Types of alerts, user roles, and states of regulatory alerts

  • Release version: Zurich
  • Updated July 31, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Types of alerts, user roles, and states of regulatory alerts

    The Regulatory Alerts module in ServiceNow Zurich release categorizes alerts based on their assignment status and state, enabling users to efficiently manage regulatory changes. Different user roles have specific permissions to act on these alerts, supporting a structured compliance workflow.

    Show full answer Show less

    Types of Alerts

    • All Assigned Alerts: Alerts assigned to a user via the Coordinator field.
    • Unassigned Alerts: Alerts without an assigned Coordinator, allowing initial review and assignment.
    • New Alerts: New incoming alerts with no assigned Coordinator.
    • Deferred Alerts: Alerts postponed to a later action date, assigned to a user and marked Deferred.
    • Impact Assessment Alerts: Alerts currently undergoing impact assessment to determine applicability.
    • In Progress Alerts: Alerts actively being managed by an assigned user.
    • Closed Alerts: Alerts that are either irrelevant or have completed associated tasks.

    User Roles and Permissions

    • sngrcregchange.manager, sngrcregchange.user, sngrcregchange.admin: Can update, reassign, defer alerts; mark as applicable or not applicable; initiate impact assessments; and cancel alerts.
    • Managers: Have visibility over all alerts.
    • Users with sngrcregchange.user role: Can view and manage only alerts assigned to them, with no access to unassigned or other users’ alerts.

    States of Regulatory Alerts

    • New: Default state for incoming alerts; assignment by admin or manager required.
    • Deferred: Alerts postponed for future action with a reminder date.
    • Impact Assessment: Alerts being evaluated for organizational applicability.
    • In Progress: Alerts actively worked on by assigned users.
    • Closed: Alerts deemed irrelevant or with completed tasks.
    • Cancelled: Alerts formally cancelled.

    Additional Information

    Alert records include metadata from third-party regulatory intelligence providers, which are non-editable and assist in determining the alert’s applicability to the organization.

    Different users perform various actions on the alert records based on the type of the alert.

    You can view the following types of alerts under the Regulatory Alerts module:
    • All Assigned Alerts: Displays all assigned alerts in the instance where the Coordinator field is assigned to an appropriate user.
    • Unassigned Alerts: Displays the unassigned alerts in the instance where the Coordinator field is empty. Mark the Overall impact as No impact, Low, Medium, High, or Critical.
    • New Alerts: Displays new alerts in the instance where the Coordinator field is empty.
    • Deferred Alerts: Displays the deferred alerts where the Coordinator field is assigned to an appropriate user, the state is Deferred, and a reminder date is listed to perform the action post deferral.
    • Impact Assessment Alerts: Displays the alerts for regulatory events that are in Impact Assessment state.
    • In Progress Alerts: Displays the alerts that are in In Progress state.
    • Closed Alerts: Displays the alerts that are in Closed state.
    The following table provides information on the user roles, the actions that these users can perform, and the description of these actions.
    Table 1. User roles, actions, and description
    User roles Actions Description
    • sn_grc_reg_change.manager
    • sn_grc_reg_change.user
    • sn_grc_reg_change.admin
    		 Update Updates the details of the alert.
    Reassign Reassigns the details of the alert.
    Defer Defers a regulatory alert to a future date.
    Applicable Marks the alert as applicable.
    Initiate Impact Assessment Initiates an impact assessment on the alert.
    Not Applicable Marks the alert as not applicable.
    Cancel Cancels the alert.

    Managers can view all alerts. Users with the sn_grc_reg_change.user role can view assigned alerts that are assigned to them, but they cannot view unassigned alerts or alerts that are assigned to other people.

    See the following table for information on the states of regulatory alerts.
    Table 2. States of the alerts and their description
    State Description
    New Each incoming regulatory alert is by default assigned to a new state. Only the sn_grc_reg_change.admin or the sn_grc_reg_change.manager can assign an alert record.
    Deferred Some alerts do not require an immediate action and therefore, they are in the Deferred state and they are assigned to a later date.
    Impact Assessment The alert records that are of type regulatory event are assessed for applicability and are marked for an impact assessment. After an impact assessment, the alerts are marked as applicable or not applicable.
    In Progress Alerts with the In Progress state are being worked on. An sn_grc_reg_change.user is assigned to each alert.
    Closed Alerts that are not relevant to an organization are in the Closed state. Alerts that have associated tasks that have been completed are also in the Closed state.
    Cancelled Alerts that are in Cancelled state.
    Note:
    The attributes on the alert record are part of the metadata that is given by the third-party regulatory intelligence provider. These attributes help in determining the applicability of the alert to the organization. These records are non-editable in the Regulatory Change Management application.