Explore ServiceNow Otto skills and agentic workflows in Regulatory Change Management

With ServiceNow Otto skills and agentic workflows in Regulatory Change Management (RCM), you can streamline the analysis, summarization, and impact assessment of regulatory alerts. These capabilities empower compliance teams to act swiftly and accurately on regulatory changes.

ServiceNow Otto in RCM overview

Organizations working in regulated environments must regularly interpret new and complex regulatory requirements, triage alerts, and determine which business areas are affected. These activities are often performed manually, which can result in delays, inconsistent analysis, and difficulty referencing previous regulatory responses.

ServiceNow Otto in RCM provides a set of generative AI skills and agentic workflows designed to address these challenges.

The summarization skill enables you to generate summaries of a regulatory alert and recommend impacted areas, including citations, control objectives, controls, and policies, for alerts in any state except Closed or Cancelled. The recommendation skills analyzes incoming alerts against existing citations, control objectives, controls and policies to generate suggestions, leveraging generative AI to support more consistent and efficient compliance analysis.

The Get Regulatory Analysis agentic workflow analyzes and enriches regulatory alerts in any state except Closed or Cancelled by leveraging web search and organizational data. It provides additional context for each alert and recommends potential impacts on citations, control objectives, controls, and policies. The Generate Regulatory Action Plan agentic workflow generates regulatory action plans for regulatory alert in the In Progress state by analyzing impacted areas and referencing similar historical alerts. It creates change tasks and action items that help teams implement regulatory changes.

Note:

Depending on your license, you will have access to certain application features, generative AI skills, agentic workflows, and AI agents. For more information, see ServiceNow product tiers.

ServiceNow Otto in RCM benefits

The generative AI skills in Regulatory Change Management offer the following benefits:

• Automated summarization of regulatory alerts, reducing manual effort in interpreting complex regulatory language and surfacing key details such as important dates, regulatory authority, key changes, and penalties/fines.
• AI-powered recommendations of impacted areas, including citations, control objectives, and controls, helping compliance teams quickly assess business impact and prioritize responses.
• Minimized human intervention in repetitive tasks, enabling regulatory analysts to focus on strategic planning, risk mitigation, and stakeholder engagement.
• Accelerated regulatory change processing, enabling faster turnaround for compliance actions, audits, and reporting through embedded workflows and contextual recommendations.
• Scalable and configurable framework, supporting integration of new RCM skills and workflows to adapt to evolving regulatory landscapes and organizational needs.

The agentic workflows in Regulatory Change Management offer the following benefits:

• Context-enriched regulatory analysis, enabling you to enhance alerts through an automated agent that surfaces relevant external and internal references, helping to reduce time spent manually researching regulatory context.
• Automated impact mapping, enabling workflows to recommend affected citations, control objectives, policies, and controls based on historical data and organizational frameworks helping to accelerate impact analysis and reduce the risk of oversight.
• Actionable task generation, where workflows automatically create change tasks and action plans aligned with regulatory requirements, helping teams move from insight to execution without manual task creation.

ServiceNow Otto generative AI skills in RCM

RCM uses the following generative AI skills from ServiceNow Otto:

Skill	Description	User
Regulatory alert summarization skill	Generate a concise summary of a regulatory alert using generative AI. The summary includes: Important dates (for example, publication, compliance, effective) Regulatory authority (for example, agency, jurisdiction) Summary of key changes Penalties or fines	To view your assigned regulatory alerts, you need the sn_grc_reg_change.user and sn_grc_comp_genai.reg_change_ai_user roles.
Regulatory alert impacted citations	Recommend citations that may be affected by the regulatory alert. These recommendations help compliance teams identify relevant legal references and streamline the impact analysis process. For more information, see AI-generated recommendations for a regulatory alert skill.	To view your assigned regulatory alerts, you need the sn_grc_reg_change.user and sn_grc_comp_genai.reg_change_ai_user roles.
Regulatory alert impacted control objectives	Recommend control objectives that may be affected by the regulatory alert. These recommendations help teams align regulatory changes with internal control frameworks and help ensure that compliance measures are updated accordingly. For more information, see AI-generated recommendations for a regulatory alert skill.	To view your assigned regulatory alerts, you need the sn_grc_reg_change.user and sn_grc_comp_genai.reg_change_ai_user roles.
Regulatory alert impacted controls	Recommend controls that may be affected, such as operational, technical, or procedural safeguards. These recommendations support proactive compliance adjustments and risk mitigation. For more information, see AI-generated recommendations for a regulatory alert skill.	To view your assigned regulatory alerts, you need the sn_grc_reg_change.user and sn_grc_comp_genai.reg_change_ai_user roles.
Regulatory alert impacted policies	Recommend policies that may be affected by the regulatory alert. These recommendations help compliance teams identify relevant internal policy documents and ensure alignment with updated regulatory requirements. For more information, see AI-generated recommendations for a regulatory alert skill.	To view your assigned regulatory alerts, you need the sn_grc_reg_change.user and sn_grc_comp_genai.reg_change_ai_user roles.

Note:

By default, only alerts in the New state are eligible for summarization, though this can be configured to include other states; recommendations can be generated for alerts in any state except Closed or Cancelled. To access these skills, the sn_grc_comp_genai.reg_change_ai_user role must be manually assigned to users.

ServiceNow Otto agentic workflows in RCM

RCM uses the following agentic workflows from ServiceNow Otto:

Workflow	Description	User
Get regulatory analysis agentic workflow	Analyze and enrich regulatory alerts by using the get regulatory analysis agentic workflow in the ServiceNow Otto panel. This agentic workflow uses web search to enhance alert context and recommends potential impacts on citations, policies, and control objectives to support faster and more accurate compliance decisions. For more information, see Activate the get regulatory analysis agentic workflow and Analyze and enrich regulatory alerts.	sn_grc_reg_change.user and sn_grc_comp_genai.reg_change_ai_agent_user
Generate regulatory action plan agentic workflow	Generate regulatory action plans by using the generate regulatory action Plan agentic workflow in the ServiceNow Otto panel. This agentic workflow analyzes impacted areas and similar historical alerts to create change tasks and action tasks that help implement regulatory change. For more information, see Activate the Generate regulatory action plan agentic workflow and Generate regulatory action plans.	sn_grc_reg_change.user and sn_grc_comp_genai.reg_change_ai_agent_user

Note:

The Generate regulatory action plan agentic workflow is available when regulatory alerts are in the In Progress state. The Get regulatory analysis agentic workflow is available when regulatory alerts are in any state except for the Closed or Cancelled state. To access these workflows, you must be assigned the sn_grc_comp_genai.reg_change_ai_agent_user role. The Get regulatory analysis agentic workflow relies on recommendation templates and alert configurations to generate actionable insights and tasks. Ensure that templates are properly set up and alerts are categorized to support workflow execution. For more information, see Recommendation contexts and templates, Create a recommendation context, and Create a recommendation template.

Important:

• Not all model providers are available for customers with in-country SKUs, and some AI products/features are currently unavailable for in-country customers. For more information, see the KB1584492 article in the Now Support Knowledge Base. Be sure to check for model provider availability updates in future releases.
• Some AI products/features are currently unavailable for customers in the FedRAMP, NSC DOD IL5, or Australia IRAP-Protected data centers, self-hosted customers, or in other restricted environments. For more information, see the KB0743854 article in the Now Support Knowledge Base. Be sure to check for availability updates in future releases.
• Some AI products/features are currently available only for customers in some regions. Be sure to check for availability updates in future releases.
• Some AI products and skills are not available in Regulated Markets. For more information, see KB2593939: Regulated Markets AI Products/Skills Not Available. Be sure to check for availability updates in future releases.

AI limitations

This application uses artificial intelligence (AI) and machine learning, which are rapidly evolving fields of study that generate predictions based on patterns in data. As a result, this application may not always produce accurate, complete, or appropriate information. Furthermore, there is no guarantee that this application has been fully trained or tested for your use case. To mitigate these issues, it is your responsibility to test and evaluate your use of this application for accuracy, harm, and appropriateness for your use case, employ human oversight of output, and refrain from relying solely on AI-generated outputs for decision-making purposes. This is especially important if you choose to deploy this application in areas with consequential impacts such as healthcare, finance, legal, employment, security, or infrastructure. You agree to abide by ServiceNow’s AI Acceptable Use Policy, which may be updated by ServiceNow.

What to explore next

To learn more about configuring and using ServiceNow Otto for Regulatory Change Management and ServiceNow Otto for IRM, see:

• Exploring ServiceNow Otto for Integrated Risk Management (IRM)
• Configure ServiceNow Otto for Integrated Risk Management (IRM)
• Using ServiceNow Otto for Integrated Risk Management (IRM) skills
• Using agentic workflows in IRM
• Regulatory alert summarization skill
• AI-generated recommendations for a regulatory alert skill
• Activate the Regulatory alert summarization skill
• Activate Regulatory alert recommendation skill
• Generate a regulatory alert summary
• Generate recommendations for regulatory alert impacted citations, control objectives, controls, and policies
• Get regulatory analysis agentic workflow
• Analyze and enrich regulatory alerts
• Generate regulatory action plan agentic workflow
• Generate regulatory action plans