--- sourceDocument: Store Version History Release Notes sourceDocumentLink: https://www.servicenow.com/docs/r/store-release-notes Release : - store ft:locale : - en-US ft:publication_title : - Store Version History Release Notes ft:clusterId : - rnst bundleId : - rnst --- # ServiceNow Otto for IRM release notes # ServiceNow Otto for IRM release notes {#ariaid-title1} Release version: Store Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 7 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of ServiceNow Otto for IRM Release Notes ServiceNow Otto for Integrated Risk Management (IRM), formerly known as Now Assist for IRM, is a generative AI-powered application designed to enhance risk management, compliance, and issue resolution workflows within the ServiceNow platform. The application has evolved through multiple releases, introducing AI-driven agents, improved user experiences, and expanded third-party AI model support to help organizations streamline IRM processes efficiently. Show full answer Show less ## Key Features * **AI-Driven Risk Identification and Management:** Intelligent agents analyze risk contexts, suggest potential risks, and provide consolidated risk views with proactive intelligence from internal and external sources. * **Issue Remediation and Submission Agents:** Agentic AI workflows guide issue resolution and employee issue reporting, enhancing accuracy and contextual enrichment. * **Control Objective Rationalization:** AI-powered deduplication and rationalization streamline compliance operations by identifying and consolidating similar or redundant control objectives. * **Risk and Issue Summarization:** Features like Risk Event Summarization and Risk Assessment Summarization generate concise summaries to support decision-making and stakeholder communication. * **Generative AI Model Support:** Integration with various large language models (LLMs) including NowLLM, Azure OpenAI, Amazon Bedrock, Google Gemini, and AWS Claude enhances AI capabilities across multiple use cases. * **Security and Role-Based Access:** Improved security through role masking and access control lists (ACLs) ensures that AI features and workflows are securely accessed by authorized users. * **Platform Integration and Dependency Management:** The application is delivered as a platform dependency plugin, hidden from the main UI but fully integrated with IRM Native SKU applications to provide seamless AI functionality without additional customer action. ## Practical Implications for ServiceNow Customers * Customers benefit from automated, AI-driven insights and workflows that reduce manual effort in risk identification, compliance rationalization, and issue resolution. * Enhanced summarization features support better context sharing and faster decision-making across risk events and assessments. * Seamless integration with multiple AI models and transparent plugin management simplifies maintenance and upgrades. * Renaming and rebranding to ServiceNow Otto for Integrated Risk Management unify the application's identity across releases. * Security improvements and ACL implementations protect sensitive data and ensure that AI functionalities comply with organizational policies. ## Version Highlights * **Version 23.1.1 (October 2026):** Added NowLLM gemma support and fixed AI skill accessibility issues. * **Version 22.4.0 (July 2026):** Transitioned to platform dependency delivery; AI features accessed via IRM Native SKU apps; standalone app removed. * **Version 21.1.6 (December 2025):** Introduced employee-centric Issue Submission Agent and advanced AI workflows for risk identification and control objective management. * **Version 21.0.2 (September 2025):** Added Risk Event Summarization and new skills for regulatory alert control recommendations. * **Version 20.1.1 (May 2025):** Launched Issue Remediation Agent and AI-driven control objective rationalization to improve compliance efficiency. * **Version 20.0.2 (February 2025):** Initial introduction of generative AI features powered by Now Assist to boost analyst productivity in IRM. ## Next Steps for Customers * Review application compatibility and system requirements on the ServiceNow Store listing before upgrading. * Leverage AI-powered agents and summarization features to enhance IRM workflows and reduce manual effort. * Ensure appropriate role assignments and ACL configurations to maintain security while using AI functionalities. * Adopt the updated IRM Native SKU applications to access AI features seamlessly following the plugin dependency model. * Monitor release notes for ongoing improvements and enhancements to optimize IRM processes. Version history for the ServiceNow Otto for IRM application on the ServiceNow Store. Important: For details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website. ## Version history Version 23.1.1 - October 2026 (Brazil) : * Changed: Adding support for NowLLM gemma * Fixed: Fixed skills not accessible due to AI native and Professional plus SKU {#store-grc-rn-now-assist-irm__ul_vhd_lyd_tkc} Version 23.0.4 - September 2026 (Brazil) : Fixed: Made logo compatible with Otto directive Version 22.5.0 - August 2026 (Australia) : * Changed: All references to "Now Assist for IRM" have been renamed to "ServiceNow Otto for Integrated Risk Management" in the Australia Patch4 and Zurich latest patch versions. * Fixed: * The display properties for ServiceNow Otto for Integrated Risk Management plug-in updated, so that System Admins can install this plug-in. * Install-as-dependency settings also have been updated to ensure correct application visibility and dependency management {#store-grc-rn-now-assist-irm__ul_sb1_tx5_bkc} {#store-grc-rn-now-assist-irm__ul_ovz_rx5_bkc} Version 