Advanced Risk release notes
Summarize
Summarized using AI
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.
Summary of Advanced Risk release notes
The ServiceNow® Advanced Risk application helps organizations identify, analyze, evaluate, treat, and monitor risks that could impact business objectives. The Zurich release enhances the application with AI-driven features, improved reporting, and usability enhancements designed to streamline risk management and decision-making.
Show less
Key Features
- Now Assist AI Skills Activation: Some AI skills, agents, and workflows are automatically enabled by default for new installations and certain upgrades, making AI capabilities readily available to users with appropriate roles without additional configuration.
- Risk Suggestion AI Agent: Enables Workspace users with the proper role to automatically discover and verify potential risks related to an entity, facilitating early risk identification and compliance preparation.
- Risk Assessment Methodology (RAM) Reporting Views: Automatically generated views consolidate all assessments under a RAM, including factor responses, scores, issues, and risks, simplifying review and custom report creation.
- Generative AI Risk Event Summaries: Uses Now Assist and third-party large language models (LLMs) like Anthropic Claude, Google Gemini, and OpenAI to generate clear, consistent risk event summaries, saving time and aiding faster decision-making.
- Grid-based Risk and Control Self Assessment (RCSA): Offers a spreadsheet-style layout for side-by-side risk and control assessment, enabling bulk edits, prioritization, and faster completion of assessments.
- Risk Workspace Matrix Report: Provides a centralized, configurable grid view to analyze organizational risk posture using entity-related data, reducing the need to switch between views.
- UI Enhancements: Renaming of the “Downstream risks” related list to “Risks” and the “Summary” section to “Impacts” or “Impacts and approvals” improves clarity and consistency across interfaces.
Changes and Removed Features
- AI assets that were never configured but available in the system are now activated automatically during upgrades from Zurich Patch 4 onward.
- The Tasks widget was removed from the Risk Workspace home page to enhance load performance and reduce latency.
Activation and Accessibility
- Advanced Risk is available via the ServiceNow Store and must be requested for installation.
- The Risk Heatmap component now supports content reflow and zooming up to 400%, improving accessibility for users with low vision by adapting page layouts responsively.
Integration with Related ServiceNow Applications
- GRC Risk Management: Use alongside Advanced Risk to identify and monitor high-impact risks, improve risk-based decisions, and reduce reaction time.
- GRC Risk Workspace: Provides a simplified, single-pane user experience for all risk-related activities when combined with Advanced Risk.
The ServiceNow® Advanced Risk application enables you to identify, analyze, evaluate, treat, and monitor risks that could impact your organization in achieving its business objectives. Advanced Risk was enhanced and updated in the Zurich release.
Advanced Risk highlights for the Zurich release
- Some Now Assist skills, agents, and agentic workflows are turned on by default
- The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be
needed to use the skill. The new default behavior works as follows:
- New customers: When you install a Now Assist product, designated skills and agentic workflows are turned on automatically.
- Existing customers who are upgrading (starting with Zurich Patch 4): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive.
- Use the Risk Suggestion AI Agent to discover potential risks for an entity, giving risk managers better insights for informed decision-making.
- Use the risk reporting view to view all assessments under a specific Risk Assessment Methodology (RAM), including factor responses, scores, issues, and risks.
- Use generative AI to generate risk event summary to quickly understand the risk event key details for faster decisions.
- Assess multiple risks and controls side-by-side, make bulk edits, and prioritize entries efficiently using the spreadsheet-style layout.
- Use matrix report in the Risk Workspace to assess and analyze the risk posture of your organization.
- Use large language models (LLMs) from the third party providers to generate the risk assessment summary.
See Advanced Risk Assessment for more information.
Important:
Advanced Risk is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.
New in the Zurich release
- Identify risks for an entity
- If you’re a Workspace user with the sn_grc_sharegenai.risk_suggestion_aiagent_user role, you can use the Risk Suggestion AI Agent to identify risks related to an entity. The AI agent analyzes the entity and suggests relevant risks from various sources, consolidating them into a reviewable list to verify for accuracy. Risk managers can then confirm and promote these risks to the risk register for further assessment. This feature automates risk discovery, helping identify potential risks and prepare for compliance requirements.
- Reporting views from Risk Assessment Methodology
- The reporting view provides an overview of all assessments under a specific Risk Assessment Methodology (RAM). It consolidates assessment data such as factor responses, scores, issues, controls, and associated risks into a
single structure. When a RAM is published, the system automatically creates this view, which you can use to review assessments and build custom reports. It simplifies report and dashboard creation for risk
assessments.Note:Automatic creation of Reporting views is not supported on Xanadu. For instructions on creating them manually, refer to KB2547071
- Risk event summarization
- Generate risk event summary using the Now Assist for IRM application. Risk event summarisation is a Generative AI driven capability that generates clear and consistent summaries automatically. It reduces the need for manual effort, helps risk managers save time, and enables approvers to quickly understand the key details for faster decisions. Check your entitlements to confirm whether you have access to risk event summarization.
- Grid based risk and control assessment
- Gain efficient control over risk assessments with the new grid-based Risk and Control Self Assessment (RCSA). Quickly compare, edit, and prioritize risks and controls using the flexible, spreadsheet-style interface. Use side-by-side views and bulk editing to complete assessments faster.
- Matrix report in Risk Workspace
- Access and analyze the risk posture of your organization using entity-related data, such as risks, controls, KRIs, and events in a centralized, configurable grid-based view. This feature reduces time spent switching views and helps risk managers assess data more easily, leading to more proactive and streamlined risk management.
- Support third party large language models
- Risk assessment summarization and Risk event summarization support the LLMs from the third party providers, such as Anthropic Claude, Google Gemini, and OpenAI, in addition to Now LLM. This enhancement gives you greater flexibility to choose the model that best fits your organization’s needs for generating risk assessment and risk event summaries.
UI changes
- Downstream risks related list
- The Downstream risks related list on the entity record page has been renamed Risks.
- Summary section
- In the classic UI, the Summary section on the risk event record has been renamed Impacts.
Changed in this release
- Some Now Assist skills, agents, and agentic workflows are turned on by default
- The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be
needed to use the skill. The new default behavior works as follows:
- New customers: When you install a Now Assist product, designated skills and agentic workflows are turned on automatically.
- Existing customers who are upgrading (starting with Zurich Patch 4): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive.
Removed in this release
To enhance the Risk Workspace home page load performance and reduce latency, the Tasks widget has been removed from the home page.
Activation information
Install Advanced Risk by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
Accessibility information
- Reflow for Risk heatmap
-
The Risk Heatmap component was updated to support reflow, which enables pages and content to be zoomed up to 400% through your browser settings without loss of content or functionality. Additionally, content can be enlarged without scrolling in two dimensions at a width equivalent to 320 CSS pixels or a height equivalent to 256 CSS pixels. Page layouts are transformed into a vertical, stacked view automatically when users increase browser zoom to 400%.
This enhancement helps users with low vision or who have trouble seeing web content in a browser due to monitor size, device type, poor lighting, or other situations.