--- sourceDocument: zurich Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/delta-xanadu-zurich Release : - zurich ft:locale : - en-US ft:publication_title : - zurich Combined Product Files ft:clusterId : - delta3zx bundleId : - delta3zx --- # Combined Operational Resilience release notes for upgrades from Xanadu to Zurich # Combined Operational Resilience release notes for upgrades from Xanadu to Zurich {#ariaid-title1} Release version: Zurich Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 15 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Operational Resilience release notes for upgrades from Xanadu to Zurich This consolidated guide provides ServiceNow customers with essential information on upgrading Operational Resilience from version Xanadu through Yokohama to Zurich. It highlights new features, important changes, upgrade tasks, and enhancements that support regulatory compliance, operational vulnerability management, and resilience metrics improvement. The release emphasizes alignment with regulatory frameworks such as the Digital Operational Resilience Act (DORA) and integration with the Common Service Data Model (CSDM). Show full answer Show less ## Important Upgrade Information * After upgrading to Zurich (version 21.0.x), rerun the **Update CSDM and other dependencies** scheduled job to populate new metadata. * Review and complete pre- and post-upgrade tasks as specified to ensure smooth transition. ## Key Features * **Operational Vulnerability Management:** Report, assess, and manage operational vulnerabilities via the Operational Resilience Workspace or Employee Center with added capabilities to specify primary origins and impact areas. * **Digital Resilience Third-Party Registers:** Manage ICT service provider records to comply with DORA, including bulk import/export via Microsoft Excel and generating regulator-ready reports. * **CSDM Integration and Metrics:** Define entity types, pillars, and main node configurations to import CMDB data for resilience reporting. Enhanced fix scripts improve data management and performance by storing hierarchical nodes separately. * **Interactive Node Map Visualization:** Navigate operational dependencies through a configurable Nexus map within the Operational Resilience Workspace, with improved visual clarity and relationship insights. * **Digital Resilience Incident Reporting:** Integrated with Incident Management and Security Incident Response to automate incident classification, regulatory notifications, and report generation within defined regulatory timelines. * **Smart Assessment:** Analyze service importance and impact tolerance using flexible, role-based templates to streamline assessments and generate customizable self-attestation reports. * **Regulatory Compliance Enhancements:** Generate and validate Register of Information (RoI) packages for EU DORA compliance, with automated validation and detailed error reporting to ensure data quality. * **Report Generation:** Use the Document Designer to create Microsoft Word templates for action task reports, enabling audit-ready documentation stored within ServiceNow or Microsoft SharePoint. * **New and Updated Modules:** Added modules for Services, Business Services, Service Offerings, Business Processes, and Application Services with improved layouts and related lists for contracts and regulations. * **User Experience:** Introduction of the Coral theme as the default UI with dark mode options for enhanced accessibility and user comfort. ## Changes and Improvements * Expanded reporting capabilities by adding Operational Vulnerability related lists to multiple modules. * Enhanced dashboards and workspace modules to manage entity types, pillars, services, and processes efficiently. * Updated forms to include Business Service and Offering classes for assessments, scenario analyses, and self-attestations. * Optimized data retrieval and processing by redesigning how dependency chains are stored and managed, improving performance and flexibility. * Added comprehensive configuration options for node, edge, and Nexus map settings to better visualize and manage dependencies. * Improved error messaging, validation, and support for 'Not applicable' values in regulatory package validations. ## Activation and Browser Requirements * Operational Resilience must be requested and installed from the ServiceNow Store. * Supported browsers include Google Chrome, Firefox (including ESR), Microsoft Edge Chromium, and Safari 12.0 or later. ## Accessibility and Localization * Enhanced screen reader and translation support through ARIA labels and tooltips. * The new Coral theme supports a dark mode option to improve readability and reduce eye strain. * No new localization updates were introduced in this release. ## Practical Benefits for ServiceNow Customers * Streamlined compliance with financial industry regulations such as DORA through integrated third-party registers and regulatory reporting. * Improved operational risk management with advanced vulnerability tracking, impact analysis, and incident reporting capabilities. * Enhanced data integration and reporting using CSDM, providing clearer insights into service dependencies and resilience status. * Greater flexibility and automation in assessments and self-attestations, reducing manual overhead and improving data accuracy. * Improved user experience with visualization tools and customizable reporting templates supporting audit readiness and stakeholder communication. Consolidated page of all release notes for Operational Resilience from Xanadu to Zurich. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Operational Resilience release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Zurich. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Operational Resilience to Zurich Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-operationalresilience-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | Upgrade information : After upgrading to Operational Resilience version 21.0.x, rerun the Update CSDM and other dependencies scheduled job to populate the additional metadata that was introduced in this release. | [ ] ## New features Between your current release family and Zurich, new features were introduced for Operational Resilience. {#dfrn3-operationalresilience-summary__entry__10} | Release | Release notes | |-|-| | Xanadu | [Managing Operational vulnerability](https://www.servicenow.com/docs/access?context=operational-vulnerability&family=xanadu&ft:locale=en-US) : Address operational vulnerabilities through reporting, assessing impact, evaluating criticality, managing issues, and planning treatments in Operational Resilience Workspace. Report operational vulnerabilities by using either Employee Center or Operational Resilience Workspace. [Maintaining Digital resilience third-party registers](https://www.servicenow.com/docs/access?context=digi-resi-third-party-registers&family=xanadu&ft:locale=en-US) : Comply with Digital Operational Resilience Act (DORA) regulation requirements by creating contractual arrangements between the financial entities and the ICT service providers in Digital resilience third-party registers. The ICT third-party service provider records are maintained in Digital resilience third-party registers for DORA compliance. Add or modify the records in bulk or individually for assessments, branches, contracts, functions, legal entities, supply chains, third parties, or third-party engagements. Export the records to Microsoft Excel format for the European Union to streamline the auditing process as per the regulation. You have the option to import the records from external sources into the Digital resilience third-party registers application. | | Yokohama | [Measure resilience metrics using the CSDM model](https://www.servicenow.com/docs/access?context=using-csdm-v5&family=yokohama&ft:locale=en-US) : Define the entity types and pillars in Operational Resilience and generate the entities. Establish relationships between CSDM objects, including business services, service offerings, business processes, and application services. Specify the type of main node configuration that you want to use by setting the sn_oper_res.opres_csdm_main_node_config property. After generating the entities and setting up the main node configurations, you can import CMDB data into Operational Resilience for reporting. CSDM and their dependencies are updated weekly while the red flags data is calculated daily. The outcome is displayed on the Homepage or in the related list of the CSDM objects. [Specify the primary origin of an operational vulnerability](https://www.servicenow.com/docs/access?context=add-impacted-area-to-vul&family=yokohama&ft:locale=en-US) : Identify the primary origin of an operational vulnerability in its record. Once the primary origin is specified, its upstream dependencies are automatically included in the impacted areas, enabling you to view the operational vulnerability from all affected perspectives. [Using Digital resilience incident reporting](https://www.servicenow.com/docs/access?context=drir-module&family=yokohama&ft:locale=en-US) : Assess whether any critical services are affected and classify the reported incident as a major incident if necessary. Notify regulators of major incidents, categorized by their severity and security ratings. The Digital resilience incident reporting module, accessible from the Operational Resilience Workspace, is integrated with Incident Management and Security Incident Response to generate and share reports in the format that is specified by the regulators. You can generate an initial report within 24 hours, an intermediate report within 72 hours, and a final report within 1 month. All of these reports are automatically triggered by the application from the time that the incident is classified as a major incident. | | Zurich | [Use the interactive Node Map visualization](https://www.servicenow.com/docs/access?context=configure-nexus-map-configurations&family=zurich&ft:locale=en-US) : Navigate operational dependencies using the interactive Node map visualization. Configure node and edge settings in the Nexus map, then display Main node