Supporting information for ServiceNow Otto for Integrated Risk Management (IRM)

  • Release version: Yokohama
  • Updated July 31, 2025
  • 2 minutes to read
  • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Supporting information for ServiceNow Otto for Integrated Risk Management (IRM)

    ServiceNow Otto for Integrated Risk Management (IRM) is an AI-driven application designed to enhance governance, risk, and compliance workflows. Supported from the Yokohama patch 3 release, it integrates generative AI capabilities to assist with risk assessments, issue summarization, regulatory analysis, and compliance management. This application leverages various large language models and fits into multiple user interfaces to optimize IRM tasks.

    Show full answer Show less

    Supported Versions and Language Models

    • The application requires at least ServiceNow Yokohama patch 3 release.
    • It supports GRC: Regulatory Change Management version 20.1.2 and ServiceNow Otto for IRM version 20.1.1.
    • Compatible AI model providers include Now LLM Service, Now LLM LTS, Azure OpenAI, Google Gemini, and Anthropic Claude on AWS.

    Supported User Interfaces and Capabilities

    The application offers a range of skills and agentic workflows accessible through different interfaces to streamline IRM processes:

    • Risk Workspace: Issue summarization, risk assessment summarization, recommendations for similar control objectives, rationalization, and workflows to optimize GRC issue resolution, generate regulatory analysis, and develop regulatory action plans.
    • Core UI: Issue summarization.
    • Compliance Workspace: Issue summarization, regulatory alert summarization, and detailed impact analysis on citations, control objectives, controls, and policies.

    Application Activation and Dependencies

    To enable the AI skills and workflows, activate the ServiceNow Otto for IRM store app (snirmgenai), which depends on the following foundational applications:

    • Now Assist Platform: Integrates generative AI into ServiceNow workflows for intelligent assistance, including summarization and conversational AI.
    • GRC Common Generative AI: Provides core AI functions for automating risk assessments and compliance documentation ensuring consistency.
    • GRC Shared Generative AI: Centralizes AI services across GRC domains for secure automation and integration.
    • GRC Compliance Generative AI: Supports continuous monitoring, predictive risk management, and automated regulatory mapping for real-time compliance oversight.
    • Recommendation Template: Delivers AI-powered recommendations with rich context to facilitate informed decision-making and implementation by compliance users and administrators.

    Security Enhancements

    The application includes security enhancements for AI agents to enforce access control, ensuring secure and compliant use of AI-driven assistance within IRM workflows.

    Get a quick overview of the important information that is related to the ServiceNow Otto for Integrated Risk Management (IRM) application.

    Supported versions

    ServiceNow Otto for IRM is supported starting from the Yokohama patch 3 release.

    • GRC: Regulatory Change Management application: version 20.1.2
    • ServiceNow Otto for IRM application: version 20.1.1

    Supported language models

    You can use Now LLM Service, Now LLM LTS, Azure OpenAI, Google Gemini, or Anthropic Claude on AWS, as the AI model provider for all Now Assist skills and AI agents. For more information, see Large language models on the ServiceNow AI Platform®.

    Supported user interfaces

    The ServiceNow Otto for IRM application includes the skills and agentic workflows that are listed in the following table.

    Table 1. ServiceNow Otto for IRM supported interfaces
    Interface Skill Workflow
    Risk Workspace
    • Issue summarization
    • Risk assessment summarization
    • Recommendation for similar control objectives
    • Rationalization
    • Optimize GRC issue resolution agentic workflow
    • Get regulatory analysis agentic workflow
    • Generate regulatory action plan agentic workflow
    Core UI Issue summarization
    Compliance Workspace
    • Issue summarization
    • Regulatory alert summarization
    • Regulatory alert impacted citations
    • Regulatory alert impacted control objectives
    • Regulatory alert impacted controls
    • Regulatory alert impacted policies

    Security enhancements

    For information about security enhancements for AI agents, see Implement access control in Now Assist AI agents.

    Application information

    Activate the ServiceNow Otto for IRM store app (sn_irm_gen_ai) to use the skills and agentic workflows.

    This store app has the following dependencies:
    • Now Assist Platform

      Integrates generative AI into ServiceNow workflows, enabling intelligent assistance through summarization, content creation, conversational AI, and agentic workflows for IT, HR, and compliance processes. For more information, see Now Assist Platform.

    • GRC Common Generative AI

      Provides foundational AI capabilities for Governance, Risk, and Compliance (GRC), automating tasks like risk assessments and compliance documentation while helping ensure consistency across GRC workflows.

    • GRC Shared Generative AI

      Delivers centralized generative AI services for multiple GRC domains, supporting shared governance, secure automation, and integration with AI systems for compliance and risk management.

    • GRC Compliance Generative AI

      Enables continuous monitoring, predictive risk management, and automated regulatory mapping to transform compliance from periodic audits to real-time oversight.

    • Recommendation Template

      Provides actionable, AI-powered insights seamlessly within the user interface. The framework offers rich contextual details about recommendations to enable users to make informed decisions and take necessary follow-up actions effortlessly. Admin users can set up contexts for recommendations, and compliance users can review the recommendations for implementation. For more information, see Recommendation contexts and templates.

    For more information, see Configure ServiceNow Otto for Integrated Risk Management (IRM).