July’s updates made it easier to keep governance work moving and connect the information held in Apollo. Organisations can now automate recurring reviews, maintain a more accurate record of risk, configure roles around real responsibilities and work with core GRC information through compatible AI tools.
We also significantly expanded the Supplier Library, giving schools a stronger starting point for understanding the technology providers they rely on.
Turn governance reviews into recurring work
Governance depends on work being repeated consistently, not simply completed once. Apollo can now create recurring tasks on daily, weekly, monthly, quarterly or annual schedules, helping teams turn regular reviews into an ongoing process.
When a Control has a review frequency, Apollo can use that schedule to support the next review. This reduces reliance on separate calendars and reminder systems and makes it easier to see upcoming governance work alongside other tasks.
Tasks can also be linked to multiple Risks, Controls, Assets, Suppliers and Incidents, including several records of the same type. When one action addresses several risks or controls, teams can manage the work once while preserving the connection to every relevant record.
A risk record that reflects the full story
Risk Score Timelines are now editable. Teams can add events that occurred before they began using Apollo, correct dates, scores or notes, and remove entries that do not accurately reflect what happened.
Organisations can also record inherent and target risk scores. The inherent score shows the level of risk before controls are considered, while the new Target Risk Score makes the intended destination visible alongside the current position.
Together, these changes provide a clearer account of how a risk has developed, where it stands today and where the organisation intends to take it. That creates a more useful record for operational decisions, leadership discussions and board reporting.
Roles that match your organisation
Organisation administrators can now create named custom roles with a defined set of permissions. This gives teams more flexibility when responsibilities do not fit neatly into Apollo’s standard roles.
Each organisation can configure roles around its own governance structure and division of responsibilities. This makes it easier to give people the access they need for their work without giving them broader permissions than necessary.
Connect AI tools to your registers
Apollo’s Model Context Protocol server now works with registers and frameworks, covering a substantial part of the organisation’s GRC information. Model Context Protocol, or MCP, provides a standard way for compatible AI tools to work with information held in Apollo.
This gives organisations a foundation for using AI to explore their risks, controls, assets, suppliers, incidents and framework activity in context. Instead of treating each register as a separate source, compatible tools can work across the connected governance information already maintained in Apollo.
Richer supplier information from the start
The Supplier Library now includes more than 100 suppliers, with detailed profiles covering the areas schools need to consider when managing third-party risk. This gives teams useful information about commonly used providers before they begin an assessment from scratch.
The richer library is designed to reduce repeated research and provide a more consistent starting point for supplier reviews. Schools can spend less time gathering basic information and more time considering how each supplier is used, what information it handles and where further assurance may be needed.
These improvements are live in Apollo. If you would like help setting up recurring reviews, custom roles or AI access to your GRC information, please get in touch.