Trustero Intelligence - new interactive chat feature

Introducing Trustero Intelligence (TI) - interactive chat in the Trustero Platform that enables you to get fast, accurate answers to GRC questions with proof.

TI builds on top of the existing Q&A feature that customers have been using to answer one-off questions and help with bulk question sets, like security questionnaires, RFPs and vendor risk assessments. 

‍

Onto that Q&A feature set, TI adds:

1. Interactivity and ongoing dialog: do you have a follow-up question you want to ask? Now you can. TI remembers what you already asked in a chat as you go, allowing you to go deeper on a particular subject. 
2. More data sources: in addition to being able to answer questions by leveraging  controls, policies, evidence and previous Q&As, you can now ask questions about additional items:
   
   1. Knowledge Base Documents: any document you want to upload and interrogate, like PDFs, Word docs or spreadsheets
   2. Company info: information about your business and services from the scope section of the platform
   3. Risks, Vendors, Control Check Answers and more: most of your data is now available to TI and the rest will be added soon.
3. Change context: have a particular item you’d like to focus on as you ask a question, like a control or policy? Curious about some evidence that is attached to a particular control? Now you can ask focused questions by only including that context when you ask questions. 
4. Cites Sources: all documents that TI referenced while answering a question are listed and linked beneath the answer. This enables you to see exactly where answers are coming from.
5. Simpler usage tracking: there is no longer a distinction between “basic” and “advanced” questions. Everything is tracked as “questions.”
6. Sharing: all chats are visible to other users in the platform by default, making sharing easy. You can also make chat private if there is sensitive information in them, so it is only visible to the person who created the chat.

‍

Bulk question asking via the “GRC Questions” feature also gets some improvements in this release. It now uses the same simpler credit system and adds context management. 

‍

Uses

So, what are some good uses for TI? 

1. For GRC, InfoSec and Privacy teams: TI acts like an expert on all of the data in the Trustero platform. Want to know when the last time you ran a disaster recovery test or if any laptops have unencrypted drives? TI can do that. It is very good at finding GRC needles in haystacks of policy documents and evidence. If a policy says it or a piece of evidence contains it, TI can find it. 

2. For control owners in IT/DevOps/Engineering/HR or other non-GRC functions:
   
   1. Control operationalization guidance - how to put a control into practice.
   2. Explaining GRC concepts - it’s knowledgeable about general GRC concepts. 

‍

Items it can’t do yet:

1. TI can’t yet see the state of all data in the platform. A small number of items are not yet included. Future releases will address this.

2. Cite sources for all items in the platform. For example, it doesn’t cite sources for details on control checks, like operating effectiveness check, although the text it provides usually has lots of details that make checking yourself straightforward.

3. TI also can’t yet take action on your behalf. For that you’ll still have to start an AI Examination & Test (E&T) or submit a PDF to the SOC 2 report summary feature. Future releases will address this.

‍

For more ways to use TI, check out this video from our TI announcement webinar on April 16:

‍

Try it out yourself:

1. Go to the Trustero app
2. Navigate to Analyze → Trustero Intelligence