0. Road Map (Updated October 2015)

1. About the Governance Portal Road Map
The Governance Portal roadmap outlines Protiviti’s development intentions with respect to the next five dot releases of the Governance Portal. To coincide with Protiviti’s release scoping, it provides detailed itemization of enhancements that have been scoped into the current release while providing high-level overviews of the larger scope areas of focus contemplated for subsequent releases.
This document is purposed toward communicating with Protiviti’s Governance Portal customers regarding Protiviti’s contemplated road map so that customers may review, plan for and participate in the advancement of the Governance Portal. The enhancements identified herein are subject to change based on changing client and market demand. Enhancements identified within near-term releases have more certainty than enhancements identified for subsequent periods. Further, releases are based on Protiviti’s intended schedule, and are subject to change based on QA certification of individual releases.
The Governance Portal Road Map contains the following sections:
Release Schedule – Outlines the scheduled release dates for version updates (X.x.x), dot releases (X.x) and major releases (X).
Features Road Map – Outlines contemplated features for the next five dot releases of the Governance Portal. The road map includes itemized descriptions of individual features.
Technical Schedule – Outlines the current and targeted versions of hardware and software that are certified for running the Governance Portal (e.g. SQL 2014).

2. Product Roadmap Methodology
Product Management reviews the product backlog with each release in order to prioritize features and enhancement requests for subsequent releases. Product updates are released monthly. Minor releases are released bi-annually (March and November). Major releases are typically delivered every three to four years.

3. Release Schedule Calendar V3.x V4.x October 2015 3.15.12 November 2015
4.6
December 2015
January 2016
4.6.1
February 2016
4.6.2
March 2016
4.7
April 2016
4.7.1
May 2016
4.7.2
June 2016
4.7.3
July 2016
4.7.4
August 2016
4.7.5
September 2016
4.7.6
October 2016
4.7.7
November 2016
4.8 release
*Version 3.x will only contain high priority tickets as needed per client request. 3.x Support ends at the end of 2015.

4. Features Road Map
Core Component
V4.6
(November 2015)
V4.7
(March 2016)
V4.8
(November 2016)
Next 12 Month Themes
GRC Register
Policy Waivers
Tagging Framework
Projects
Project Archive (Updates)
Project Findings Library
Project Copy
Resource Management
Workflow & Survey
Assessment Navigation (Updates)
Calculated Fields (Updates)
Time-based Notifications
On Demand / Scheduled Assessments
Reporting & Analysis
Pivot Grids and Charts (Updates)
Business Intelligence API
MS Word Reporting
Custom Query
Platform-Wide
Authentication Enhancements (SAML)
Updated SharePoint Connectors and Other System Integration Tools
Archive Improvements: BO accepting changes (not in scope), forms in the audit RCMs for the sub-objects, attachment archiving

5. GRC Register Details Name Description Policy Waivers
This feature incorporates a new record type into the system that can be used to manage policy waivers or other types of action items. The record types will behave similar to the current action plan record type in terms of assignment, workflow, notification, linking and searching. It will also support end-user contributions of new policy waivers through a ribbon button without having to initially navigate to the specific entity, enhancing the end-user experience for infrequent users.
Tagging Framework
This track supports additional use-cases relating to tags, including the incorporation of entities into the tagging framework to allow for additional linkage of entities to detailed GRC records (e.g. objectives, risks, controls, tests, action plans, etc.). The system currently supports entity-to-entity linkage that would, for example, allow for linkage of a policy to an organizational unit or process. Incorporation of entities into the tagging framework will allow for a policy to be tagged to a sub-element such as a specific control within an organizational unit or process.

6. Project Details Name Description Project Archive (Updates)
A continuation of building on the project archive capabilities introduced in Improvements included enabling attachments, findings, and history on the project RCM sub-object forms introduced in 4.4 as well as allowing for inter-linkage of the objects within the audit context.
Project Findings Library and Project Copy
This feature will increase the efficiency of auditors by allowing them to create findings from pre-existing findings templates as well as to copy specified elements of previous audits into their current audit file.
Resource Management
Capabilities to schedule audit groups (instead of individual auditors) across multi-year audit plans will be introduced into the system to allow teams to allocate times to audits based on the capacity of various audit groups (based on geography, discipline, etc). Within this feature theme, client requested enhancements related to the Scheduler will also be incorporated.

