---
sourceDocument: Brazil Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Assess the impact of a regulatory alert

# Assess the impact of a regulatory alert {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Evaluate the risk of a regulatory alert by initiating either a risk assessment or a regulatory assessment.

## Before you begin

Role required: sn_grc_reg_change.user

## About this task

You can initiate one of the following assessments:

* Regulatory assessment: Uses the Smart Assessment Engine. A regulatory assessment is used to assess the potential effects of new or updated regulations before the regulations are finalized or implemented.
* Risk assessment: Uses the classic risk assessment. A risk-based approach is used to identify and address both direct and indirect impacts.
{#impact-assessment-tasks__ul_xfk_d44_xdc}

## Procedure

1. Navigate to WorkspacesCompliance Workspace.
2. Select the List icon ![]().
3. In the Lists tab, navigate to Regulatory alertsAll assigned alerts.
4. Select the regulatory alert that you want to assess.
5. Select Assess impact.
6. For Regulatory assessment, perform the following in the Evaluate regulatory impact dialog box.
   1. In the Assessment template field, specify the template to use for the assessment.
   2. In the Select a group field, select the group responsible to perform the assessment.
   3. In the Assessors field, specify individual assessors of the group.  
      Ensure that the assessors have the sn_grc_reg_change.user or sn_grc.business_user roles granted.
   4. In the Due date field, specify the due date for the assessment completion.
   5. Select Send.

   {#impact-assessment-tasks__substeps_mlh_djg_c2c}  
   In the Regulatory assessments related list in the regulatory alert record, the new regulatory assessments are listed.
7. For Risk assessment, filter and select the entities to assess in the Evaluate risk impact dialog box.
   1. In the Filter by dropdown, select one of the following options:  
      * Entities by Impacted Areas: Displays entities derived from impacted areas, including citations, control objectives, controls, policies, risk statements, and risks. These correspond to the records on the Impacted areas tab of the alert.
      * Entities by Recommendations: Displays entities derived from AI-recommended impacted areas, including citations, control objectives, controls, and policies. These correspond to the records on the Recommendations tab of the alert.
   2. Select the entities, and then, select Send.  
      Ensure that the entity owners who are the risk assessors have the sn_grc.business_user and sn_risk_advanced.ara_assessor roles.  
      In the Risk assessments tab in the regulatory alert record, the new risk assessments are listed.
   {#impact-assessment-tasks__substeps_dzb_4n4_xdc}
**Related tasks**   

* [Update a regulatory assessment template](https://www.servicenow.com/docs/fcPW1uH3ZXBmtmmEugPhOg "Publish a new version of assessment templates in Regulatory Change Management (RCM) to revise its questionnaire and response options. Each version maintains a change history of the templates used in regulatory assessments.")

*[\>]: and then