--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-zurich-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3bz bundleId : - delta3bz --- # Combined Advanced Risk release notes for upgrades from Zurich to Brazil # Combined Advanced Risk release notes for upgrades from Zurich to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 11 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Advanced Risk Release Notes for Upgrades from Zurich to Brazil This consolidated release notes document assists ServiceNow customers in preparing for their Advanced Risk upgrade from Zurich to Brazil release versions. It summarizes new features, changes, removals, deprecations, and activation details across the Zurich, Australia, and Brazil releases. The document highlights improvements in risk identification, assessment methodologies, AI enhancements, user interface changes, and workflow optimizations to help risk managers and administrators streamline risk management processes and improve decision-making. Show full answer Show less ## New Features * **Risk Suggestion AI Agent (Zurich):** Automates risk discovery by analyzing entities and suggesting risks for review and promotion to the risk register, enhancing compliance readiness. * **Reporting Views from Risk Assessment Methodology (Zurich):** Automatically generated views consolidate assessment data for easier review and custom reporting of risk assessments. * **Risk Event Summarization (Zurich):** Uses generative AI to create clear summaries of risk events, saving manual effort and enabling faster decision-making. * **Grid-Based Risk and Control Assessment (Zurich):** Spreadsheet-style interface for efficient side-by-side risk and control comparison, editing, and prioritization. * **Matrix Report in Risk Workspace (Zurich):** Centralized configurable grid view for assessing organizational risk posture with entity-related data. * **Support for Third-Party Large Language Models (Zurich):** Enables using AI models from Anthropic Claude, Google Gemini, OpenAI, and Now LLM for generating risk summaries, providing flexibility in AI tool selection. * **Worst Case Aggregation Rollup (Australia):** New rollup method deriving risk scores from the highest residual risk record, improving traceability and governance. * **Hide Not Applicable Option (Australia):** Option to hide "Not applicable" in control and residual assessments to reduce calculation errors. * **Parallel Review and Feedback (Australia):** Enabled by default, supporting collaborative review workflows on risk assessment projects without manual setup. * **GRC Notification Link Redirection (Australia):** Redirects users from email notifications to appropriate workspaces based on roles, enhancing usability. * **Template Versioning for Risk Identification (Australia):** Supports smart template versioning allowing new versions without creating entirely new templates. * **Audit Entry Field on Risk Assessment Project (Australia):** Tracks changes and activity history with audit-specific records, available if Audit Management and Audit Workspace are installed. * **Risk Suggestion AI Agent Enhancements (Australia):** Context-aware and conversational workflow allowing risk refinement before adding suggestions. * **Risk Event Response Template Enhancements (Australia):** Dynamic, entity-driven assignments for risk event owner, issue creation, and approvers based on entity data or stakeholder personas. * **Control Objective Workflow (Australia):** Draft and review control objective changes before activation, ensuring consistency and clear responsibility. ## Changes * **Renaming for Clarity (Zurich):** "Downstream risks" related list renamed "Risks"; "Summary" section renamed "Impacts" or "Impacts and approvals" in different UI contexts. * **Default Activation of AI Skills and Agentic Workflows (Zurich):** Certain generative AI skills and workflows are activated by default for appropriate roles, simplifying use for new and upgrading customers. * **Risk Event Workflow Permissions (Australia):** Risk event administrators can now manage full risk event workflows, including reopening closed events, aligning with Risk Manager role permissions. * **ServiceNow AI Platform Licensing Tiers (Australia):** Introduction of Foundation, Advanced, and Prime AI tiers that dictate access to AI features, skills, and workflows based on license level. ## Removed and Deprecated Features * **Removed Features:** No removals reported for Zurich, Australia, or Brazil releases. * **Deprecated Features (Zurich):** The Tasks widget was removed from the Risk Workspace home page to improve load performance and reduce latency. ## Activation Information Advanced Risk must be installed by requesting it from the ServiceNow Store. This applies to Zurich and Australia releases, with no new activation changes for Brazil. ## Accessibility and Localization * **Accessibility (Zurich):** Risk Heatmap component now supports reflow and zoom up to 400% without loss of content or functionality, improving usability for users with low vision. * **Localization:** No specific localization updates noted across releases. ## Key Benefits for ServiceNow Customers * Automated risk identification and summarization accelerate risk discovery and decision-making. * Improved reporting and assessment interfaces simplify risk data analysis and collaboration. * Enhanced AI flexibility with third-party LLM support broadens options for AI-driven insights. Consolidated page of all release notes for Advanced Risk from Zurich to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Advanced Risk release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Advanced Risk to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-advancedrisk-summary__entry__2} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for Advanced Risk. {#dfrn3-advancedrisk-summary__entry__10} | Release | Release notes | |-|-| | Zurich | [Identify risks for an entity](https://www.servicenow.com/docs/access?context=suggest-potential-risks-workflow&family=zurich&ft:locale=en-US) : If you're a Workspace user with the sn_grc_sharegenai.risk_suggestion_aiagent_user role, you can use the Risk Suggestion AI Agent to identify risks related to an entity. The AI agent analyzes the entity and suggests relevant risks from various sources, consolidating them into a reviewable list to verify for accuracy. Risk managers can then confirm and promote these risks to the risk register for further assessment. This feature automates risk discovery, helping identify potential risks and prepare for compliance requirements. [Reporting views from Risk Assessment Methodology](https://www.servicenow.com/docs/access?context=reporting-views-from-ram&family=zurich&ft:locale=en-US) : The reporting view provides an overview of all assessments under a specific Risk Assessment Methodology (RAM). It consolidates assessment data such as factor responses, scores, issues, controls, and associated risks into a single structure. When a RAM is published, the system automatically creates this view, which you can use to review assessments and build custom reports. It simplifies report and dashboard creation for risk assessments. Note: Automatic creation of Reporting views is not supported on Xanadu. For instructions on creating them manually, refer to [KB2547071](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2547071) [Risk event summarization](https://www.servicenow.com/docs/access?context=generate-risk-event-summary-in-the-risk-workspace&family=zurich&ft:locale=en-US) : Generate risk event summary using the ServiceNow Otto for IRM application. Risk event summarisation is a Generative AI driven capability that generates clear and consistent summaries automatically. It reduces the need for manual effort, helps risk managers save time, and enables approvers to quickly understand the key details for faster decisions. Check your entitlements to confirm whether you have access to risk event summarization. [Grid based risk and control assessment](https://www.servicenow.com/docs/access?context=perform-assessment-risk-assessment-project-grid-view&family=zurich&ft:locale=en-US) : Gain efficient control over risk assessments with the new grid-based Risk and Control Self Assessment (RCSA). Quickly compare, edit, and prioritize risks and controls using the flexible, spreadsheet-style interface. Use side-by-side views and bulk editing to complete assessments faster. [Matrix report in Risk Workspace](https://www.servicenow.com/docs/access?context=matrix-report-in-risk-workspace&family=zurich&ft:locale=en-US) : Access and analyze the risk posture of your organization using entity-related data, such as risks, controls, KRIs, and events in a centralized, configurable grid-based view. This feature reduces time spent switching views and helps risk managers assess data more easily, leading to more proactive and streamlined risk management. [Support third party large language models](https://www.servicenow.com/docs/access?context=generate-risk-assessment-summary-genai&family=zurich&ft:locale=en-US) : Risk assessment summarization and Risk event summarization support the LLMs from the third party providers, such as Anthropic Claude, Google Gemini, and OpenAI, in addition to Now LLM. This enhancement gives you greater flexibility to choose the model that best fits your organization's needs for generating risk assessment and risk event summaries. | | Australia | [Worst case aggregation rollup for risk scoring](https://www.servicenow.com/docs/access?context=risk-assessment-methodology-form&family=australia&ft:locale=en-US) : After upgrading to version 22.3.2, use the worst case aggregation rollup method that derives all scores from a single risk record based on the highest residual risk. You can configure this option on the Risk Assessment Methodology (RAM) form. By using a single risk record as the source, this method keeps all rolled-up scores aligned to a real risk scenario, supporting traceability, audit requirements, and enterprise governance. [Hide Not applicable option in control and residual assessments](https://www.servicenow.com/docs/access?context=control-assessment-form&family=australia&ft:locale=en-US) : After upgrading to version 22.3.2, configure the Risk Assessment Methodology (RAM) to hide the Not applicable check box in control effectiveness and residual assessment sections by using the Hide assessment not applicable option. This change reduces calculation errors and improves the reliability of assessment results. [Parallel review and feedback for Risk assessment project](https://www.servicenow.com/docs/access?context=integrate-advanced-risk-with-parallel-review-feedback&family=australia&ft:locale=en-US) : Parallel review and feedback is now enabled by default on the risk assessment project record page and the