configurations directly within the Operational Resilience Workspace. The Resilience map action provides access to relationships for Business Services (BS), Application Services (AS), Supporting Offerings (SO), Business Processes (BP), and Dependencies modules in the map view. You can configure node dependency directions and enhance visual elements with improved colors and icons for clarity. Additionally, you can gain comprehensive insights from the summary panel and address missing 'red flags' for a complete picture. [Generate Word reports of action tasks](https://www.servicenow.com/docs/access?context=gen-word-reports&family=zurich&ft:locale=en-US) : Use the Document designer to set up Microsoft Word templates and download action task reports in Digital resilience incident reporting. This functionality enables you to customize predefined templates or create templates, incorporating specific data like tables and columns from records, to generate intuitive, audit-ready reports. You can then save these reports within the ServiceNow® instance or as cloud documents in Microsoft SharePoint. [Report incidents associated with multiple regulations for various legal entities](https://www.servicenow.com/docs/access?context=reporting-for-multiple-regulations&family=zurich&ft:locale=en-US) : Report incidents or security incidents associated with multiple regulations for various legal entities in Digital resilience incident reporting. Its automated workflow generates regulatory reporting assessment of IT incidents, DRI Initial report, DRI Intermediate report, and DRI Final report within regulatory timelines, each with dedicated action tasks. You can complete these tasks and generate reports in Microsoft Word format required by regulatory authorities for analysis. [Generate Register of Information (RoI) regulatory packages](https://www.servicenow.com/docs/access?context=opres-dora-roi-reg-pkg&family=zurich&ft:locale=en-US) : Generate regulator-ready Register of Information (RoI) regulatory packages using the Plain-CSV Report Package option on the download page in Digital resilience third-party registers. The resulting ZIP file, structured to regulator specifications, includes metadata and report folders with file names containing LEI, entity ID, and release version. This format helps you to verify EU DORA compliance and supports automated validation workflows. For suggested steps and permissions, refer to the user guide on the Download and Upload request page. [Validate downloaded Register of Information regulatory packages](https://www.servicenow.com/docs/access?context=opres-dora-validate-roi&family=zurich&ft:locale=en-US) : Validate downloaded Register of Information (RoI) regulatory packages against requirements using the Plain-CSV Report Package option on the Digital resilience third-party registers download page. This process verifies file format, structure, encoding, naming conventions, and field-level data across multiple tables. If validation warnings are detected, an automated report is attached, mapping issues to regulator fields like Template Code, Row Code, and Column Code. These reports include real-world field labels, rule expressions, and record identifiers. You can easily cross-reference validation errors using a downloadable Excel template that mirrors the CSV structure, simplifying issue location and resolution. Further enhancements include support for 'Not applicable' values, enforced file size limits, and clearer error messages for malformed data. [Improve resilience metrics with the enhanced CSDM model](https://www.servicenow.com/docs/access?context=using-csdm-v5&family=zurich&ft:locale=en-US) : Leverage the enhanced fix scripts in the Common Service Data Model (CSDM) to enhance your Operational Resilience metrics. Each node in the hierarchy is now stored separately, with its class and parent nodes, to help you manage your data more efficiently. The Update CSDM and other dependencies scheduled job script has been optimized to process the main node configurations in parallel, triggering a separate event for each node. Any node can be at the top level. Additionally, you can store impacted objects, including all parents, in a single table, so that you can efficiently retrieve children nodes and improve your data retrieval. Configure the sn_oper_res.top_class_name property to designate any class as the top class. You can view the downstream data and various dashboards based on the selected top class, such as the number of application services that are under a business service. [Analyze importance and impact tolerance of a service using Smart Assessment](https://www.servicenow.com/docs/access?context=create-an-assessment-for-services-in-ws&family=zurich&ft:locale=en-US) : Analyze a service's importance and impact tolerance through flexible assessments by using one or multiple Smart Assessment templates. Role-based access controls and auto-assigned tasks help you to streamline the process. You can reopen and complete assessments as needed and send email notifications to relevant users. [Generate customized and flexible