--- sourceDocument: Brazil Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Configure # Configure Digital resilience incident reporting {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Digital Resilience Incident administrators can configure conditions in Workflow Studio to auto-trigger incident reporting in Digital resilience incident reporting. ## Setting up templates and modules {#workflow-confi-auto-trigger-inci-repo-cases__section_r5p_twn_3hc} Operational Resilience administrators set up Word templates, Template configurations, and the Digital resilience incident (DRI) case type required for Digital resilience incident reporting as shown in the example. Configure Word Templates and Template Configurations for generating reports in Microsoft Word format. For more information, see [Generating Microsoft Word reports using Document designer](https://www.servicenow.com/docs/bXVP8ipoKkGbEr_XI2pUhw "Digital resilience incident reporting administrators (sn_dri_inc_rptg.digital_resilience_incident_administrator) can now set up Microsoft Word templates and Digital resilience incident reporting managers (sn_dri_inc_rptg.digital_resilience_incident_manager) can download action task reports in Microsoft Word format​."). The Digital Resilience Incident Case module lists all Digital Resilience Incident Cases associated with an incident or security incident. A new 'Regulation Mappings' related list is now available in each Digital Resilience Incident Case record. It displays the relationships between entities related to the cases and their corresponding regulations. ## Prerequisite data setup for DRI questionnaires {#workflow-confi-auto-trigger-inci-repo-cases__section_yk5_qt1_gjc} Several reference questions in the DRI Initial report, Intermediate report, and Final report templates use the legal-entity and third-party tables from the Digital Resilience Third-Party Registers application. These tables are sn_dora_accel_entity and sn_dora_accel_third_party. Populate these tables before generating an initial report, either manually or via the Excel upload request. Populating these tables allows the responder to fill in fields. Examples include 'Name of the entity submitting the report', 'LEI code of the financial entity affected', and 'Name of the third party provider'. For details, see [Maintaining Digital resilience third-party registers](https://www.servicenow.com/docs/dqinxya1int2AB2jKLuwaQ "The Digital resilience third-party registers application enables customers to maintain contractual arrangements for Information and Communication Technology (ICT) services from ICT third-party service providers. These services support critical or important functions. Customers can manage contractual arrangement details through the graphical user interface (GUI) or by importing or exporting Microsoft Excel files."), [Create a third party and enhance digital resilience data](https://www.servicenow.com/docs/u2nKeHgkmu8NeDKpMMqvwQ "Create a third party record in Digital resilience third-party registers. Add the details of the third party company such as its name, address, phone number, vendor manager, and so on. You can then enhance its digital resilience information for compliance with DORA regulation."), and [Create a legal entity and enhance digital resilience data](https://www.servicenow.com/docs/uebAvNwFGV9qDW20J4sHHA "Create a legal entity record in Digital resilience third-party registers. You can then enhance its digital resilience information for compliance with DORA regulation."). ## Conditions for setting up the Workflow {#workflow-confi-auto-trigger-inci-repo-cases__section_adr_vpm_ydc} Workflow Studio contains preconfigured flows and conditions for creating DRI case tasks from incidents in the Incident Management or Security Incident Response applications. Access the Digital resilience incident reporting flows by navigating to Workflow StudioFlowsFlow Designer. The following flows, previously used in the Digital resilience incident reporting application, have been deprecated: 1. Digital Resilience Incident Flow 2. Digital Resilience SIR Flow 3. DRI Business service Trigger {#workflow-confi-auto-trigger-inci-repo-cases__ol_k3k_txt_khc} Note: To use the previously deployed flows, deactivate the new flows (listed in this section) and then activate the Digital Resilience Incident Flow, Digital Resilience SIR Flow, and DRI Business Service Trigger Flow. The following flows in Digital resilience incident reporting are still active: 1. Digital Resilience Incident Approval Flow 2. DRI case create/update on incident update 3. DRI case create/update on security incident update 4. DRI case creation on incident entity insert 5. DRI case creation on SIR entity insert {#workflow-confi-auto-trigger-inci-repo-cases__ol_igh_sxt_khc} New flows have been introduced in Digital resilience incident reporting to manage action tasks, regulations, and trigger conditions for multiple regulators, as illustrated in the example: 1. Action task automation for regulation addition 2. Action task automation on action task update 3. Action task automation on DRI case updates 4. Action task automation on regulation updates 5. DRI Business Service Trigger For Multiple Regulators {#workflow-confi-auto-trigger-inci-repo-cases__ol_w4r_sb5_khc} Note: If the Security Incident Response application is installed in your instance, flows related to the security incidents (SIR) are listed in the Flows list view. The Digital Resilience Incident Flow and Digital Resilience SIR Flow are prebuilt into the Digital resilience incident reporting application. The flow configuration impacts all incident records in the instance. As administrators of the Operational Resilience application, you can update (customize) the flow configurations to meet your organizational requirements as shown in the example. Insert condition : The flow includes prebuilt conditions: the incident priority is Critical, the urgency is High, and the incident has been open for more than 24 hours. When all these conditions are met, it's automatically reported in the Digital resilience incident reporting application. Update condition : When an incident is reopened or updated, that classification condition is also defined in the flow. When the configured conditions are met, the incident is reported in the Digital resilience incident reporting application. Note: The Digital resilience incident reporting application is licensed under the Integrated Risk Management (IRM) application family. ## Required and optional plugins {#workflow-confi-auto-trigger-inci-repo-cases__section_yb1_3kk_12c} The Digital resilience incident reporting application is available from the ServiceNow Store. This section details its required and optional plugins. {#workflow-confi-auto-trigger-inci-repo-cases__table_hsy_fkn_3hc__entry__2} | Application name | Plugin | |-|-| | Document designer | (com.sn_grc_doc_design) | | Digital Operational Resilience Management | (com.sn_app_grc_digital_resilience) | | GRC | (app-grc) | | GRC Base Workspace | (app-grc-base-workspace) | | GRC: Compliance Case Management | (app-grc-case-mgmt) | | GRC Operational Resilience | app-grc-operational-resilience (com.sn_grc_oper_res) | | GRC: Policy and Compliance Management | (com.sn_compliance) | | Regulatory Agency Library | (com.sn_reg_body_mgmt) | | Reusable impact framework | (sn-reusable-impact-framework) | | Smart Assessment impact automation | (app-smart-assessment-impact-automation) | | Smart Assessment response automation | (app-smart-assessment-response-automation) | | Smart Assessment Core | (sn_smart_asmt) | | Smart Assessment designer | (sn_smart_asmt_desg) | [Table 1. List of required plugins] {#workflow-confi-auto-trigger-inci-repo-cases__table_hsy_fkn_3hc} {#workflow-confi-auto-trigger-inci-repo-cases__table_swm_53n_3hc__entry__2} | Application name | Plugin | |-|-| | Security Incident Response | (app-sir) | | Digital Resilience Third-party Information Register | (sn_info_reg) | [Table 2. List of optional plugins] {#workflow-confi-auto-trigger-inci-repo-cases__table_swm_53n_3hc} *[\>]: and then