GRC: Crisis Management release notes

  • Release version: Store
  • Updated June 11, 2026
  • 6 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of GRC: Crisis Management Release Notes

    The GRC: Crisis Management application on the ServiceNow Store provides comprehensive tools to manage crisis events, recovery tasks, and business continuity plans (BCP). The release notes detail enhancements, new features, and fixes across multiple versions from March 2021 through June 2026, reflecting continuous improvements in crisis task automation, plan management, and user experience.

    Show full answer Show less

    Key Features

    • Event Task Management: Import/export of event tasks via Excel, quick task addition from plan and recovery strategy pages, and a dedicated recovery tasks form streamline task creation and updates.
    • Cross-Plan Task Dependencies: Recovery tasks can now link across plans within an upstream/downstream hierarchy, with an “Associated Plans” tab for easy management.
    • Phases and Task Categorization: Tasks can be categorized into phases such as Preparation, Recovery, Validation, and Return to Normal, improving visibility into recovery progress.
    • Asset Recovery Tracking: Users can mark assets as Partially Recovered or Recovered upon task completion, with recovery assets linked to Business Impact Analysis (BIA) records for automatic retrieval of RTO, RPO, and recovery tier data.
    • Automated Timing Calculations and Gantt View: Planned start/end times for event tasks are auto-calculated based on dependencies and durations; a Gantt chart integrated into the hierarchy view visually represents task timelines and statuses.
    • Event and Exercise Differentiation: Tasks can be flagged to include or exclude them from actual crisis or exercise scenarios and time calculations.
    • Enhanced Automation and Notifications: Event tasks support automation frameworks with new states, failure modes, bulk editing, and email notifications for task automation and updates from CMDB, BIA, and BCP.
    • Improved User Experience: New UI enhancements include workspace tabs for crisis events/exercises, 360-degree visualization, progress bars for dependency updates, and self-service views for event tasks.

    Key Fixes and Improvements

    • PDF generation processes are now asynchronous, preventing delays during event state changes and supporting special character sets like Hungarian.
    • Performance optimizations in task creation and dependency checks enhance responsiveness.
    • Security fixes in MRA record addition, HTML message handling, and GlideRecord queries protect data integrity.
    • Archived plans are excluded from selection modals to avoid accidental inclusion in active events and exercises, with controls available for managing dependencies.
    • Action items are correctly deleted with associated events, and assessments can be viewed regardless of linkage to action items.
    • Plans now move to an “Open” state when events start, improving status accuracy.
    • Compatibility updates ensure smooth operation across ServiceNow glide family releases.

    Practical Benefits for ServiceNow Customers

    Customers using the GRC: Crisis Management application can expect streamlined crisis response processes with automated task management, clear visibility into recovery stages, and robust asset recovery tracking. The integration of cross-plan dependencies and phased task categorization supports complex recovery scenarios. Enhanced UI elements and automation frameworks reduce manual effort and improve tracking accuracy. Security and performance improvements ensure reliability and data protection during critical events. Overall, these updates enable organizations to effectively plan, execute, and monitor crisis recovery activities within the ServiceNow platform.

    Version history for the GRC: Crisis Management application on the ServiceNow Store.