project assessment page, in both stacked view and grid view. You can use collaborative review workflows without manual configuration, which removes the setup overhead previously required by the custom page structure of risk assessment projects. Redirect GRC notification links to the appropriate workspace : After upgrading to version 22.3.2, redirect to the appropriate workspace when accessing GRC records from email notifications, based on the access and role. This feature improves usability, reduces confusion, and supports adoption of workspace-based workflows. [Template versioning for Risk Identification](https://www.servicenow.com/docs/access?context=template-versioning&family=australia&ft:locale=en-US) : After upgrading to version 22.3.2, Risk Identification supports smart assessment template versioning. New versions can be created from existing templates without creating a new template, and assessments use the latest published version. [Audit entry field on Risk Assessment Project](https://www.servicenow.com/docs/access?context=create-risk-assessment-project&family=australia&ft:locale=en-US) : After upgrading to version 22.3.2, Risk Assessment Projects support audit entries to track changes and activity history. An audit entry framework separates audit-specific (third-line) records from operational (second-line) records and controls visibility. Note: This option is available if Audit Management and Audit Workspace are installed. Assign the sn_audit_ws.third_line_manager role to a user to use this feature. [Risk Suggestion AI Agent enhancements](https://www.servicenow.com/docs/access?context=identify-risks-for-entity&family=australia&ft:locale=en-US) : After upgrading the ServiceNow Otto for Integrated Risk Management (IRM) application to version 22.x, the Risk Suggestion AI Agent supports a more context‑aware and conversational workflow. After selecting risk types, you can provide additional context to refine search results, with the agent dynamically asking follow‑up questions when needed. Before adding risks to the suggested risk section, you can review and modify suggested risks by updating descriptions, renaming risks, or removing items from the list. [Risk event response template enhancements](https://www.servicenow.com/docs/access?context=create-risk-event-response-template&family=australia&ft:locale=en-US) : After upgrading to version 22.0.x, users with the Risk Manager \[sn_risk.manager\] or Risk Admin \[sn_risk.admin\] role can configure risk event response templates using dynamic, entity‑driven assignments. These changes enable assignments to be derived from entity data alongside existing static user or group selection.You can select user fields defined on the entity (such as Owner or Sub-owner) or entity stakeholder personas when configuring: * Risk event owner assignment * Issue creation and assignment * Risk event approvers [Control Objective workflow](https://www.servicenow.com/docs/access?context=create-control-objective-ws&family=australia&ft:locale=en-US) : After upgrading to version 22.0.x, you can use a defined workflow to update control objectives. Changes can be drafted and reviewed without changing the current active version, which helps avoid unintended changes to related controls, and risk records. Only approved updates become active. The workflow also sets clear responsibility for making updates and helps keep control objective information consistent and up to date. | | Brazil | No updates for this release. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing Advanced Risk features. {#dfrn3-advancedrisk-summary__entry__18} | Release | Release notes | |-|-| | Zurich | [Downstream risks related list](https://www.servicenow.com/docs/access?context=entities-in-risk-ws&family=zurich&ft:locale=en-US) : The Downstream risks related list on the entity record page has been renamed Risks. Summary section : In the classic UI, the Summary section on the risk event record has been renamed Impacts.In the Risk Workspace, the Summary section on the risk event overview page has been renamed Impacts and approvals. [Some generative AI skills, AI agents, and agentic workflows are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=zurich&ft:locale=en-US) : The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be needed to use the skill. The new default behavior works as follows: * New customers: When you install an AI product, designated skills and agentic workflows are turned on automatically. * Existing customers who are upgrading (starting with Australia Early Access): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive. | | Australia | [Risk event enhancements](https://www.servicenow.com/docs/access?context=manage-risk-events&family=australia&ft:locale=en-US) : Risk event administrators can manage the entire risk event workflow. This update grants permissions aligned with the Risk Manager role, including the ability to reopen closed risk events. [ServiceNow product tiers](https://www.servicenow.com/docs/access?context=ai-native-sku-overview&family=australia&ft:locale=en-US) : The ServiceNow AI Platform now brings you a new AI experience with three licensing tiers available: * Foundation: AI basics to deliver insights * Advanced: AI to boost productivity across relevant use cases * Prime: Act autonomously with all AI assets, and create your own Depending on your license, you will have access to certain application features, generative AI skills, agentic workflows, and AI agents. | | Brazil | No updates for this release. | [ ] ## Removed Between your current release family and Brazil, some Advanced Risk features or functionality were removed. {#dfrn3-advancedrisk-summary__entry__26} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some Advanced Risk features or functionality were deprecated. {#dfrn3-advancedrisk-summary__entry__34} | Release | Release notes | |-|-| | Zurich | To enhance the Risk Workspace home page load performance and reduce latency, the Tasks widget has been removed from the home page. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate Advanced Risk. {#dfrn3-advancedrisk-summary__entry__42} | Release | Release notes | |-|-| | Zurich | Activation information : Install Advanced Risk by requesting it from the ServiceNow Store. Important: Advanced Risk is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Australia | Activation information : Install Advanced Risk by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=australia&ft:locale=en-US). Important: Advanced Risk is available in the ServiceNow Store. For details, see the Activation information section of these release notes. | | Brazil | No updates for this release. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Advanced Risk we have noted them here. {#dfrn3-advancedrisk-summary__entry__50} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Advanced Risk we have noted them here. {#dfrn3-advancedrisk-summary__entry__58} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Advanced Risk, such as specific requirements or compliance levels. {#dfrn3-advancedrisk-summary__entry__66} | Release | Release notes | |-|-| | Zurich | Accessibility information : Reflow for Risk heatmap : The Risk Heatmap component was updated to support reflow, which enables pages and content to be zoomed up to 400% through your browser settings without loss of content or functionality. Additionally, content can be enlarged without scrolling in two dimensions at a width equivalent to 320 CSS pixels or a height equivalent to 256 CSS pixels. Page layouts are transformed into a vertical, stacked view automatically when users increase browser zoom to 400%. This enhancement helps users with low vision or who have trouble seeing web content in a browser due to monitor size, device type, poor lighting, or other situations. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Advanced Risk we have noted them here. {#dfrn3-advancedrisk-summary__entry__74} | Release | Release notes | |-|-| | Zurich | No updates for this release. | | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Advanced Risk we have noted them here. {#dfrn3-advancedrisk-summary__entry__82} | Release | Release notes | |-|-| | Zurich | [Some generative AI skills, AI agents, and agentic workflows are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=zurich&ft:locale=en-US) : The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be needed to use the skill. The new default behavior works as follows: * New customers: When you install an AI product, designated skills and agentic workflows are turned on automatically. * Existing customers who are upgrading (starting with Australia Early Access): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive. * Use the Risk Suggestion AI Agent to discover potential risks for an entity, giving risk managers better insights for informed decision-making. * Use the risk reporting view to view all assessments under a specific Risk Assessment Methodology (RAM), including factor responses, scores, issues, and risks. * Use generative AI to generate risk event summary to quickly understand the risk event key details for faster decisions. * Assess multiple risks and controls side-by-side, make bulk edits, and prioritize entries efficiently using the spreadsheet-style layout. * Use matrix report in the Risk Workspace to assess and analyze the risk posture of your organization. * Use large language models (LLMs) from the third party providers to generate the risk assessment summary. See [Advanced Risk Assessment](https://www.servicenow.com/docs/access?context=advanced-risk-assessment&family=zurich&ft:locale=en-US) for more information. | | Australia | * Introduces a rollup method that derives all risk scores from a single risk record based on the highest residual risk, improving traceability and alignment. * Eliminate inconsistent risk assessment inputs by allowing administrators to hide the Not applicable option in control and residual assessments, improving calculation accuracy and reliability. * Assign risk event owners, issue owners, and risk event approvers based on entity fields, in addition to static user or group selection. * Use the Risk Suggestion AI Agent to refine and confirm risks, by providing additional context and reviewing, updating, renaming, or removing suggested risks before they're added. * Use a structured workflow to draft, review, and approve control objective updates before making them active. [Australia Patch 1](https://www.servicenow.com/docs/access?context=australia-patch-1&family=australia&ft:locale=en-US) Review the updated AI experience with three licensing tiers. See [Advanced Risk Assessment](https://www.servicenow.com/docs/access?context=advanced-risk-assessment&family=australia&ft:locale=en-US) for more information. | | Brazil | No updates for this release. | [ ]