Advanced Risk release notes
Summarize
Summary of Advanced Risk release notes
The ServiceNow® Advanced Risk application helps organizations identify, analyze, evaluate, treat, and monitor risks that could affect their business objectives. The Australia release introduces enhancements focused on improving risk scoring accuracy, assessment reliability, collaborative workflows, and AI-driven risk suggestions, enabling better governance and traceability.
Show less
Key Features
- Worst Case Aggregation Rollup: A new risk scoring method deriving all scores from a single risk record using the highest residual risk, enhancing traceability and audit compliance. Configurable on the Risk Assessment Methodology (RAM) form.
- Hide Not Applicable Option: Administrators can now hide the “Not applicable” checkbox in control and residual assessments to reduce calculation errors and improve assessment reliability.
- Parallel Review and Feedback: Enabled by default on risk assessment projects, this facilitates collaborative reviews without manual setup for more efficient workflows.
- Notification Link Redirects: GRC notification emails now direct users to the appropriate workspace based on their access and roles, improving usability and workflow adoption.
- Template Versioning for Risk Identification: Ensures assessments use the latest smart assessment template versions for consistency.
- Audit Entry Field on Risk Assessment Projects: Tracks changes and activity history separately for audit and operational records, provided Audit Management and Audit Workspace are installed.
- Dynamic Risk Event Response Templates: Risk event owner, issue owner, and approver assignments can be configured dynamically based on entity fields, improving assignment accuracy.
- Risk Suggestion AI Agent Enhancements: Provides a conversational, context-aware workflow allowing users to refine, review, update, rename, or remove suggested risks before inclusion.
- Control Objective Workflow: Introduces a structured workflow to draft, review, and approve control objective updates before activation, maintaining consistency and preventing unintended changes.
- ServiceNow AI Platform Licensing Tiers: The AI experience now includes three tiers—Foundation, Advanced, and Prime—offering varying levels of AI capabilities and features depending on licensing.
Activation and Related Applications
Advanced Risk is available through the ServiceNow Store and must be requested for installation. It is designed to integrate seamlessly with related applications such as GRC Risk Management and GRC Risk Workspace, enhancing risk-based decision-making and providing a unified user experience for managing risk activities.
The ServiceNow® Advanced Risk application enables you to identify, analyze, evaluate, treat, and monitor risks that could impact your organization in achieving its business objectives. Advanced Risk was enhanced and updated in the Australia release.
Advanced Risk highlights for the Australia release
- Assign risk event owners, issue owners, and risk event approvers based on entity fields, in addition to static user or group selection.
- Use the Risk Suggestion AI Agent to refine and confirm risks, by providing additional context and reviewing, updating, renaming, or removing suggested risks before they’re added.
- Use a structured workflow to draft, review, and approve control objective updates before making them active.
Review the updated AI experience with three licensing tiers.
See Advanced Risk Assessment for more information.
New in the Australia release
- Risk event response template enhancements
- After upgrading to version 22.0.x, users with the Risk Manager [sn_risk.manager] or Risk Admin [sn_risk.admin] role can configure risk event response templates using dynamic, entity‑driven assignments. These changes enable
assignments to be derived from entity data alongside existing static user or group selection.
You can select user fields defined on the entity (such as Owner or Sub-owner) or entity stakeholder personas when configuring:
- Risk event owner assignment
- Issue creation and assignment
- Risk event approvers
- Risk Suggestion AI Agent enhancements
- After upgrading the Now Assist for Integrated Risk Management (IRM) application to version 22.x, the Risk Suggestion AI Agent supports a more context‑aware and conversational workflow. After selecting risk types, you can provide additional context to refine search results, with the agent dynamically asking follow‑up questions when needed. Before adding risks to the suggested risk section, you can review and modify suggested risks by updating descriptions, renaming risks, or removing items from the list.
- Control Objective workflow
- After upgrading to version 22.0.x, you can use a defined workflow to update control objectives. Changes can be drafted and reviewed without changing the current active version, which helps avoid unintended changes to related controls, and risk records. Only approved updates become active. The workflow also sets clear responsibility for making updates and helps keep control objective information consistent and up to date.
Changed in this release
- Australia Patch 1
- ServiceNow product tiers
- The ServiceNow AI Platform now brings you a new AI experience with three licensing tiers available:
- Foundation: AI basics to deliver insights
- Advanced: AI to boost productivity across relevant use cases
- Prime: Act autonomously with all AI assets and create your own
Depending on your entitlements, you will have access to certain application features, generative AI skills, agentic workflows, and AI agents.
Activation information
Install Advanced Risk by requesting it from the ServiceNow Store. Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.