--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Regulatory process flow and tasks # Regulatory process flow and tasks {#ariaid-title1} Release version: Australia Updated March 12, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Regulatory process flow and tasks The Regulatory Change Management (RCM) process in ServiceNow helps organizations manage and comply with regulatory changes efficiently. It integrates external regulatory alerts from sources like RSS feeds or providers such as Thomson Reuters Regulatory Intelligence (TRRI). The process ensures timely review, assessment, action planning, and task completion related to regulatory changes. Show full answer Show less ## Key Features * **User Roles:** The application defines roles including RCM Administrator, RCM Manager, RCM User (Coordinator), Business User, and Risk or Compliance Manager, each with specific responsibilities in managing regulatory changes. * **Integration Setup:** Organizations can subscribe to public or curated regulatory alert feeds from multiple sources. * **Internal Taxonomy:** Taxonomy elements allow classification and hierarchical structuring of regulatory content to organize and categorize alerts effectively. * **Regulatory Alert Review and Assignment:** RCM Managers review alerts and assign them to coordinators who determine applicability and manage impact assessments with subject matter experts (SMEs). * **Impact Assessment:** SMEs evaluate the impact of regulatory changes and submit assessment scores through the application. Non-applicable alerts are closed. * **Action Planning and Approval:** Coordinators develop action plans with detailed tasks, which are then reviewed and approved by RCM Managers to ensure completeness. * **Task Completion and Tracking:** Action tasks are assigned to compliance and risk teams, tracked with due dates, and upon completion, both the tasks and related regulatory alerts are closed. * **Source Document Import:** The application can ingest external alert details such as citation titles and legislative references for compliance relevance. * **Smart Impact Assessments:** The Smart Assessment Engine performs streamlined impact assessments at the alert level, supporting multi-stakeholder collaboration via a unified core assessment framework. ## Key Outcomes * Efficient management of regulatory changes through defined workflows and role-based tasks. * Improved compliance by ensuring regulatory alerts are reviewed, assessed, and acted upon promptly. * Clear visibility and tracking of all regulatory change-related tasks, with accountability for completion. * Enhanced collaboration between business users, risk, and compliance managers during impact assessment and action planning. * Structured categorization of regulatory content using internal taxonomy for better organization and retrieval. The Regulatory Change Management process flow includes the tasks that different users can perform to help your organization manage and comply with regulatory changes. Regulatory alerts are sourced from the external providers that provide the data as regulatory alerts. The alert may be received as Really Simple Syndication (RSS) feeds or from an external provider such as the Thomson Reuters Regulatory Intelligence (TRRI). The Regulatory Change Management application receives the new regulatory changes that are applicable to an organization. The Regulatory Change Management application has the following user roles: * RCM administrator: A user who has the sn_grc_reg_change.admin role. * RCM Manager: A user who has the sn_grc_reg_change.manager role. * RCM User or coordinator: A user who has the sn_grc_reg_change.use role. This user ensures that the regulatory changes are assigned to the correct teams and that the changes are completed in time. * Business user role: A user who has the sn_grc.business_user role. * Risk or Compliance manager: A user who has the sn_risk.manager or sn_compliance.manager role. This user would perform the changes as part of the Regulatory Change Management application. {#reg-change-workflow-swimlane__ul_m35_q4v_nqb}For more information about the roles, see [User roles in Regulatory Change Management](https://www.servicenow.com/docs/2xlQcuJiUQexVgTYiAKypQ "Stakeholders in the Regulatory Change Management (RCM) application have different roles and responsibilities."). The following infographic shows the Regulatory Change Management process flow. Figure 1. Regulatory Change Management process flow and tasks performed by different users ## Regulatory Change Management process flow {#reg-change-workflow-swimlane__section_vkl_svc_d2c} The steps to complete the Regulatory Change Management process flow are: 1. Set up the integration. Your customers can subscribe to a public RSS feed for the regulatory bodies. They can subscribe to a subscription provider such as TRRI that is a curated intelligence provider. A subscription provider can aggregate the regulatory changes from different sources and provide the collective changes as feeds. 