is gonna be able to have one column, which is gonna be entity, which basically links each item in each column with a specific entity. Therefore, as shown here in the diagram, each assignment that each local entity will see will only contain data that is relevant to the local entity.
This allows the same control and the same data sheet to be used, reused across multiple entities, reducing the administrative overhead while safeguarding entity-specific information and not leaking data among various entities. Next slide, please. What is the current status of Entity Management and when can I use it? As it stands today, if Entity Management is enabled within your tenant, it's possible to create entities, control programs, and controls. We believe that by Q2, you'll be able to run your controls through one centrally governed control framework and actually use this in your production environment. When we look towards the summer and towards Q3, what we'll be adding is more local ownership and more delegation of responsibility so that the local admins can basically manage their own entity while still adhering to this overall governance framework of a group structure.
That's all from my side. I want to invite any questions you may have on Entity Management. Otherwise, I'll just say thank you for listening to this presentation. Over to you, Morten, and I'm sure we'll have lots more polls and so on.
Thank you, Kristian and David and Raquel for fantastic updates. Lots of fantastic things that has already happened, and luckily also fantastic things ahead as well. As Kristian mentioned, we'll just launch actually two more polls so it's not a whole lot. The first one here is whether you'd like to be an early tester on the upcoming features both within Entity Management or AI in Impero or obviously both. We'll reach out to you separately actually from my team as well, so we can plan how we do this in the best way.
I know that I've already talked to a few of you guys out there, mainly around the Entity Management, how can we actually plan if there are some things that needs to shift from one setup to another, or there's an additional rollout where it would actually be beneficial to do that with Entity Management versus what the current setup looks like. Please fill in the poll here, both regarding Entity Management but especially also around these AI features here that we are doing.
We have a chance to reach out to you afterwards and see if you're eligible for any beta or early access on these. We can make sure that we both test them as good as possible, these features, but also to make sure that you get as much value as possible at the earliest possible state. Just give you a few more seconds here before we proceed. Perfect. Again, we see a very nice distribution here. There are some that are interested in the Entity Management part. A lot who are interested in the AI as well, and luckily even more who are interested in both.
We are aware that there are some who would not, you know, be in scope for these parts here as well. We'll definitely stay in touch from the customer success managers, so we'll reach out to you afterwards. I'll just see if I can hit the next slide here. Yes, that worked. Perfect. Before we move over to the questions, just a few things we'd like to highlight here as well. Our help center, it's actually both available directly from the platform in the lower left corner, but also through support at impero.com. There's tons of material here, and we've actually really started utilizing
Raquel mentioned this as well with some of the video guidelines that we've done with William as well. We're really spending quite a lot of efforts on both describing these updates that we're doing, but also with supporting material. We also have a new blog, and we have a simplifying our SOC webinar recap. You can read that here as well. To you know stay connected and to make sure that you're up to date with Impero news, you can always follow us on LinkedIn for any behind the scenes actions as well that's happening along with company news, et cetera. Especially these might be the ones who are at least local in my area around Aarhus.
We're hosting a networking event here in a month's time in April. Please join us on that. Again, we'll share the material here afterwards, but you can also find it on our website. It's gonna be really fantastic as well. Finally, sign up for the newsletter. The QR code's available on the screen now. As I mentioned before, there were two polls. This is the final one. We spent quite a lot of time, our marketing does. I was just trying to take some credit for that. Our marketing team is spending quite a lot of effort and time on how we actually communicate best in these items.
Especially our newsletter is something that's really, really evolved over the last year or so. I know a lot of you are receiving this already, and if that's some content that you would prefer to see some more of in the future as well, then we just have a quick poll on that so we can make sure that we focus our efforts also from a marketing perspective, obviously on again to provide you with the information that is most valuable for you.
While we wait for that, should you have any questions, either in general or for the features that now that we have the entire product team, after almost at least a year, then please fill in your questions in the Q&A section, and then we'll skip to that or jump to that, in a moment. We have a few minutes to answer those before we wrap up today. I see we want a little bit of everything. That's fantastic. Both more of these checklists, events and webinars and customer stories.
Thank you so much for providing that information to the marketing team as well. Let's dive into the questions. I'll just get them on my screen here now. All right. I might route some of the questions to you guys specifically, but otherwise just jump in if you have any. I think there's one here that might be for you, David, around, do we have a timeline for when the AI functionality will be available?
Yes, definitely. As mentioned, we are planning to launch AI features in the beta scope in late April, early May. If you are interested, please reach out and we can have a dialogue about how to enable it. It again has to be explicitly enabled per tenant, as per our rules.
Just to follow up on that, there's a question whether a custom LLM can be used in by the Impero AI.
Currently that's not possible for the main reason that we want to be able to govern what goes into any model and where that model resides. However, we have had discussions about for specific features integrating eventually with customers' own models. It could be that for data privacy reasons, some customers would have their own on-prem models running on their own hardware. It's definitely something that will be interesting to have a discussion about if there's a need and a requirement for that. Happy to have the discussion. If you would like that, then please reach out and then we'll be happy to talk about it.
Perfect. We have a question here I think it's related to the Entity Management, but it's a little bit on the access rights. Would it be possible to grant access to a control program for a specific entity where users can only modify control owners and reviewers, but not the controls, themselves?
Yes, that will be possible. The idea is that you as the global admin or the group admin will be able to specify specific controls and specific control programs, and then you can basically specify how much access should the local entity be able to do. In this case you could say they should only be able to assign or reassign or send reminders and so on. They should not be able to touch anything in regards to the control. Therefore, they're able to do all the things that is more efficiently locally managed, but not the things that you want like to govern on a global or a general level. That's definitely possible.
Perfect. Thank you for that. There's a question, I think it's actually more in general here. What about something like holiday replacement for the task solver?
Yeah. We haven't looked into a specific holiday replacement functionality, but one thing that we definitely would like to do is make it when there is a specific holiday or similar coming up, to make it super straightforward and maybe even highlight that something is going on and you maybe need to take an action here. Of course, if we talk like in the concept of Entity Management, then instead of the group admin needing to know that in this local entity we have someone going on vacation soon, and I need to change this assignment, then this will now be the responsibility of the local admin instead, that hopefully will sit a little bit closer with the specific team member or team members.
Perfect. There's a few here that I'll just quickly answer as well. Is it possible to get the presentation afterwards? Yes, we will share everything here afterwards as well. The slide deck here that you should also get a copy of the recording, so you can see that part as well. Let's see here. It's actually there's quite a lot coming in so let me just see. Do we have any updates on reporting pages in general? If you can a few words on that.
There is no specific larger upcoming changes to the reporting page. I'm not entirely sure exactly what areas would be interesting. I would love to follow up with the person asking the question afterwards to understand a little bit deeper what the ask is here.
Perfect. Thank you for that. There's something that's actually related to maybe the additional cost on Entity Management in this case here. Does the new Entity Management create additional cost or does it just need to be activated on demand?
Yeah. Entity Management is a part of the enterprise subscription. Should you be in doubt of what sort of subscription you're on, I invite you to reach out to support or your CSM, and I'm sure they'll be able to advise you. It is a functionality targeted for larger enterprise organizations. Yeah, I hope that answered the question.
Perfect. It definitely did. I think we have time for a few more questions here. I think there's still a lot around the AI as well. Will there be more AI features available later this year?
I can take that. Definitely, yes. I think we have a lot of working prototypes already, but being a little bit cautious in how we launch all the features in a timely manner. We are basically cherry-picking the ones that makes most sense first. There will be quite a big handful. We are to say the least very far behind the scenes with a lot of optimizations. As you can probably all appreciate, putting that much AI into the platform too quickly can also be a problem.
We are testing and experimenting a lot, and we would always love to engage in dialogues, understanding your workflows, how we could potentially optimize your workflows with the models that we are working on currently.
Perfect. We have, I think it's around for the data sheet here, is it possible to have an integration between systems like OneStream and Impero so that numbers can directly be interfaced from other systems or OneStream in this case here to Impero instead of have to manually updating the data sheets?
Yeah, I can take that. It is currently possible to integrate with the API that basically feeds into the data sheet today. For the specific use case, I'm sure that there could be a solution there. Whether it's plug-and-play, it's probably not, but it's a relatively straightforward integration process to actually implement this.
Perfect. Thank you. I think we actually have that described in our knowledge base as well, so you can see how you can actually. I think it's called automate data population in the data sheet as well. You can go. Now I advocate for support.impero.com, so you can go in here and actually find that here as well. Final question of the day, how do I best provide feedback on new features like Entity Management and AI?
Yeah. If you're already using some of this functionality or if you're already engaged in conversation with us, I'm sure we're already talking with you about these things. If you're one of the people that said, "Yes, I would like to try out some of this things or test them out," please, we encourage all sorts of feedback and input. We'd also love to see how you're working with, for example, AI or what you would imagine Entity Management to be like in your organization. You can reach out to your CSM or to support, and then I'm sure that we can yeah, do great things together.
Definitely. Thank you everyone for participating today. Thank you, Kristian, Raquel, and David for the fantastic update. Final thing for me today is, please save the date for our next quarterly update. It's gonna be on June 24th, and it's gonna be really exciting. As again, there's been a lot of great updates today, and obviously we wanna keep you as involved as possible. So thank you, stay informed. Thank you everyone for joining. Have a fantastic rest of the week.
Should you have asked a question in the Q&A that's not answered, we'll make sure to follow up with you and answer it directly because I saw there was a lot of questions in the Q&A. We'll reach out and follow up on those things.
Yeah.
Thank you all for participating.
Definitely. Thank you for that, addition, Kristian. There's quite a lot of questions, so it's like, it's been really exciting topics. We'll be in touch.
Thank you.