self-attestation reports using Smart Assessment](https://www.servicenow.com/docs/access?context=create-new-attestation-in-ws&family=zurich&ft:locale=en-US) : Generate customized and flexible self-attestation reports by using Smart Assessment. Start with the default template, add relevant scopes and users, and generate a PDF report on completion of the self-attestation process. By creating custom templates with various data types, you make the self-attestation process more efficient. [Leverage enhanced DORA capabilities for contracts, supply chains, and assessments](https://www.servicenow.com/docs/access?context=create-drtp-reg-contract&family=zurich&ft:locale=en-US) : Use the enhanced Digital Operational Resilience Act (DORA) data model in Operational Resilience. You can configure contracts based on their supply chains and assessments, upload the contract records, and generate a detailed report in Microsoft Excel that provides information on the entities, third parties, and specific contract details. [Track third-party risk assessments](https://www.servicenow.com/docs/access?context=opres-ws-homepage-overview&family=zurich&ft:locale=en-US) : Track third-party risk assessments as red flags in Operational Resilience reports and overview pages for business services, service offerings, and business processes. Operational Resilience users, managers, and administrators can review these assessments in Operational Resilience Workspace. The sn_vdr_risk_asmt.vendor_assessment_reviewer role is now included in the sn_oper_res.user role, so that you can grant the necessary access to the assessments. | [ ] ## Changes Between your current release family and Zurich, some changes were made to existing Operational Resilience features. {#dfrn3-operationalresilience-summary__entry__18} | Release | Release notes | |-|-| | Xanadu | [Reporting Operational vulnerability](https://www.servicenow.com/docs/access?context=reporting-operational-vul&family=xanadu&ft:locale=en-US) : The Operational vulnerability related list has been added to the following modules in the List view: * Importance and impact tolerance assessment * Scenario analyses * Self attestations * Services | | Yokohama | [Business services dashboard](https://www.servicenow.com/docs/access?context=opres-ws-homepage-overview&family=yokohama&ft:locale=en-US) : The Business services dashboard has been added to display business services data. [New modules for services and processes](https://www.servicenow.com/docs/access?context=using-csdm-v5&family=yokohama&ft:locale=en-US) : The Services, Business Services, Service Offerings, and Business Processes modules have been added to the Operational Resilience Workspace. Operational Resilience managers use these modules to manage the services, business services, service offerings, and business processes used in Operational Resilience reporting. [Entity Types and Pillars modules](https://www.servicenow.com/docs/access?context=manage-entity-types-pillars-from-ws&family=yokohama&ft:locale=en-US) : The Entity Types and Pillars modules have been added to the Operational Resilience Workspace. These modules enable Operational Resilience managers to update the entity types and pillars directly from the Workspace. [Primary origin tab](https://www.servicenow.com/docs/access?context=add-impacted-area-to-vul&family=yokohama&ft:locale=en-US) : The Primary origin tab has been added to the Operational vulnerability record to identify the main source and report the upstream entities of the vulnerability. [Addition of classes to the assessment form](https://www.servicenow.com/docs/access?context=submit-an-assessment-in-ws&family=yokohama&ft:locale=en-US) : The Business Service and Offering classes have been added to the Scope tab of the assessment form, enabling you to assess the business services and service offerings alongside services. Once the assessment is complete, the importance and impact tolerance of these items are displayed in the Importance and Impact Tolerance columns on the Scope tab. [Addition of classes to the scenario analysis form](https://www.servicenow.com/docs/access?context=scenario-analysis-in-ws&family=yokohama&ft:locale=en-US) : The Business Service and Offering classes have been added to the Scope tab of the scenario analysis form, enabling you to analyze the business services and service offerings alongside services. [Addition of classes to the self-attestation form](https://www.servicenow.com/docs/access?context=self-attestation-in-ws&family=yokohama&ft:locale=en-US) : The Business Service and Offering classes have been added to the Scope tab of the self-attestation form, enabling you to self-attest the business services and service offerings alongside services. [Digital resilience incident reporting module](https://www.servicenow.com/docs/access?context=drir-module&family=yokohama&ft:locale=en-US) : The Digital resilience incident reporting module is used to report the Information and Communication Technology (ICT) related incidents to the regulators. | | Zurich | [Main node configurations: A component of the Data Relationship