7. Workflow & Survey Name Description Assessment Navigation (Updates)
This track supports enhancement requests by clients based on recently introduced assessment navigation options relating to single or multi-record access to page-based assessments (e.g. respond to one control at a time, or respond to multiple controls packaged within the user’s entity all at once).
Calculated Fields (Updates)
This feature will introduce mathematical calculation options (e.g. addition, subtraction, multiplication, division, min/max) for a single record in addition to the current look-up based calculations.
Time-Based Notifications
This feature will complement recently introduced pre-filtered, editable search features to allow for time-based notifications (i.e. notifications based on a certain date and status related to specific record) without requiring deployment of tasks. The intention of this feature is to reduce the requirement of task deployment and management for task-based workflow in order to make system administration simpler and more efficient.
On Demand / Scheduled Assessments
Assessment managers will be able to associate assessment templates to specific elements of the GRC register, and establish an assessment schedule that periodically auto-generates assessments without assessment managers or administrators having to manually deploy surveys. This feature will support advanced workflow scenarios whereby more wizard-driven forms can be deployed to end-users to gather their inputs across GRC topics.

8. Reporting & Analysis Details
Name
Description
Pivot Grids and Charts (Updates)
A continuation of building on the interactive pivot grid and chart dashboard capabilities introduced in 4.5. Improvements focus on ease of use and include the ability to download charts into a .PDF and Word format, viewing record data within the grid or chart without having to return to the search result page and hiding subtotals to allow large datasets to display accurately, drill-down into a pivot cell as well as other navigational and visual improvements based on initial user feedback.
Business Intelligence API
This feature will allow clients to more easily leverage their internal BI capabilities and tools to develop custom reports from GP data through an API that allows for searches to be created within the GP, and then called upon externally to incorporate into a data warehouse (e.g. SQL database), popular reporting tools (e.g. Tableau), and MS SharePoint. The newly defined API obviates the need for a BI analyst to understand the underlying data model as the search developed in the GP will perform all necessary linkages via an intuitive interface.
MS Word Reporting
Clients will be able to utilize out-of-the-box system views to automatically generate reports directly in MS Word. This feature is contemplated to support more advanced translation of HTML inputs into end-report deliverables. For example, it is designed to generate an MS Word report that can transfer a table that has been inserted into a memo field from the Governance Portal directly into an MS Word template.
Custom Query
Custom queries will introduce the ability for system administrator to define data calculations (e.g. addition, subtraction, multiplication, division, min/max) within the search definitions to support additional flexibility in the system’s ad hoc analysis.

9. Platform-Wide Details
Name
Description
Authentication Enhancements (SAML)
Security Assertion Markup Language (SAML) is an XML-based, open-standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider. This will provide single-sign on support in a hosted environment.
Updated SharePoint Connectors and Other System Integration Tools
Protiviti will pursue a best-of-breed market approach that acknowledges that many clients use multiple systems (GRC and other) to support their varying GRC requirements. Improvements to the Governance Portal will be focused toward features that directly increase the efficiency and effectiveness of synergistic GRC program teams. In addition to core platform improvements, Protiviti will introduce tools and working examples that support integration with other elements of our clients’ GRC ecosystem including improvements to the availability of Protiviti’s core reporting model via SaaS deployments for development of custom reports, MS SharePoint and other technology integration examples.
Initial SharePoint connectors will include updated connectors for MS SharePoint 2013including the ability to integrate with the client IT SharePoint environment from a Protiviti (or other external hosting provider) hosting environment, the ability to synchronize data contained within a SharePoint list to a GP business record (e.g. incidents originating within SharePoint) and leveraging of the Business Intelligence API to synchronize data within the GP to a SharePoint list (e.g. action plans originating in the GP).

10. Current Certified Versions Targeted Certified Versions
Technical Schedule
Technical Component
Current Certified Versions
Targeted Certified Versions
Target GP Version
MS Windows Server
2008 R2 (32/64-bit) Note: MS support ended** Jan We will no longer certify beginning with 4.7.
2012 (64-bit), 2012 R2 (64-bit)
2016
4.8
MS IIS
7 (Server 2008), 7.5 (Server 2008R2/ Windows 7) Note: MS support ends** Jan We will no longer certify beginning with 4.7.
8 (Server 2012), 8.5 (Server 2012 R2/ Windows 8.1)
10 (Server 2016/ Windows 10)
MS .NET Framework
4.0, 4.5 Note: MS support ends Jan We will no longer certify beginning with 4.7.
4.5.1
4.5.2
4.6
MS Operating System
Windows 7 SP1 Note: MS support ended** Jan We will no longer certify beginning with 4.7.
8.1 (update to Windows 8)
Windows 10
MS Internet Explorer
Google Chrome
IE8, IE9, IE10 Note: MS support ends Jan We will no longer certify beginning with 4.7
IE11
N/A
MS Edge (Windows 10)
Latest version (45)
MS SQL Server
2008 R2 (32/64-bit) Note: MS support ended** July We will no longer certify beginning with 4.7.
2012 SP1 (64-bit)
2014 SP1
MS Office
2010
2013
SAP Crystal Reports
TBD
MS SharePoint
TBD *based on Microsoft’s schedule
MS Silverlight
5 Note: MS will not release any new updates, but will support through 2021
* New Technical Component versions will be certified within one year after release /service pack date. ** Refers to Microsoft Mainstream Support