22.0.2 - August 2026 (Zurich) : Changed: All references to "Now Assist for IRM" have been renamed to "ServiceNow Otto for Integrated Risk Management" in the app-grc-gen-ai and app-irm-gen-ai repositories. The renaming is reflected across plugin properties, application metadata, skill-family descriptions, role and licensing display values, and all locale translation files. No references to the previous name remain in these repositories for the relevant patches. Version 22.4.0 - July 2026 (Australia) : * New: Now Assist for IRM is now managed as a platform dependency. The application is delivered as an installed-as-dependency plugin, hidden from the main user interface and no longer appears as a standalone application tile in the ServiceNow App Store. AI-driven IRM functionality remains available and operates as before. * Changed: AI features are now accessed through IRM Native SKU applications. Users interact with AI capabilities via the IRM Native SKU apps; the AI dependency loads transparently, requiring no customer action to maintain existing functionality. * Removed: The Now Assist for IRM standalone application is no longer available. The application tile has been removed from the ServiceNow App Store and is not visible in the main user interface. Customers now use IRM Native SKU applications for AI features. Version 22.2.0 - May 2026 (Australia) : Fixed: Updated the protection policy for the 'Suggest Potential Risks use case and the Risk Identification Agent' to read-only to ensure seamless functionality for customers on the IRM Advanced tier. Version 22.0.0 - March 2026 : * New: * Added contextual follow-up questions in the Risk Identification Agent to improve the accuracy of suggested risks. * Introduced a review and feedback step that allows users to update or remove risks before they are created. * Enhanced security for the Risk Assessment Summarization skill through role masking. {#store-grc-rn-now-assist-irm__ul_gmh_rnw_l3c} * Fixed: * Fixed an issue that could result in null reference errors in risk assessment summaries. * Improved the overall performance of the Risk Identification Agent. * Fixed an issue where the Issue Resolution Agent displayed remediation tasks twice, with formatting issues across multiple LLMs. * Fixed an issue where the Issue Submission Agent did not create the issue triage record with the correct details. * Fixed oversized remediation task confirmation header formatting for AWS Claude. * Fixed role mask changes and security issues. {#store-grc-rn-now-assist-irm__ul_hyx_rnw_l3c} * Changed: UCF control objectives are now part of the rationalization process. Version 21.1.6 - December 2025 (Zurich) : * New: * Issue submission agent: * The Issue Submission agent is now available in Employee Center, enabling employee users to report issues through a guided conversational experience. The agent helps structure the issue and recommends relevant controls, entities, and policies based on the input provided. This ensures that the issue is well-defined and enriched with contextual information before it is submitted. * Check product documentation for activation details. * Suggest potential risks agentic workflow * AI-driven risk identification: Conversational AI automatically analyzes entity context and surfaces relevant risks from internal libraries, industry patterns, and optional external sources. * Consolidated risk view: Generates a single, ready-to-triage risk list, reducing manual effort and duplication while ensuring comprehensive coverage. * Guided user experience: Embedded in the Now Assist Panel, the workflow provides step-by-step guidance for risk domain selection, simplifying complex risk discovery. * Proactive intelligence for emerging risks: External scanning capabilities deliver early warnings of new threats, helping organizations stay ahead of evolving regulations and trends. {#store-grc-rn-now-assist-irm__ul_dtm_tyg_nhc} * Control objective impact analyzer: * The citation-driven impacted control objective identifier uses generative AI to analyze changes in citations and identify control objectives that should be reviewed based on the modified citation content. It intelligently matches changed citation requirements with existing COs to suggest potential updates, helping teams maintain alignment between citations and control objectives. {#store-grc-rn-now-assist-irm__ul_dkm_xyg_nhc} * Control objective change agent: * This introduces an AI-driven capability to automatically update a control objective's description and supplemental guidance whenever its associated citations are modified. Leveraging agentic AI, the enhancement analyzes the changes in citation content, identifies their impact on the control objective, and generates precise, contextually relevant updates. Users can review and approve AI-suggested changes directly within the workflow, ensuring that control objectives always reflect the most current regulatory requirements and best practices. {#store-grc-rn-now-assist-irm__ul_byx_xyg_nhc} {#store-grc-rn-now-assist-irm__ul_n23_tyg_nhc} * Changed: * Removed the issue summarization step from the issue resolution agentic workflow as part of performance improvements. * Added support for LTS models for previously released Now Assist IRM skills. * Enhanced security by implementing role masking. * Rationalization process now auto-generates recommendations using the skill when the Rationalize button is clicked on a control objective. * Added a quick summary view for each recommendation card and clarified task sequence during the analyze step of the rationalization process. * Control objective requirements and control requirements are now considered in the rationalization process for control objectives. {#store-grc-rn-now-assist-irm__ul_k2t_yyg_nhc} * Fixed: * Implemented a fix to skip redundant approvals in the rationalization process. * Resolved issues related to synchronizing impacted items and automatic refreshes. {#store-grc-rn-now-assist-irm__ul_pbf_zyg_nhc} {#store-grc-rn-now-assist-irm__ul_vnw_syg_nhc} Version 21.0.3 - October 2025 : Changed: Now Assist Platform AI performance improvement uptakes. Version 21.0.2 - September 2025 : * New: Risk Event Summarization We've introduced Risk Event Summarization to improve context-sharing and decision-making throughout the risk event lifecycle. * New "Summary" Section: A section has been added to the Risk Event Overview page to capture a concise summary of the risk event. * Access to Summary by Risk Event State: * Risk Managers and Risk Event Owners can create and save summaries in any state of the risk event. * In New and Analyze states, summaries can be saved to the Summary field. * In Awaiting Approval, Approved, or Closed states, summaries can be saved to the Work Notes field. {#store-grc-rn-now-assist-irm__ul_bzm_4t4_lgc} * Approvers can generate summaries only in the Awaiting Approval state and can save them to the Work Notes field. {#store-grc-rn-now-assist-irm__ul_azm_4t4_lgc} * Native UI Support: Risk Event Summaries can be generated within the Native UI for a seamless user experience. * LLM Compatibility: Along with NowLLM, the summarization feature works with multiple large language models like Claude, Google Gemini, and Azure OpenAI. {#store-grc-rn-now-assist-irm__ul_gxq_pt4_lgc} * Rationalization of Control objectives * Skill for Creation of common control objective as a part of Rationalization process for control objectives. * Third party model support for Azure Open AI, Amazon Bedrock and Google Gemini for creation of common control objective skill. {#store-grc-rn-now-assist-irm__ul_fxd_qt4_lgc} * Control recommendation on Regulatory alert * New skill for recommending controls for an incoming regulatory alert. * Third party model support for Azure Open AI, Amazon Bedrock and Google Gemini for control recommendation skill. * Base control recommendations to show recommendations on Regulatory alert recommendation framework. {#store-grc-rn-now-assist-irm__ul_gps_qt4_lgc} * Changed: * All existing and new generative AI skills, AI agents and, agentic workflows invocation is secured through ACLs. * Rationalization of control objectives * UX improvements for auto refreshing actions as a part of Rationalization framework. {#store-grc-rn-now-assist-irm__ul_wdl_rt4_lgc} {#store-grc-rn-now-assist-irm__ul_ecq_rt4_lgc} * Fixed: * Streamlined messages and content for Rationalization framework. * Implemented fix scripts and access control for streamlining security aspects of all skills and agents under the Now Assit IRM application {#store-grc-rn-now-assist-irm__ul_rbg_st4_lgc} {#store-grc-rn-now-assist-irm__ul_qb1_4t4_lgc} Version 21.0.0 - August 2025 : * New: * Implemented 3P model support for below use cases in Regulatory change management application. * Regulatory alert summarisation * Control objective recommendation for regulatory change alert * Citation recommendation for regulatory change alert * Rationalization of Control objectives * Validations introduced for deactivated and deleted Control objectives in the workflow * Enhanced navigation with "Restart Analyze" option * Third party model support for Azure Open AI, Amazon Bedrock and Google Gemini * Risk Assessment summarisation * Third party model support for Azure Open AI, Amazon Bedrock and Google Gemini * Implemented 3P model support for below use cases. * Issue summarization * Issue remediation agent * Changed: * Rationalization of control objectives * Recommendation panel displayed in the Consolidate state also * Fixed: * Rationalization of control objectives * Reordered UI with highlighted primary actions Version 20.1.1 - May 2025 : * New: * Issue Remediation Agent: * Optimize the GRC issue resolution using agentic AI workflow in the Integrated Risk Management application to help your issue managers and analysts resolve GRC issues with AI agents in the Now Assist panel. This workflow helps by suggesting targeted solutions for key steps during the issue resolution process. {#store-grc-rn-now-assist-irm__ul_v5w_ztq_cfc} * Risk Assessment summarization * Introducing new feature, Risk Assessment summary generation using Generative AI to support assessors during submissions and provide approvers or other stakeholders with a quick overview of assessment progress and key insights. {#store-grc-rn-now-assist-irm__ul_jkt_15q_cfc} * Control objective rationalization and deduplication: * The AI-powered control objective rationalization and deduplication process leverages Generative AI to help compliance teams streamline their traditionally manual, time-consuming, and error-prone efforts. As regulatory requirements continue to evolve, teams often face an overwhelming number of control objectives many of which are redundant or closely related. This AI-driven approach identifies similar or duplicate objectives, enabling teams to consolidate them by retaining one, retiring duplicates, or merging them into a common control objective enhancing overall efficiency and effectiveness across compliance operations. {#store-grc-rn-now-assist-irm__ul_dvg_b5q_cfc} {#store-grc-rn-now-assist-irm__ul_kwd_15q_cfc} {#store-grc-rn-now-assist-irm__ul_enb_ztq_cfc} {#store-grc-rn-now-assist-irm__latest-store-grc-rn-now-assist-irm} {#store-grc-rn-now-assist-irm__latest-store-grc-rn-now-assist-irm} Version 20.0.2 - February 2025 : GenAI features for Integrated Risk Management (IRM), powered by Now Assist, improve analysts' productivity, team coordination, and overall efficiency.