Framework](https://www.servicenow.com/docs/access?context=main-node-relationship-fw&family=zurich&ft:locale=en-US) : The properties, related lists, and copy functionality in the Main node configurations form are updated. [Configure the Nexus map configurations](https://www.servicenow.com/docs/access?context=configure-nexus-map-configurations&family=zurich&ft:locale=en-US) : The Nexus map configuration settings are added. [Node configurations and Node status configurations](https://www.servicenow.com/docs/access?context=configure-node-configurations&family=zurich&ft:locale=en-US) : The Node configurations and Node status configurations related lists are added. [Edge configurations and edge status configurations](https://www.servicenow.com/docs/access?context=configure-edge-configurations&family=zurich&ft:locale=en-US) : The Edge configurations and Edge status configurations related lists are added. [Interacting with the Nexus map UI from the Workspace](https://www.servicenow.com/docs/access?context=interacting-with-nexus-map-ui-from-worksapce&family=zurich&ft:locale=en-US) : The Resilience map UI action is added to display the map view for a service record. [Word reports](https://www.servicenow.com/docs/access?context=reporting-for-multiple-regulations&family=zurich&ft:locale=en-US) : The 'Template Configurations' module displays the document design template configuration details of DIR action tasks. The 'Word Templates' module provides the DIR Word templates used to generate Microsoft Word reports. [Regulation mappings related list](https://www.servicenow.com/docs/access?context=workflow-confi-auto-trigger-inci-repo-cases&family=zurich&ft:locale=en-US) : The 'Digital Resilience Incident Case Type' module displays the 'Digital Resilience Incident Case.' The Regulation Mappings related list in the record shows the relationships between entities and their corresponding regulations. [Download the Excel template](https://www.servicenow.com/docs/access?context=create-excel-upload-download-request&family=zurich&ft:locale=en-US) : The option to download the Third-party Information Register is renamed to Excel Master Template. [Action tasks configuration related list](https://www.servicenow.com/docs/access?context=work-on-action-tasks&family=zurich&ft:locale=en-US) : Action tasks configuration related list is used to set up contextual information for different regulations. This includes the assessment template, assignment group, trigger conditions, due dates, and more. [New modules and layout for Services](https://www.servicenow.com/docs/access?context=using-csdm-v5&family=zurich&ft:locale=en-US) : The Application services module is added to the list view, which enables you to configure application services.A vertical layout is added for the Services, Business services, Offerings, Business processes, and Application services modules.In the CSDM objects table, the Impacted objects column displays the parent objects, while the Impacted objects classes column shows the classes. The Red flags count column indicates the number of the red flags that are directly assigned to a node, and the Total red flags count column displays the total count of the red flags directly assigned to a node and its children. [Contracts and related tabs for DORA](https://www.servicenow.com/docs/access?context=create-drtp-reg-contract&family=zurich&ft:locale=en-US) : The related tabs for the contracts, including associated entities and third parties, are now shown in the Contract record forms. Coral theme : Coral is now the default theme for new portal, web, and mobile experiences with Next Experience or Core UI enabled. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences. | [ ] ## Removed Between your current release family and Zurich, some Operational Resilience features or functionality were removed. {#dfrn3-operationalresilience-summary__entry__26} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Deprecations Between your current release family and Zurich, some Operational Resilience features or functionality were deprecated. {#dfrn3-operationalresilience-summary__entry__34} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | The Operational Resilience application previously stored the entire dependency chain in the \[sn_oper_res_profile\] table, which resulted in redundant data and potential performance issues. The Update CSDM and other dependencies scheduled job script has been optimized to address this issue. Any node can now be at the top level. Data retrieval is more efficient because you can store the impacted objects in a single table. | [ ] ## Activation information Review information on how to activate Operational Resilience. {#dfrn3-operationalresilience-summary__entry__42} | Release | Release notes | |-|-| | Xanadu | Install Operational Resilience by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=xanadu&ft:locale=en-US). | | Yokohama | Activation information : Install Operational Resilience by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: Operational Resilience is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | Activation