--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Case summarization for compliance cases # GRC case summarization skill for compliance cases {#ariaid-title1} Release version: Australia Updated March 12, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of GRC case summarization skill for compliance cases The GRC case summarization skill leverages a large language model (LLM) to generate concise, structured AI summaries of compliance case records within ServiceNow. This skill helps case analysts and managers quickly grasp key details from complex compliance cases that involve multiple tasks, stakeholders, and regulations. Summaries are generated on demand from predefined data fields and related lists within the case record and can be saved for future reference. Activation of the skill is required through the AI Admin Hub console, after which authorized users can trigger summary generation. Show full answer Show less ## User Roles and Access * **snnowassistadmin.nsaadmin:** Admin role for activating or editing the skill. * **sncompcase.compliancecaseanalyst:** Access to compliance case records. * **sngrcsharegenai.grccaseaiuser:** Explicitly assigned role to use the summarization skill (not inherited). ## Supported LLM Providers An administrator must configure a default LLM provider before using the skill. Supported providers include Azure OpenAI, AWS Claude, and Google Gemini. This setup allows the skill to send case data prompts and receive structured summaries. ## Compliance Case Summary Structure The AI-generated summary captures comprehensive case information from multiple sections of the case record, reflecting data at the time of generation. Summaries can be regenerated to update with the latest case developments and edited prior to saving. * **Case Overview:** Core details like case name, description, start date, priority, and assigned analyst. * **Events Timeline:** Key dates including occurrence, discovery, investigation, and remediation periods. * **Scope of Impact:** Breakdown of impacted areas and regulatory frameworks, including counts of entities, controls, policies, and regulations involved. * **Causes \& Consequences:** Confirmed and suspected causes and the resulting impacts or penalties. * **Actions \& Outcomes:** Summary of investigation tasks, assessments, and additional actions taken. * **Evidence \& Worknotes:** Investigation notes and comments from the activity log. * **Lessons Learned:** AI-driven analysis of case velocity (detection, investigation, remediation times) and investigation effort level categorized by complexity. ## Practical Use ServiceNow customers can activate the GRC case summarization skill to automate the creation of insightful summaries that enhance case understanding and decision-making efficiency. By consolidating essential compliance case data into a structured, easy-to-consume format, the skill supports faster reviews and more informed compliance management actions. The GRC case summarization skill uses a large language model (LLM) to generate a structured AI summary of a compliance case record. The summary is generated on demand from case data and can be saved to the record for future reference. ## Overview of the GRC case summarization skill {#compliance-case-summarization-skill__section_wyh_zk5_2hc} Compliance cases can span multiple action tasks, stakeholders, and regulatory requirements. The GRC case summarization skill generates a concise AI summary of key case details, so case analysts and managers can quickly understand the context and take informed action. The skill collects data from predefined fields and related lists across the case record. This data is assembled into a prompt and sent to the configured LLM service provider, which then returns a structured summary. To summarize compliance case records, the skill must be activated from the AI Admin Hub console. Once it's activated, case analysts with the appropriate user role can trigger the skill on a compliance case. ## User roles {#compliance-case-summarization-skill__section_ohh_xtz_k3c} The user roles required to activate, configure, and use the GRC case summarization skill are: * sn_nowassist_admin.nsa_admin: Grants an admin access to activate or edit a ServiceNow Otto skill. * sn_comp_case.compliance_case_analyst: Grants access to compliance case records. * sn_grc_sharegenai.grc_case_ai_user: Grants users access to use the GRC case summarization skill. Note: The sn_grc_sharegenai.grc_case_ai_user role must be explicitly assigned and isn't inherited through the case analyst role. {#compliance-case-summarization-skill__ul_vcw_w3l_k3c} ## LLM service providers {#compliance-case-summarization-skill__section_llm_providers} An administrator must set a default LLM provider before the skill can be used. The following providers are supported: * Azure OpenAI * AWS Claude * Google Gemini {#compliance-case-summarization-skill__ul_jcx_q3l_k3c} To set a default provider for the GRC case summarization skill, see [Manage model providers](https://www.servicenow.com/docs/access?context=edit-model-providers&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US). ## Components of a compliance case summary {#compliance-case-summarization-skill__section_yyd_glz_k3c} The summary reflects case data at the time of generation. As the case progresses, you can regenerate the summary to capture the latest information. Once generated, you can review and edit the summary before saving it to the case record. {#compliance-case-summarization-skill__table_gxr_dwc_k3c__entry__2} | Section | What it captures | |-|-| | Case Overview | Core case details, such as name, description, start date, priority, and assigned analyst, captured from the Details tab. | | Events Timeline | Date of occurrence, date of discovery, investigation start and end dates, and remediation start and end dates, captured from the Schedule section on the Details tab. | | Scope of Impact | Impact breakdown- Summary of the areas and regulatory frameworks that are impacted by a compliance case, captured from the Impacted Areas, Related Areas, and Regulations tabs. * Impacted areas- Number of areas, such as the entities, controls, companies, and users, impacted by the reported compliance case. * Related areas- Number of areas, such as policies, citations, control objectives, control, and risk events, related to the compliance case. * Regulations/Standards- Number of regulations that are or can be impacted by the reported compliance case. {#compliance-case-summarization-skill__ul_sdj_n45_l3c} | | Causes \& Consequences | Causes and consequences of the compliance case, captured from the Causes and Consequences tab. * Cause (Confirmed)- Confirmed cause of the incident. * Contributing Cause (Suspected)- Suspected cause of the incident. * Consequences- Resulting impact or penalties arising from the incident. {#compliance-case-summarization-skill__ul_qpq_hg5_l3c} | | Actions \& Outcomes | Summary of actions taken during the investigation, captured from the Action Tasks tab. * Investigation- Initial investigation tasks to examine the reported incident. * Assessment- Impact, loss, breach scope, and breach assessments to evaluate the incident. * Additional Actions Taken- Supplementary actions to support a resolution. {#compliance-case-summarization-skill__ul_j5p_fh5_l3c} | | Evidence \& Worknotes | Work notes and comments recorded during the investigation, captured from the Activity section on the Details tab. | | Lessons Learned | AI-powered analysis of the case timeline and overall investigation effort. * Velocity analysis- Time to detect, investigate, and remediate. * Investigation effort level- Effort assessment ranked as low, medium, or high, based on case complexity, activity log, and timelines. {#compliance-case-summarization-skill__ul_cky_rh5_l3c} | [Table 1. Compliance case summary structure] {#compliance-case-summarization-skill__table_gxr_dwc_k3c} * **[Activate the GRC case summarization skill](https://www.servicenow.com/docs/Mox_fvh72~TKtORLSBN8EQ)** Activate the GRC case summarization skill from the AI Admin Hub to generate AI-powered summaries of compliance case records. * **[Summarize a compliance case using GRC case summarization skill](https://www.servicenow.com/docs/1IrTVuiKhnr9_N5w3AuZ_g)** Use the GRC case summarization skill to generate an AI summary of a compliance case. The summary provides a consolidated view of a compliance case record. **Related tasks** * [Activate the GRC case summarization skill](https://www.servicenow.com/docs/nNkUCfYruYSnk~sz5PNxpw "Activate the GRC case summarization skill from the AI Admin Hub to generate AI-powered summaries of privacy case records.") * [Summarize a compliance case using GRC case summarization skill](https://www.servicenow.com/docs/1IrTVuiKhnr9_N5w3AuZ_g "Use the GRC case summarization skill to generate an AI summary of a compliance case. The summary provides a consolidated view of a compliance case record.")