    Important:
    For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

    Version history

    Version 11.0.2 - June 2026 (Australia)
    • New:
      • Import and export of event tasks is now supported. Users can import event tasks from Excel files.
      • Users can now quickly add recovery tasks from plan and recovery strategy pages. A new quick insert action is available on the Recovery tasks related list, allowing users to create recovery tasks directly from both plan and recovery strategy records.
      • A dedicated Recovery tasks form screen is now available.
    • Fixed:
      • PDF generation no longer blocks event state changes. PDF creation has been moved to an asynchronous process, allowing state changes to proceed without delay
      • Task creation performance has been improved by moving dependency checks to event processing.
      • The calculation of task timing and order has been updated for better performance.
    Version 9.1.5 - March 2026 (Zurich)
    Security fix in MRA record addition: Post this fix, the user will be able create new rows in the related list table.
    Version 9.1.4 - December 2025 (Zurich)
    • New:
      • Cross plan task dependency
        • Recovery tasks inside Business Continuity Plan (BCP) can now be linked to tasks from other plans, provided they belong to a direct upstream plan. These will be carried across to event tasks.
        • A new “Associated Plans” tab has been introduced to easily view and manage these cross-plan connections
      • Phases
        • Introduced phases to categorize tasks across different stages of a recovery event, such as Preparation, Recovery, Validation, and Return to Normal, for clearer progress visibility
        • Shipped some out of box phases: Preparation, Recovery, Recovery Validation, Return to Normal, Return to Normal Validation, Post-incident review
      • Asset recovery level
        • A new option which allows users to mark impacted assets as Partially Recovered or Recovered upon task completion
      • Include in Actual Crisis or Exercise
        • Users can now specify whether a task should be included in an actual crisis or exercise scenario
      • Exclude from Time Calculation
        • A new option lets users mark tasks that should not be factored into overall time calculations
      • Automated Planned Time Calculation
        • Event tasks now include Planned Start and Planned End fields that are automatically calculated based on the recovery event’s expected start time, as well as the duration and dependencies of predecessor tasks
      • Gantt view
        • The hierarchy view now features an integrated Gantt chart, providing a visual timeline of task durations and dependencies. Tasks are color-coded to indicate their status, such as Completed, In Progress, and more
    • Changed:
      • Plan Retrieval for Recovery Events
        • Updated how plans are brought into a recovery event. Previously, all plans related to the target plan were automatically included. With the introduction of a clearer upstream/downstream hierarchy, recovery events will now exclude upstream plans
      • Recovery assets
        • Recovery assets are now linked to their corresponding BIA records, enabling automatic retrieval of key data such as RTO, RPO, and Recovery Tier
    • Fixed:
      • Action Items updates
        • Action items are now deleted when the associated event is deleted. Any SAE linked to those action items will be automatically canceled
        • Updated validation logic for action items
        • Users can now view SAE assessments even if they are not linked to an action item
      • Archived plans updates
        • Archived plans will no longer appear in the selection modal when adding related plans
        • Within an exercise or event, archived plans will no longer be available in the selection modal, preventing users from adding them directly
        • When using “Add all plans related to asset”, primary archived plans will not be pulled in. However, related archived plans will still be included, since they may be dependencies of active plans required for the event to run successfully. If customers do not want these archived downstream plans included, they will need to adjust the relationship
      • Fixed issue where Activated Plans would get permanently stuck in Open status if recovery event was of type 'Actual'
    Version 9.0.4 - August 2025
    • New:
      • Avoid duplicate event tasks by grouping similar event tasks
      • Manage action items for ad-hoc tasks and threat assessments
    Version 8.1.2 - June 2025
    Fixed: PDF generation is not working correctly when Hungarian characters are used.
    Version 8.1.1 - May 2025
    • New: Progress bar added for update dependencies in events
    • Fixed:
      • Dependencies are missing from the list for the recovery task
      • Element definition filter is not working in planning and event
    Version 8.0.3 - February 2025
    • New:
      • Added wbs order for event tasks
      • Added related assets from related plans
      • When a plan is added to event, customer should be able to see all the activated plans associated to the tasks for n levels.
      • Added gantt UI for hierarchical view for event tasks
    • Fixed: Fixed security gap for html messages
    Version 7.1.1 - November 2024
    Changed: Review sandbox access for client callable scripts.
    Version 7.0.1 - August 2024
    • Changed:
      • Added and updated roll-up of total time taken and total effort for completing the tasks from tasks to plans to assets
      • Added "Open" state for activated plan, when event is started plan is moved to "Open" state instead of "Work in progress" state
      • The crisis manager can now add plans to an event without any associated assets and start executing the tasks.
      • Based on asset tags in recovery tasks, impacted assets are added to event tasks.
    • Fixed: Added event tasks related list in U16 view
    Version 6.1.4 - July 2024
    Fixed: Fixed app compatibility for the glide family releases.
    Version 6.1.3 - June 2024
    • New:
      • Added event tasks automation framework
      • Added new states for event tasks to support failure mode
      • Added re-trigger for manual or automatic event tasks
      • Added bulk edit support for event tasks
      • Added email notification for event task automation flow
    • Changed: Make event tasks editable for closed-state.
    • Fixed: Security defect for GlideRecord encoded query.
    Version 6.0.1 - February 2024
    • New:
      • Added configuration to set manual or automated updates from CMDB, BIA and BCP
      • Added dependency update support from CMDB, BIA, and BCP
      • Added email notification for updates from CMDB, BIA, and BCP
    • Fixed:
      • Fixed save UI action appearing on event tasks
      • Added warning message for event tasks when plan don't have scope
      • Fixed security gap on exercise flows
    Version 5.0.2 - August 2023
    • New:
      • Added exercise and crisis events in the new BCM Next Experience workspace
      • Added exercise and events activities in My Task
      • Added new homepage tabs for crisis events and exercise
      • Added a new overview page with a stepper component for states
      • Added exercise and crisis events modules in the List view
      • Added new UI experience for the Assets tab
      • Added new UI experience Event Tasks
      • Added 360 degree visualization
    • Fixed: Unable to close activated plan for table top exercise.
    Version 4.1.0 - May 2023

    Fixed: Look up for reference field is displaying only 10 values at a time in workspace list.

    Version 4.0.1 - February 2023

    Fixed: Fixed report_view ACLs.

    Version 3.0.3 - December 2022

    Fixed: Fixed parent POM in order to remove the redundant GLIDE-INF folder and content contained within.

    Version 3.0.2 - August 2022
    • Changed: Updated event tasks to support BCM event scoping changes
    • Fixed: Fixed security gaps for HTML injections
    Version 2.3.1 - March 2022
    • New: Ability to define complex approval rules and route exercises for approval
    • Changed: State, actual date roll-ups, and its associated effort rollup to the event are modified.
    Version 2.2.1 - November 2021
    • New:
      • Ability to generate exercise and events PDF
      • Report actual time taken and total effort at plan and event asset based on task execution duration
      • Event task execution to honor dependency defined in plan
      • Ability to add ad hoc task to activated plan
    • Changed:
      • Former behavior of adding activated plan and tasks per event asset is modified to avoid task duplication. Activated plan and ad hoc plan are unique per event
      • Event tasks contain a list of impacted assets for which the tasks will be executed
    • Removed: Impacted asset and plan asset columns on activated plans are deprecated
    Version 2.1.1 - June 2021
    • New: Self-service view added for event tasks
    • Changed: Workspace layout of event activated plan and event task modified
    • Removed: Mandatory check of plan in activated plan
    Version 2.0.1 - March 2021
    • New:
      • Support to add any asset/process/service to recover during crisis
      • Track adhoc tasks to recover an asset
    • Changed: Activated plan and event tasks now reference impacted assets. A plan instance is used to track activities for an impacted asset/process/service