--- sourceDocument: Store Version History Release Notes sourceDocumentLink: https://www.servicenow.com/docs/r/store-release-notes Release : - store ft:locale : - en-US ft:publication_title : - Store Version History Release Notes ft:clusterId : - rnst bundleId : - rnst --- # GRC: Regulatory Change Management release notes # GRC: Regulatory Change Management release notes {#ariaid-title1} Release version: Store Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 7 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of GRC: Regulatory Change Management release notes The ServiceNow GRC: Regulatory Change Management (RCM) application facilitates comprehensive management of regulatory changes by integrating regulatory intelligence, automating workflows, and enhancing compliance visibility. It supports tracking, assessing, and implementing regulatory changes efficiently across your organization while maintaining traceability and security. Show full answer Show less ## Key Features * **Regulatory Alert Management:** Create, import, and organize regulatory alerts manually or in bulk. Alerts can include multiple regulatory and source document import tasks to manage compliance content. * **AI-Enhanced Capabilities:** Advanced summarization of alerts with detailed sections (overview, scope, actions, outcomes, velocity analysis) and integration with AI Data Explorer for natural language querying of regulatory data. * **Smart Assessments:** Support for question banks in assessment templates, version-controlled templates, and unified impact and risk assessments based on a smart assessment engine. * **Task and Action Management:** Regulatory tasks progress through defined workflow states with the ability to create and manage detailed action tasks linked to regulatory and compliance library records, improving traceability and assignment tracking. * **Impacted Areas and Entities:** Enhanced filtering of impacted entities using AI recommendations, multiple impacted areas support across compliance objects, and impact radius calculations to focus risk assessments effectively. * **Security Enhancements:** Strengthened authorization validations for workflows, query range ACLs applied consistently across tables, replacement of hard-coded Admin roles with granular roles, and fixes to security vulnerabilities ensuring least privilege access. * **Regulatory Feed and Taxonomy Updates:** Transition from legacy taxonomy references to updated taxonomy management, improved regulatory feed filtering, and routing rules that auto-assign alerts to domain experts for timely review. * **UI and UX Improvements:** Adoption of standardized UI layouts, improved workspace accessibility, and enhanced task management for coordinators to change task ownership easily. ## Practical Benefits for ServiceNow Customers * **Improved Regulatory Compliance:** Streamlines tracking and management of regulatory changes from ingestion through assessment to implementation, reducing manual effort and risk of non-compliance. * **Enhanced Visibility and Traceability:** Linking regulatory alerts to compliance library records and action tasks provides clear audit trails and accountability. * **Data-Driven Decision Making:** AI-powered summaries and natural language queries enable regulatory change managers to quickly understand and analyze regulatory impacts. * **Security and Governance:** Robust access controls and role management ensure that only authorized personnel can view or modify sensitive regulatory data. * **Seamless Integration and Scalability:** Supports integration with multiple regulatory intelligence providers and scales to handle complex regulatory environments with multiple tasks and impacted areas. ## What to Expect By using the latest versions of GRC: Regulatory Change Management, customers can expect a highly configurable and secure platform that supports comprehensive regulatory change workflows, improved compliance governance, and AI-enhanced insights. Automated task creation, enhanced assessment capabilities, and consistent security policies ensure efficient and controlled regulatory compliance management aligned with organizational needs. Version history for the GRC: Regulatory Change Management on the ServiceNow Store. Important: For details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website. ## Version history Version 23.0.3 - September 2026 (Brazil) : * New: * The regulatory alert summarization skill uses additional input data when generating a summary. The summary output includes new sections such as alert overview, scope, actions and outcomes, and velocity analysis. * AI Data Explorer integration is supported to enable regulatory change managers and users to analyze regulatory data using natural language queries. * Question bank is supported in Smart Assessment templates. * The Regulatory assessments tab in GRC Tasks displays regulatory alert for an assessment in the Record column. * Compliance library records, including citations, control objectives, controls, and policies, include a Regulatory action tasks tab that links the action tasks linked to these records for improved traceability. * Impacted entities can be filtered by AI recommendations and impacted areas when initiating a risk assessment. * Regulatory alert number is displayed on the Details tab of an alert. {#store-grc-rn-regulatory-change-mgmt__ul_vcs_q2q_lkc} * Changed: Functional domain field updated in regulatory body management. The functional domain field is now a list instead of a reference field, with active reference qualification applied in regulatory agency and regulatory feed tables. * Fixed: * Component not configured pop-up has been resolved on the regulatory alert form. * Smart Assessment due date behavior in Regulatory Change Management has been corrected. {#store-grc-rn-regulatory-change-mgmt__ul_i34_r2q_lkc} Version 22.5.1 - August 2026 (Australia) : Changed: As part of MRA Security Enhancements, strengthened authorization validation in Multiple Record Association (MRA) workflows to ensure consistent access checks during record association operations. Version 22.0.5 - August 2026 (Zurich) : Changed: As part of MRA Security Enhancements, strengthened authorization validation in Multiple Record Association (MRA) workflows to ensure consistent access checks during record association operations. Version 22.3.2 - June 2026 (Australia) : * New: * Enabled Regulatory change management product support for IRM Standard customers. * Implemented functional domain changes on regulatory alert record. * Adopted feature roles feature on regulatory change management product. * Manage Smart Assessment templates with versioning support. Create, publish, and delete template versions to support consistent assessment governance. * Changed: * Standardized query range security ACLs are now applied across all tables, ensuring consistent query access for authenticated users with appropriate read permissions throughout the platform. These ACL rules are installed automatically during upgrade with no administrator action required. Automated upgrade scripts handle the full transition, including detection and processing of previously customized ACLs to ensure existing configurations continue to function without interruption. If your instance includes administrator-modified query range ACLs, a post-upgrade review is recommended to confirm alignment with your intended access policies. * Enabled audit entries support for RCM related records. * Fixed: Fixed issues related to automated indexing of regulatory alert and other compliance objects index sources. Version 22.0.1 - March 2026 : Fixed: Resolved security-related issues to improve protection and stability. Version 21.1.1 - December 2025 (Zurich) : * New: Ability to configure recommendation template for policies. This will enable policy recommendations for given regulatory change alert. * Changed: * Introduced an 'Active' flag in the GRC Choice table; updates to these flags are now reflected in the AI Risk and Compliance Management application * Implemented the impacts of Citation to Control mapping feature across the dashboards and overview pages. * Fixed: * Resolved a security vulnerability that allowed unintended edits to read-only fields. * Replaced hard-coded Admin role dependencies with granular roles to improve security and align with least privilege principles. Version 21.0.1 - August 2025 : * New: * Multiple regulatory tasks per alert: Regulatory alerts can now include multiple regulatory tasks, allowing teams to assign responsibilities and track progress across distinct impact areas for comprehensive compliance management. * Source document import tasks: Multiple source document import tasks can be linked to a single alert to manage regulatory content ingestion, ensuring accurate capture and organization of relevant documents for compliance planning. These tasks follow a defined workflow from new to completed states. * Regulatory task workflow updates: Regulatory tasks progress through new, work in progress, implementation, optional awaiting approval, and completed states. Tasks can be closed manually during Implementation if all action tasks are completed, providing flexibility in managing approvals. * Action tasks management: Action tasks can be created when regulatory tasks are in new, work in progress, or implementation states, enabling detailed breakdown and monitoring of activities. Reopening action tasks is possible if regulatory tasks are rejected and moved back to implementation for rework. Version 20.2.2 - June 2025 : Fixed: Enhanced security by creating Query range ACLs across multiple tables.{#store-grc-rn-regulatory-change-mgmt__latest-regulatory-change-mgmt} {#store-grc-rn-regulatory-change-mgmt__latest-regulatory-change-mgmt} Version 20.1.2 - May 2025 : * New: Added new impacted areas feature supporting multiple compliance and risk objects like controls, policies, control objectives, risks and so on. * Changed: * Enhanced the RCM action task form view to support new impacted areas feature. * Impact radius calculation is updated to handle new impacted areas feature. * Removed: * Replaced legacy related documents feature with new Impacted areas. * Automated action task creation as part of Impact radius now only creates tasks present in impacted areas table. Version 20.0.1 - February 2025 : * New: Introduced new Impact assessment feature based on smart assessment engine for a regulatory alert. * Changed: * Unified experience to trigger both impact and risk assessment. * Improved overview and landing page experience with new reports on impact assessment. * Removed: * Entity class configuration is removed to provide flexibility in selection all the entities for risk assessment. * All open assessments for a regulatory alert, whether they are risk assessments or regulatory assessments, are not marked as canceled and remain open even after an alert is marked applicable. Version 19.1.1 - November 2024 : * Changed: Incorporated new risk assessment feature changes to RCM product. * Fixed: * Improved workspace experience for users with low vision or those who rely on assistive technology, such as screen readers. This includes optimising zoom capabilities. * Security fixes. * Added new role changes to fix internal ML model access issue. Version 19.0.0 - August 2024 : * New: * Define routing rules to automatically distribute regulatory alerts to internal stakeholders. Apply conditions to filter incoming regulatory feeds by Title, Description, Key dates, and many other fields. You can auto-assign filtered regulatory alerts to domain experts for further review. * AI-powered recommendations from the most relevant citations through incoming regulatory changes, authority documents, child citations, and related control objects. You can drill down into the recommendation to explore its details within the context of the alert. * Changed: * Improved task management to facilitate the coordinator in changing the ownership of change tasks and action tasks. * Next Experience Chat Collaboration and Discuss. * Monitor action tasks segregated from or application for differentiation and reporting in the My Tasks portal. Version 18.1.2 - June 2024 : * Deprecated legacy "Regulatory Change Management" overview dashboard. * Dashboard will continue for existing customers. * It will not be available for new customers. Version 18.0.2 - February 2024 : * New: * Manual Regulatory Alert Creation * Core product capability to assist users in creating regulatory alerts manually * Easily, create, organize and publish a regulatory alert to record changes from internal or external factors * Bulk import regulatory alerts in large volume * Import your regulatory alerts in bulk, Test and execute your import for data correction and accuracy * Easy handling and correction of import errors * Changed: * UX Standardization * Adopted 3-column layout user interface to maintain uniformity and consistency theme across ServiceNow * Fixed: * Bulk Selector options are not working when scoping multiple Entities for impact analysis * Encoded string observed in regulatory alert content * Content for regulatory alert are not loading when Thomson Reuters integration plugin is not installed Version 17.0.0 - August 2023 : Changed: Implemented new Record page template changes to RCM record pages. Version 16.0.2 - July 2023 : Fixed: Addressed an issue where the Runtime access tracking field's value was inadvertently changing from "None" to "Enforcing" during the Utah upgrade. Version 16.0.1 - February 2023 : * Changed: Ability to associate multiple Regulatory tasks to the same issue. * Fixed: * Access controls for viewing reports * Localization issues Version 15.0.0 - December 2022 : Fixed: Reduction in installation size of the application. Version 14.1.0 - March 2022 : Fixed: Security issue Version 13.0.1 - September 2021 : * New: Regulatory alert contains a new provider reference. * Changed: * Regulatory feed nomenclature used earlier has been replaced with Regulatory alert * Regulatory alert to taxonomy mapping is now added as a one to many table * Related documents now have the ability to reference specific citation from library {#store-grc-rn-regulatory-change-mgmt__ul_xgs_31y_wqb} * Removed: * Taxonomy references on regulatory feed are deprecated and moved to the Regulatory feed to taxonomy mapping table * Taxonomy related tables (both internal and external taxonomy) has been deprecated. The new taxnomy tables from the GRC: taxnomy management plugin is to be used {#store-grc-rn-regulatory-change-mgmt__ul_r5x_j1y_wqb} {#store-grc-rn-regulatory-change-mgmt__ul_akt_h1y_wqb} Version 12.0.2 - March 2021 : * New: * Support issue creation while implementing regulatory changes * Automated action task creation to implement changes on the impacted Policies and Risk Statements in addition to Control Objectives {#store-grc-rn-regulatory-change-mgmt__ul_ey4_ccy_54b} {#store-grc-rn-regulatory-change-mgmt__ul_gfx_zby_54b} Version 11.0.3 - November 2020 : The ServiceNow Regulatory Change Management application provides a streamlined end-to-end process for managing regulatory changes. You can integrate content from various regulatory intelligence providers and constantly keep an eye on your regulatory horizon. Use robust workflows to assess the applicability and impact of regulatory events, map them with internal GRC objects, and execute the regulatory changes. Configurable reports and dashboards, with notifications and alerts increase the transparency of regulatory compliance across the organization.