Exploring ServiceNow Otto for Integrated Risk Management (IRM)

  • Release version: Yokohama
  • Updated July 31, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Exploring ServiceNow Otto for Integrated Risk Management (IRM)

    ServiceNow Otto for Integrated Risk Management (IRM) leverages generative AI to enhance key IRM tasks such as summarizing issues, identifying risks, and reviewing controls. These AI-driven capabilities are embedded directly within IRM records, enabling users to streamline workflows involving issues, risks, controls, and policy exceptions. Otto for IRM introduces agentic workflows and AI-powered skills designed to improve efficiency, insight generation, and decision-making within IRM processes.

    Show full answer Show less

    Key Features

    • AI-Powered Assistance: Simplifies routine IRM tasks by providing AI-generated summaries, recommendations, and insights directly within records, reducing manual effort.
    • Agentic Workflows: Automate complex tasks such as generating action plans and remediation tasks for GRC issues, and updating control objectives in response to citation changes through workflows like the Control Objective Change Agent.
    • Generative AI Skills:
      • Issue Summarization: Produces concise summaries of issue records to enhance team coordination and productivity.
      • Control Objective Rationalization: Identifies redundant or overlapping control objectives to improve compliance efficiency.
      • Risk Assessment Summarization: Generates summaries of inherent, residual, and target risks alongside control effectiveness for actionable insights.
      • Regulatory Alert Summarization and Recommendations: Distills regulatory changes into business-relevant summaries and suggests impacted citations, control objectives, and policies to streamline compliance.
      • Control Objective Impact Analyzer: Assesses citation updates to identify impacted control objectives and facilitates their automated update.

    Practical Benefits for ServiceNow Customers

    • Accelerate and simplify IRM processes by embedding AI-driven capabilities within existing workflows.
    • Gain rapid, AI-generated insights to identify risks earlier and make informed decisions.
    • Reduce manual review and data parsing through automated summarizations and recommendations.
    • Maintain compliance more effectively by automating updates to control objectives based on regulatory changes.

    Next Steps

    ServiceNow customers can enhance their IRM capabilities by configuring and activating Now Assist for IRM skills and agentic workflows. Key areas to explore include customizing the issue summarization skill, optimizing issue resolution workflows, and leveraging the Control Objective Change Agent and Control Objective Impact Analyzer skills to automate compliance management.

    With the ServiceNow Otto for Integrated Risk Management (IRM) application, you can use generative AI to support key Integrated Risk Management (IRM) tasks such as summarizing issues, identifying risks, and reviewing controls. These capabilities are integrated into IRM records and help streamline how you work with issues, risks, controls, policy exceptions, and more.

    ServiceNow Otto for IRM overview

    ServiceNow Otto for IRM enables you to use AI-driven skills and agentic workflows focused on Integrated Risk Management. Now Assist for IRM is available based on entitlements.

    ServiceNow Otto for IRM benefits

    ServiceNow Otto for IRM offers the following benefits

    • Simplify and speed up routine IRM tasks with AI-powered assistance embedded in your records.
    • Gain quick insights into IRM data without manually parsing through detailed documentation.
    • Identify potential risks early by analyzing patterns in existing data.
    • Improve decision-making with AI-generated insights available directly in your workflows.

    ServiceNow Otto for IRM workflows/skills

    Table 1. Agentic workflows
    Workflow Feature User role
    Using agentic workflows in ServiceNow Otto for Integrated Risk Management (IRM) agentic workflow Leverage the power of AI agents to generate an action plan and suggest remediation tasks for a GRC issue.
    • sn_grc_genai.issue_user
    • sn_irm_gen_ai.user
    • sn_grc_genai.issue_aiagent_user
    • sn_grc_comp_genai.reg_change_ai_user
    Control Objective Change Agent Automates updates to impacted control objectives when citation changes occur, ensuring descriptions and supplemental guidance remain accurate and aligned with evolving regulatory requirements. sn_irm_gen_ai.user
    Table 2. Generative AI skills
    Skill Feature User role
    Issue Summarization skill

    Analyze issue records using generative AI to generate concise summaries, improving organizational efficiency, team coordination, and productivity.
    • sn_grc_genai.issue_user
    • sn_irm_gen_ai.user
    AI-generated recommendations for similar control objective Control objective rationalization streamlines risk and compliance management by eliminating redundant or overlapping control objectives, improving efficiency while ensuring compliance.
    • sn_irm_gen_ai.user
    • sn_comp_case.compliance_​case_analyst
    • sn_comp_case.compliance_​case_manager
    Risk Assessment Summarization Use Now LLM Service to generate risk assessment summaries from inherent, residual, target risks, and control effectiveness data. These summaries highlight key factors and relevant comments, helping assessors and approvers gain actionable insights.
    • sn_grc_sharegenai.risk_asmt_user
    • sn_risk_advanced.ara_assessor
    • sn_risk_advanced.ara_approver
    • sn_irm_gen_ai.user
    Regulatory Alert Summarization skill

    Leverage Now LLM Service to distill regulatory information into concise, business-relevant summaries that highlight most important changes, deadlines, and actions required for compliance in real-time.
    • sn_grc_reg_change.user
    • sn_grc_comp_genai.reg_change_ai_user
    Regulatory alert recommendation skills Use these skills to identify relevant citations, control objectives, controls, and policies linked to incoming regulatory changes. They streamline the compliance process and reduce manual effort by automatically analyzing regulatory alerts and recommending the most applicable impacted areas for your organization.
    • sn_grc_reg_change.user
    • sn_grc_comp_genai.reg_change_ai_user
    Control objective impact analyzer skill Evaluates citation updates and identifies which associated control objectives require attention. Displays impacted objectives and works with the Control Objective Change Agent for further updates. sn_irm_gen_ai.user

    What to explore next

    To learn more about configuring and using ServiceNow Otto for IRM, see: