Exploring ServiceNow Otto for Integrated Risk Management (IRM)

  • Release version: Zurich
  • Updated July 31, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Exploring ServiceNow Otto for Integrated Risk Management (IRM)

    ServiceNow Otto for Integrated Risk Management (IRM) leverages generative AI to enhance IRM processes by automating and accelerating key tasks such as issue summarization, risk identification, control reviews, and policy exception handling. These AI-powered capabilities are embedded directly within IRM records, enabling smoother workflows and more efficient management of issues, risks, controls, and regulatory compliance activities.

    Show full answer Show less

    The application supports agentic workflows and AI-driven skills focused specifically on IRM, with access provided through Now Assist for IRM based on entitlements.

    Key Features

    • Agentic Workflows: AI agents can generate action plans and remediation tasks for Governance, Risk, and Compliance (GRC) issues, and automate updates to control objectives when regulations change.
    • Generative AI Skills:
      • Issue Summarization: Automatically produces concise summaries of issue records to improve coordination and efficiency.
      • Control Objective Rationalization: Identifies and removes redundant control objectives to streamline compliance management.
      • Risk Assessment Summarization: Generates summaries of risk assessments highlighting inherent, residual, and target risks along with control effectiveness.
      • Regulatory Alert Summarization and Recommendation: Distills regulatory changes into actionable summaries and recommends relevant citations, controls, and policies impacted.
      • Control Objective Impact Analyzer: Evaluates citation updates to identify control objectives requiring attention, working in tandem with the Control Objective Change Agent to maintain regulatory alignment.

    Benefits for ServiceNow Customers

    • Simplifies routine IRM tasks by embedding AI assistance directly into records, reducing manual effort.
    • Delivers quick, actionable insights into risk and compliance data without extensive manual review.
    • Enables early identification of potential risks through pattern analysis of existing data.
    • Improves decision-making by providing AI-generated recommendations and summaries within user workflows.

    Next Steps for Implementation

    ServiceNow customers can enhance their IRM capabilities by configuring and activating Now Assist for IRM skills and agentic workflows. Key actions include:

    • Activating and customizing AI skills such as issue summarization and regulatory alert handling.
    • Utilizing agentic workflows to automate issue resolution and control objective updates.
    • Exploring detailed guides on configuring and using ServiceNow Otto for IRM to tailor the AI assistance to organizational needs.

    With the ServiceNow Otto for Integrated Risk Management (IRM) application, you can use generative AI to support key Integrated Risk Management (IRM) tasks such as summarizing issues, identifying risks, and reviewing controls. These capabilities are integrated into IRM records and help streamline how you work with issues, risks, controls, policy exceptions, and more.

    ServiceNow Otto for IRM overview

    ServiceNow Otto for IRM enables you to use AI-driven skills and agentic workflows focused on Integrated Risk Management. Now Assist for IRM is available based on entitlements.

    ServiceNow Otto for IRM benefits

    ServiceNow Otto for IRM offers the following benefits

    • Simplify and speed up routine IRM tasks with AI-powered assistance embedded in your records.
    • Gain quick insights into IRM data without manually parsing through detailed documentation.
    • Identify potential risks early by analyzing patterns in existing data.
    • Improve decision-making with AI-generated insights available directly in your workflows.

    ServiceNow Otto for IRM workflows/skills

    Table 1. Agentic workflows
    Workflow Feature User role
    Using agentic workflows in ServiceNow Otto for Integrated Risk Management (IRM) agentic workflow Leverage the power of AI agents to generate an action plan and suggest remediation tasks for a GRC issue.
    • sn_grc_genai.issue_user
    • sn_irm_gen_ai.user
    • sn_grc_genai.issue_aiagent_user
    • sn_grc_comp_genai.reg_change_ai_user
    Control Objective Change Agent Automates updates to impacted control objectives when citation changes occur, ensuring descriptions and supplemental guidance remain accurate and aligned with evolving regulatory requirements. sn_irm_gen_ai.user
    Table 2. Generative AI skills
    Skill Feature User role
    Issue Summarization skill

    Analyze issue records using generative AI to generate concise summaries, improving organizational efficiency, team coordination, and productivity.
    • sn_grc_genai.issue_user
    • sn_irm_gen_ai.user
    AI-generated recommendations for similar control objectives Control objective rationalization streamlines risk and compliance management by eliminating redundant or overlapping control objectives, improving efficiency while ensuring compliance.
    • sn_irm_gen_ai.user
    • sn_comp_case.compliance_​case_analyst
    • sn_comp_case.compliance_​case_manager
    Risk Assessment Summarization Use Now LLM Service to generate risk assessment summaries from inherent, residual, target risks, and control effectiveness data. These summaries highlight key factors and relevant comments, helping assessors and approvers gain actionable insights.
    • sn_grc_sharegenai.risk_asmt_user
    • sn_risk_advanced.ara_assessor
    • sn_risk_advanced.ara_approver
    • sn_irm_gen_ai.user
    Regulatory Alert Summarization skill

    Leverage Now LLM Service to distill regulatory information into concise, business-relevant summaries that highlight most important changes, deadlines, and actions required for compliance in real-time.
    • sn_grc_reg_change.user
    • sn_grc_comp_genai.reg_change_ai_user
    Regulatory alert recommendation skills Use these skills to identify relevant citations, control objectives, controls, and policies linked to incoming regulatory changes. They streamline the compliance process and reduce manual effort by automatically analyzing regulatory alerts and recommending the most applicable impacted areas for your organization.
    • sn_grc_reg_change.user
    • sn_grc_comp_genai.reg_change_ai_user
    Control Objective Impact Analyzer Evaluates citation updates and identifies which associated control objectives require attention. Displays impacted objectives and works with the Control Objective Change Agent for further updates. sn_irm_gen_ai.user

    What to explore next

    To learn more about configuring and using ServiceNow Otto for IRM, see: