Identify risks for an entity using Now Assist for IRM

Identify and consolidate risks using the Risk Suggestion AI agent through a conversational assistant. This feature helps streamline risk discovery, eliminate duplicates, and provide a comprehensive list of risks relevant to the entity.

Before you begin

Role required: sn_grc_sharegenai.risk_suggestion_aiagent_user

Make sure that the following prerequisites are met to use this feature:

• Now Assist for IRM and any Workspace must be installed.
• Suggest potential risks workflow and Risk Suggestion AI agent must be activated. For more, refer to Activate agentic workflows in Now Assist for Integrated Risk Management (IRM).

Procedure

1. Navigate to All > Risk > Risk Workspace.
   You can also navigate to your required Workspace.
2. Select the list icon.
3. From the list, navigate to Library > Entities.
4. Select the entity to identify potential risks.
5. Navigate to the Risks tab and select Suggested risks.
6. Select the Suggest risks button.
   A conversational assistant opens within the Now Assist panel.
7. Interact with the conversational AI agent by responding to its questions to identify potential risks.
   The agent automatically pulls the entity context, guides you through risk domain selection, and surfaces relevant risks from internal, industry, and external sources. During this process, it automatically removes any duplicate suggestions that exist. After selecting risk types, you can provide additional context to refine search results, with the agent dynamically asking follow‑up questions when needed.
8. Review the consolidated list of suggested risks in the panel before proceeding.
9. Choose whether to add risks to the suggested risks section when prompted.
   Before adding risks to the suggested risk section, you can review and modify suggested risks by updating descriptions, renaming risks, or removing items from the list.
   If you select Yes, the risks are added to the suggested risks section.
10. Review the listed risks for accuracy and make any necessary changes before creating them.
    Risks identified from existing risk statements are listed under Risks from risk statements. Any newly identified Risks are listed under the Ad-hoc risks type.
11. Choose the required risks and select Create risk.
    The selected risks are added and appear in the Directly related risks section.
12. Optional: Select Suggest risk button to reinitiate the same process.
13. Optional: To delete the suggested risks, choose the required risks, and select Delete.