information : Install Operational Resilience by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=zurich&ft:locale=en-US). Important: Operational Resilience is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Operational Resilience we have noted them here. {#dfrn3-operationalresilience-summary__entry__50} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Operational Resilience we have noted them here. {#dfrn3-operationalresilience-summary__entry__58} | Release | Release notes | |-|-| | Xanadu | Business Continuity Management requires the following browsers: * Google Chrome * Firefox and Firefox Extended Support Release (ESR) * Microsoft Edge Chromium * Safari 12.0 and later versions | | Yokohama | Browser requirements : Business Continuity Management requires the following browsers: * Google Chrome * Firefox and Firefox Extended Support Release (ESR) * Microsoft Edge Chromium * Safari 12.0 and later versions | | Zurich | Browser requirements : Operational Resilience requires the following browsers: * Google Chrome * Firefox and Firefox Extended Support Release (ESR) * Microsoft Edge Chromium * Safari 12.0 and later versions | [ ] ## Accessibility information Review details on accessibility information for Operational Resilience, such as specific requirements or compliance levels. {#dfrn3-operationalresilience-summary__entry__66} | Release | Release notes | |-|-| | Xanadu | Improved screen reader and translation support by adding ARIA button labels, tooltips, and alt text to the Operational Resilience Workspace. This support provides an explanation for button actions and identifies tooltip text to be translated. | | Yokohama | No updates for this release. | | Zurich | Accessibility information : Dark theme : The new Coral theme includes a dark theme option for web and mobile experiences. This option is commonly used to alleviate eye strain and improve readability. | [ ] ## Localization information If there are specific localization considerations for Operational Resilience we have noted them here. {#dfrn3-operationalresilience-summary__entry__74} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Operational Resilience we have noted them here. {#dfrn3-operationalresilience-summary__entry__82} | Release | Release notes | |-|-| | Xanadu | * Monitor business service resiliency from start to finish, with a focus on operational risk and compliance. * Identify and report operational vulnerabilities from Employee Center or Operational Resilience Workspace. Address these vulnerabilities through procedures such as reporting, assessing impact, evaluating criticality, managing issues, and planning treatments. * Use the Digital resilience third-party registers application to establish, update, and manage contractual arrangements between the financial entities and Information and Communication Technology (ICT) service providers. * Export the records for regulators and auditors in Microsoft Excel format by using the Microsoft Excel upload capability in Digital resilience third-party registers. Similarly, you can import the records from external sources by using the Microsoft Excel download functionality. See [Managing Operational vulnerability](https://www.servicenow.com/docs/access?context=operational-vulnerability&family=xanadu&ft:locale=en-US) and [Maintaining Digital resilience third-party registers](https://www.servicenow.com/docs/access?context=digi-resi-third-party-registers&family=xanadu&ft:locale=en-US) for more information. | | Yokohama | * Align with the CSDM model to set up configurable main node configurations, which are used to retrieve CSDM and their dependency data. * Add the primary origin to an operational vulnerability, and the impacted areas are automatically included. The vulnerability can then be viewed from any impacted area. * All CSDM objects, dependencies, and their red flags can be rolled up based on the entity hierarchy. * Use Smart Assessment for evaluating an Operational vulnerability. See [Operational Resilience](https://www.servicenow.com/docs/access?context=grc-opres-landing-page&family=yokohama&ft:locale=en-US) for more information. | | Zurich | * Set up the nexus map configurations and use the interactive node map view to define dependencies and relationships between records. * Generate a Microsoft Word document for the action tasks in Digital resilience incident reporting. * Create DIR cases for multiple regulations from either an incident or a security incident report. You can map entities to regulations and configure the Smart Assessment Engine (SAE) template for each regulation within the regulatory agency profile. * Generate and validate regulator-ready Register of Information (RoI) packages for EU DORA compliance. * Use the enhanced fix scripts in the Common Service Data Model for improved Operational Resilience metrics. * Evaluate the importance and impact tolerance of services and self-attest their status by using Smart Assessment. See [Operational Resilience](https://www.servicenow.com/docs/access?context=grc-opres-landing-page&family=zurich&ft:locale=en-US) for more information. | [ ]