2. Set up an internal taxonomy. The taxonomy elements are the different classifiers that an organization can apply to its regulatory content to categorize it. You can use taxonomy elements to create a hierarchical structure of different classifications for setting up the regulatory content for an organization. 3. Review a regulatory alert. A user with the sn_grc_reg_change.manager role (RCM manager) reviews a regulatory alert and assigns it to a coordinator or a user with the sn_grc_reg_change.user role (RCM user). The user with the sn_grc_reg_change.user role reviews the alert. If the regulatory change requires an impact assessment, the RCM user sends it to a subject matter expert (SME) with a business user role. 4. Assess the impact. The SME assesses the impact of the regulatory change and sends the impact assessment score to the Regulatory Change Management application. If the alert is not applicable to the organization, the RCM user closes the alert. If the alert is applicable to the organization, the RCM user creates a new regulatory change task and assigns it to the same or a new coordinator. 5. Devise an action plan. The coordinator identifies the steps to comply with the regulatory change and devises an action plan. The coordinator creates action tasks for the teams that must complete the identified action items. The coordinator then associates those tasks with the regulatory change task. After the action plan is created, it is sent to the RCM manager for approval. The manager reviews the action plan and confirms whether more action tasks are needed or if some aren't necessary. 6. Complete the action tasks. The compliance analyst sends the actions for approval to a user with the sn_grc_reg_change.manager role (RCM manager). If the action plan is rejected, the coordinator goes through the action plan, updates the actual tasks, and sends the action plan back for an approval. The compliance manager can see all compliance-based action tasks and the risk manager can see all the risk-based action tasks. After the tasks are assigned to the risk and compliance users, the action tasks are tracked until they are completed. A due date is marked and tracked for the action tasks. When the tasks are completed, the regulatory alert and the parent regulatory change tasks are closed and the change process flow is completed. {#reg-change-workflow-swimlane__ol_j1d_drv_nqb} * **[Source document import tasks](https://www.servicenow.com/docs/b2yaGVCPsAZuqxR4rgqKkQ)** The Regulatory Change Management application processes external alerts that may include citation titles, citation numbers, and references to legislative or regulatory materials relevant to compliance. * **[Impact assessments for the regulatory alerts](https://www.servicenow.com/docs/IPoDZ6BV1Tj42xM1QroaZQ)** A regulatory event alert may result in a regulatory change to an organization. You can evaluate the impact of the regulatory change on your organization by performing impact assessments. * **[Regulatory assessment for a regulatory alert](https://www.servicenow.com/docs/BpaV26pqOPykugYwPXILGw)** Use the Smart Assessment Engine to perform smart assessments on regulatory alerts. Impact assessments run directly at the regulatory alert level through a unified core assessment framework. Analysis can be assigned to multiple stakeholders for improved collaboration. **Related concepts** * [Regulatory Change Management application in the Compliance Workspace](https://www.servicenow.com/docs/t4ZHds5QQwTHUw1zA_vYtA "Starting with GRC: Regulatory Change Management, version 13.0.1, the Regulatory Change Management application is available in Compliance Workspace. Compliance Workspace provides your users with a single-pane view so that they can check upcoming regulatory changes, assess their impact, and implement risk and compliance-related changes for the organization.") * [Regulatory event alerts vs. source document alerts](https://www.servicenow.com/docs/5dkoV_5Im~d8KVClGgUH7A "A regulatory event alert informs you of a regulatory change, while a source document alert signals the release or update of the related official document.") * [Next Experience Discuss and Chat Collaboration](https://www.servicenow.com/docs/DKA_AYEXyz8nwRchw4oeWQ "On a regulatory change management case, select Discuss from other options. Collaborate with virtual agents by using Next Experience Chat Collaboration and Discuss.")