--- sourceDocument: zurich Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/delta-yokohama-zurich Release : - zurich ft:locale : - en-US ft:publication_title : - zurich Combined Product Files ft:clusterId : - delta3zy bundleId : - delta3zy --- # Combined Advanced Risk release notes for upgrades from Yokohama to Zurich # Combined Advanced Risk release notes for upgrades from Yokohama to Zurich {#ariaid-title1} Release version: Zurich Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 10 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Advanced Risk Release Notes for Upgrades from Yokohama to Zurich This consolidated release notes page provides all key information for ServiceNow customers upgrading Advanced Risk from the Yokohama release family to Zurich. It summarizes new features, changes, deprecations, and important upgrade considerations to help you prepare and optimize your risk management processes with the latest capabilities. Show full answer Show less ## New Features * **Generative AI Risk Assessment Summarization:** Automatically generate insightful risk assessment summaries highlighting key inherent, residual, and target risks plus control effectiveness data to aid approvers in faster decision-making. This feature uses ServiceNow Otto for IRM and supports third-party large language models (Anthropic Claude, Google Gemini, OpenAI) for flexibility. * **Risk Assessment Project Reassessment and Response Copying:** Reassess completed projects by automatically carrying over prior risks and responses to reflect new insights or conditions, reducing manual effort and ensuring consistency. * **Risk Removal During Assessment:** Assessors can remove scoped risks (marked as not applicable) or delete ad hoc risks during risk assessment projects to streamline focus. * **Risk Response Task Workflow Management:** Enable and manage workflows for creating, editing, linking, and deleting risk response tasks directly from the Risk Assessment Methodology (RAM) form. * **Bulk Assessor Reassignment:** Reassign assessors for multiple in-progress risk assessment projects simultaneously to minimize disruptions during stakeholder transitions. * **Configurable Risk Color Styles for Next Experience:** Customize and preview risk colors and variants through a user-friendly system rather than manual hex codes, improving theming and accessibility. * **Risk Suggestion AI Agent:** Workspace users with the appropriate role can use AI to identify and suggest entity-related risks consolidated from multiple sources for review and promotion to the risk register. * **Risk Assessment Methodology Reporting Views:** Automatically generated views consolidate all assessment data under a RAM, simplifying reporting and dashboard creation (note: manual creation required on Xanadu). * **Risk Event Summarization:** AI-driven generation of clear, consistent summaries of risk events to save time and accelerate approval processes. * **Grid-Based Risk and Control Self Assessment (RCSA):** Spreadsheet-style interface for side-by-side risk and control assessment, allowing quick comparison, bulk editing, and prioritization. * **Matrix Report in Risk Workspace:** Centralized, configurable grid view to analyze organizational risk posture across entities, risks, controls, KRIs, and events. ## Changes * Some Now Assist skills, AI agents, and agentic workflows are now turned on by default for appropriate role users, enhancing out-of-the-box AI capabilities without impacting existing role assignments. * The downstream risks related list on entity pages has been renamed to "Risks." * Summary sections in classic UI and Risk Workspace renamed from "Summary" to "Impacts" or "Impacts and approvals" to better reflect content. * Now Assist usage measurement model changed to a 365-day burn-down model resetting at contract anniversary. ## Removals and Deprecations * The Tasks widget was removed from the Risk Workspace home page to improve load performance and reduce latency. * No other Advanced Risk features or functionalities were removed or deprecated between Yokohama and Zurich. ## Upgrade Considerations * Before upgrading, review and complete recommended pre- and post-upgrade tasks to ensure a smooth transition. * Advanced Risk installation requires requesting the product from the ServiceNow Store. ## Accessibility and Usability Improvements * The Risk Heatmap component now supports browser zoom up to 400% with reflow, stacking page layouts vertically to aid users with low vision or other accessibility needs. ## Practical Benefits for ServiceNow Customers * Leverage AI-powered automation to reduce manual effort and enhance accuracy in risk assessments and event summaries. * Improve risk assessment efficiency through reassessment capabilities, bulk edits, and streamlined workflows. * Gain flexible reporting and visualization tools like RAM reporting views, matrix reports, and grid-based assessments for deeper insights. * Enhance user experience and accessibility with configurable color theming and improved heatmap zoom support. * Adapt quickly to organizational changes with bulk reassignment of assessors and management of risk response workflows. Consolidated page of all release notes for Advanced Risk from Yokohama to Zurich. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Advanced Risk release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Yokohama to Zurich. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Advanced Risk to Zurich Before you upgrade to Zurich, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-advancedrisk-summary__entry__2} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## New features Between your current release family and Zurich, new features were introduced for Advanced Risk. {#dfrn3-advancedrisk-summary__entry__8} | Release | Release notes | |-|-| | Yokohama | [Generative AI risk assessment summarization](https://www.servicenow.com/docs/access?context=generate-risk-assessment-summary-genai&family=yokohama&ft:locale=en-US) : Generate a risk assessment summary from your inherent, residual, target risks, and control effectiveness data using the ServiceNow Otto for IRM application. The summary highlights key insights to help your approvers quickly understand the context before approving the risk assessments. You can also analyze details such as open issues, risk response tasks, action items, and calculated risk scores to support your approval decision. Check your entitlements to confirm whether you have access to risk assessment summarization. [Reassess a risk assessment project](https://www.servicenow.com/docs/access?context=reassess-risk-assessment-project&family=yokohama&ft:locale=en-US) : Review completed risk assessment projects to reflect new insights or changing conditions. All previously assessed risks in this project are automatically carried over and reassigned to the designated assessor. Confirm continuity, minimize manual effort, and enhance efficiency in your risk management process. [Copy risk responses from the previous assessment](https://www.servicenow.com/docs/access?context=perform-assessment-on-risk-assessment-project&family=yokohama&ft:locale=en-US) : Copy responses from a previous risk assessment during the reassessment of a risk assessment project to streamline the assessment process. All prior responses are automatically copied, saving time and maintaining consistency. [Remove risks from assessment](https://www.servicenow.com/docs/access?context=perform-assessment-on-risk-assessment-project&family=yokohama&ft:locale=en-US) : As a risk assessor, you can remove risks from the risk assessment project while performing the assessment, which also removes all responses associated with that risk. Removed scoped risks remain part of the project but are marked as not applicable for reporting purposes. However, removed ad hoc risks are completely deleted. [Manage risk response task workflow](https://www.servicenow.com/docs/access?context=configure-ram&family=yokohama&ft:locale=en-US) : Manage and enable the risk response task workflow from the RAM form to enable users to create, delete, remove, edit, and link risk response tasks within an assessment. [Reassign assessor for a risk assessment project](https://www.servicenow.com/docs/access?context=reassign-assessor-for-risk-assessment-project&family=yokohama&ft:locale=en-US) : Reassign assessors for multiple in-progress risk assessment projects simultaneously to minimize disruptions during stakeholder transitions. [Configure risk color styles for the Next Experience](https://www.servicenow.com/docs/access?context=create-risk-color-style&family=yokohama&ft:locale=en-US) : Define and preview colors for the risk and advanced risk components in the Next Experience through a configurable system rather than having to use hex codes. The transition has been made from a hex code color management system to a configurable system that supports the highlighted value component colors. This feature addresses theming and accessibility issues. You can define the color and variant, and preview them using the Next Experience color styles tab on the Risk color style form. Note: The default color for the customized risk color style is set to Critical, with the variant set to Primary. You can manually change the color and variant based on the requirement. | | Zurich | [Identify risks for an entity](https://www.servicenow.com/docs/access?context=suggest-potential-risks-workflow&family=zurich&ft:locale=en-US) : If you're a Workspace user with the sn_grc_sharegenai.risk_suggestion_aiagent_user role, you can use the Risk Suggestion AI Agent to identify risks related to an entity. The AI agent analyzes the entity and suggests relevant risks from various sources, consolidating them into a reviewable list to verify for accuracy. Risk managers can then confirm and promote these risks to the risk register for further assessment. This feature automates risk discovery, helping identify potential risks and prepare for compliance requirements. [Reporting views from Risk Assessment Methodology](https://www.servicenow.com/docs/access?context=reporting-views-from-ram&family=zurich&ft:locale=en-US) : The reporting view provides an overview of all assessments under a specific Risk Assessment Methodology (RAM). It consolidates assessment data such as factor responses, scores, issues, controls, and associated risks into a single structure. When a RAM is published, the system automatically creates this view, which you can use to review assessments and build custom reports. It simplifies report and dashboard creation for risk assessments. Note: Automatic creation of Reporting views is not supported on Xanadu. For instructions on creating them manually, refer to [KB2547071](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2547071) [Risk event summarization](https://www.servicenow.com/docs/access?context=generate-risk-event-summary-in-the-risk-workspace&family=zurich&ft:locale=en-US) : Generate risk event summary using the ServiceNow Otto for IRM application. Risk event summarisation is a Generative AI driven capability that generates clear and consistent summaries automatically. It reduces the need for manual effort, helps risk managers save time, and enables approvers to quickly understand the key details for faster decisions. Check your entitlements to confirm whether you have access to risk event summarization. [Grid based risk and control assessment](https://www.servicenow.com/docs/access?context=perform-assessment-risk-assessment-project-grid-view&family=zurich&ft:locale=en-US) : Gain efficient control over risk assessments with the new grid-based Risk and Control Self Assessment (RCSA). Quickly compare, edit, and prioritize risks and controls using the flexible, spreadsheet-style interface. Use side-by-side views and bulk editing to complete assessments faster. [Matrix report in Risk Workspace](https://www.servicenow.com/docs/access?context=matrix-report-in-risk-workspace&family=zurich&ft:locale=en-US) : Access and analyze the risk posture of your organization using entity-related data, such as risks, controls, KRIs, and events in a centralized, configurable grid-based view. This feature reduces time spent switching views and helps risk managers assess data more easily, leading to more proactive and streamlined risk management. [Support third party large language models](https://www.servicenow.com/docs/access?context=generate-risk-assessment-summary-genai&family=zurich&ft:locale=en-US) : Risk assessment summarization and Risk event summarization support the LLMs from the third party providers, such as Anthropic Claude, Google Gemini, and OpenAI, in addition to Now LLM. This enhancement gives you greater flexibility to choose the model that best fits your organization's needs for generating risk assessment and risk event summaries. | [ ] ## Changes Between your current release family and Zurich, some changes were made to existing Advanced Risk features. {#dfrn3-advancedrisk-summary__entry__14} | Release | Release notes | |-|-| | Yokohama | [Some Now Assist skills are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=yokohama&ft:locale=en-US) : The new default behavior works as follows: * New customers: When you install a Now Assist product, designated skills are turned on automatically. * Existing customers who are upgrading (starting with Yokohama Patch 11): Any previously unconfigured skill is turned on automatically (the skill was never configured and turned on, then turned off again). Previously configured skills that were turned on, then off, remain inactive. [Changes to Now Assist usage measurement](https://www.servicenow.com/docs/access?context=monitoring-now-assist-usage&family=yokohama&ft:locale=en-US) : Starting with Yokohama Patch 5, Now Assist usage measurement is transitioning from a 365-day look-back model to a 365-day burn-down model, with usage resetting at the contract anniversary date. For more information, refer to [KB KB2704710: Now Assist Usage - Overview \& New Measurement Logic](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2704710). | | Zurich | [Downstream risks related list](https://www.servicenow.com/docs/access?context=entities-in-risk-ws&family=zurich&ft:locale=en-US) : The Downstream risks related list on the entity record page has been renamed Risks. Summary section : In the classic UI, the Summary section on the risk event record has been renamed Impacts.In the Risk Workspace, the Summary section on the risk event overview page has been renamed Impacts and approvals. [Some generative AI skills, AI agents, and agentic workflows are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=zurich&ft:locale=en-US) : The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be needed to use the skill. The new default behavior works as follows: * New customers: When you install an AI product, designated skills and agentic workflows are turned on automatically. * Existing customers who are upgrading (starting with Australia Early Access): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive. | [ ] ## Removed Between your current release family and Zurich, some Advanced Risk features or functionality were removed. {#dfrn3-advancedrisk-summary__entry__20} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Deprecations Between your current release family and Zurich, some Advanced Risk features or functionality were deprecated. {#dfrn3-advancedrisk-summary__entry__26} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | To enhance the Risk Workspace home page load performance and reduce latency, the Tasks widget has been removed from the home page. | [ ] ## Activation information Review information on how to activate Advanced Risk. {#dfrn3-advancedrisk-summary__entry__32} | Release | Release notes | |-|-| | Yokohama | Activation information : Install Advanced Risk by requesting it from the ServiceNow Store. Important: Advanced Risk is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Zurich | Activation information : Install Advanced Risk by requesting it from the ServiceNow Store. Important: Advanced Risk is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Advanced Risk we have noted them here. {#dfrn3-advancedrisk-summary__entry__38} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Advanced Risk we have noted them here. {#dfrn3-advancedrisk-summary__entry__44} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for Advanced Risk, such as specific requirements or compliance levels. {#dfrn3-advancedrisk-summary__entry__50} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | Accessibility information : Reflow for Risk heatmap : The Risk Heatmap component was updated to support reflow, which enables pages and content to be zoomed up to 400% through your browser settings without loss of content or functionality. Additionally, content can be enlarged without scrolling in two dimensions at a width equivalent to 320 CSS pixels or a height equivalent to 256 CSS pixels. Page layouts are transformed into a vertical, stacked view automatically when users increase browser zoom to 400%. This enhancement helps users with low vision or who have trouble seeing web content in a browser due to monitor size, device type, poor lighting, or other situations. | [ ] ## Localization information If there are specific localization considerations for Advanced Risk we have noted them here. {#dfrn3-advancedrisk-summary__entry__56} | Release | Release notes | |-|-| | Yokohama | No updates for this release. | | Zurich | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Advanced Risk we have noted them here. {#dfrn3-advancedrisk-summary__entry__62} | Release | Release notes | |-|-| | Yokohama | [Some Now Assist skills, agents, and agentic workflows are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=yokohama&ft:locale=en-US) : The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be needed to use the skill. The new default behavior works as follows: * New customers: When you install a Now Assist product, designated skills and agentic workflows are turned on automatically. * Existing customers who are upgrading (starting with Yokohama Patch 11): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive. * Use generative AI to generate risk assessment summaries and highlight key insights for better context. * Reassess completed risk assessment projects to evaluate risks based on new insights or changing conditions. * Copy risk responses from a previous risk assessment during reassessment of a risk assessment project. * Reassign assessors for multiple risk assessment projects to optimize resource allocation. * Remove risks from a risk assessment project during the assessment to streamline focus on relevant risks. * Enable and manage the risk response task workflow from the Risk Assessment Methodology (RAM) form. See [Advanced Risk Assessment](https://www.servicenow.com/docs/access?context=advanced-risk-assessment&family=yokohama&ft:locale=en-US) for more information. | | Zurich | [Some generative AI skills, AI agents, and agentic workflows are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=zurich&ft:locale=en-US) : The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be needed to use the skill. The new default behavior works as follows: * New customers: When you install an AI product, designated skills and agentic workflows are turned on automatically. * Existing customers who are upgrading (starting with Australia Early Access): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive. * Use the Risk Suggestion AI Agent to discover potential risks for an entity, giving risk managers better insights for informed decision-making. * Use the risk reporting view to view all assessments under a specific Risk Assessment Methodology (RAM), including factor responses, scores, issues, and risks. * Use generative AI to generate risk event summary to quickly understand the risk event key details for faster decisions. * Assess multiple risks and controls side-by-side, make bulk edits, and prioritize entries efficiently using the spreadsheet-style layout. * Use matrix report in the Risk Workspace to assess and analyze the risk posture of your organization. * Use large language models (LLMs) from the third party providers to generate the risk assessment summary. See [Advanced Risk Assessment](https://www.servicenow.com/docs/access?context=advanced-risk-assessment&family=zurich&ft:locale=en-US) for more information. | [ ]