Now Assist for Integrated Risk Management (IRM)
Summarize
Summarized using AI
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.
Summary of Now Assist for Integrated Risk Management (IRM) – Zurich Release
The ServiceNow Now Assist for Integrated Risk Management (IRM) application integrates generative AI capabilities to enhance Governance, Risk, and Compliance (GRC) processes. The Zurich release introduces significant enhancements, including AI-driven recommendations, agentic workflows, and automated risk identification, aimed at improving regulatory alert management, policy and control impact analysis, and risk discovery. These features help risk and compliance managers make faster, more informed decisions by automating routine tasks and enriching contextual insights.
Show less
Key Features
- AI-Driven Regulatory Alert Analysis: Users with appropriate roles can generate AI recommendations to identify impacted policies and controls associated with regulatory alerts. This automates the linking of alerts to relevant compliance elements, reducing manual effort.
- Agentic Workflows for Regulatory Insights: The Get Regulatory Analysis workflow enriches regulatory alerts by summarizing them and recommending impacted citations, policies, and controls using external context. The Generate Regulatory Action Plan workflow converts these insights into structured compliance tasks with clear ownership and timelines.
- Control Objectives Rationalization Enhancements: The rationalization process for control objectives is streamlined into a two-step AI-assisted workflow that identifies duplicates and finalizes common objectives, with improved UI and collaboration features like commenting and justifications.
- Risk Suggestion AI Agent: Available to Workspace users, this agent automatically discovers potential risks related to entities by analyzing multiple sources and consolidating them for risk manager review, helping prepare for compliance needs.
- Report a GRC Issue AI Agent: Accessible via the Employee Center, this conversational AI guides employees to report GRC issues effectively by structuring input and recommending relevant controls, entities, and policies.
- Default Activation and Role Configuration: As of Zurich Patch 4, many Now Assist skills, agents, and workflows are activated by default for new installations and unconfigured upgrades. Proper role assignments and security configurations are required to enable access and execution of AI agents and workflows.
- Usage Measurement Update: Starting with Zurich Patch 5, Now Assist usage tracking transitions to a 365-day burn-down model resetting on the contract anniversary, providing more accurate consumption data.
Practical Benefits for ServiceNow Customers
- Streamlined Compliance Management: Automate the identification of impacted policies and controls related to regulatory alerts, reducing manual review time and improving accuracy.
- Actionable Regulatory Insights: Transform regulatory changes into structured, actionable plans with clear responsibilities, enabling efficient regulatory change implementation.
- Improved Risk Identification: Discover and validate risks more quickly, supporting proactive risk management and compliance readiness.
- Enhanced User Experience: Employees can report GRC issues intuitively through conversational AI, ensuring well-defined and context-rich submissions.
- Seamless AI Integration: Default activation of AI skills and workflows simplifies deployment, though customers must configure roles and security settings to control user access.
Activation and Related Resources
Now Assist for IRM is available for installation via the ServiceNow Store. After installation, all Now Assist skills and agentic workflows for IRM are activated by default to help customers quickly realize AI-driven benefits. Customers should configure appropriate roles to enable AI agents and workflows securely. Additional related Now Assist applications and administrative consoles provide tools to manage, configure, and monitor these AI capabilities effectively within the ServiceNow ecosystem.
The ServiceNow® Now Assist for Integrated Risk Management (IRM) application brings generative AI to Governance, Risk, and Compliance. Now Assist for Integrated Risk Management (IRM) was enhanced and updated in the Zurich release.
Now Assist for Integrated Risk Management (IRM) highlights for the Zurich release
Zurich Patch 5
- Review changes to Now Assist usage measurement.
Zurich Patch 4
- Some Now Assist skills, agents, and agentic workflows are now turned on by default.
- Use AI-generated recommendations to identify which policies are impacted by a regulatory alert.
- Use the get regulatory analysis agentic workflow to enrich regulatory alerts with external context, classification, summarization, and recommended impacted items. Start by selecting Get analysis from the Ask Now Assist action menu on the regulatory alert page or Get Regulatory Analysis from the Now Assist panel.
- Use the generate regulatory action plan agentic workflow to turn regulatory insights into actionable compliance strategies with structured tasks, clear ownership, and timelines. Start by selecting Generate action plan from the Ask Now Assist action menu on the regulatory alert page or Generate Regulatory Action Plan from the Now Assist panel.
- Use the Risk Suggestion AI Agent to discover potential risks for an entity, giving risk managers better insights for informed decision-making.
- Use the report a GRC issue AI agent in the Employee Center to report issues through a guided conversational experience.
- Additional role configuration is required for agentic workflows and AI agents included with Now Assist applications.
Zurich Patch 1:
- Use AI-generated recommendations to identify which controls are impacted by a regulatory alert.
See Now Assist for Integrated Risk Management (IRM) for more information.
Important:
Now Assist for Integrated Risk Management (IRM) is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.
New in the Zurich release
- Zurich Patch 4
- Recommend policies for a regulatory alert
- If you’re a RCM User [sn_grc_reg_change.user] and have the Regulatory change AI user [sn_grc_comp_genai.reg_change_ai_user] role, you can generate AI-driven recommendations to help identify and mark relevant policies as impacted during regulatory alert reviews. These recommendations assist in associating policy impacts with alerts. You can accept suggested policy impacts to create action tasks immediately or dismiss recommendations to filter out irrelevant information.
- Citation impact analysis and updates with Now Assist for IRM
- When a citation’s description or supplemental guidance is updated, Control Objective Impact Analyzer skill identifies related control objectives that might be affected. The AI agent, ControlObjective Change Agent, then reviews these control objectives to determine whether the descriptions or guidance need changes and provides suggested updates. Users can review, provide feedback, and approve these updates directly in the Now Assist panel, ensuring that citation changes are reflected in associated control objectives.
- Enhancements to control objectives rationalization process
- The following enhancements have been introduced to the generative AI rationalization process of control objectives:
- Rationalization process is now automatically created when selecting the Rationalize button in the control objective page.
- The recommendation workflow has been simplified into a two-step process: Step 1 identifies duplicates by accepting or dismissing recommendations; Step 2 finalizes by retaining one recommendation or creating a new common control objective.
- Approvals for the rationalization process are skipped for owners who are reviewers, and levels where all reviewers are owners are automatically approved.
- Owners and approvers can add comments and justifications directly on recommendation cards and reply to existing comments.
- The user interface has been updated with better navigation, quick summaries, visual improvements, and clear error messages.
- Get regulatory analysis agentic workflow
- If you’re a RCM User [sn_grc_reg_change.user] and have the [sn_grc_comp_genai.reg_change_ai_agent_user] role, you can analyze and enrich regulatory alerts by using the get regulatory analysis agentic workflow in the Now Assist panel. This agentic workflow uses web search to enhance alert context, summarizes the alert, and recommends potential impacts on citations, policies, and control objectives to support fast and accurate compliance decisions. You can get started by selecting Get analysis from the Ask Now Assist action menu on the regulatory alert page or by selecting Get Regulatory Analysis from the Now Assist panel.
- Generate regulatory action plans agentic workflow
- If you’re a RCM User [sn_grc_reg_change.user] and have the sn_grc_comp_genai.reg_change_ai_agent_user role, you can generate a regulatory action plans by using the generate regulatory action plans agentic workflow in the Now Assist panel. This agentic workflow analyzes impacted areas and similar historical alerts to create change tasks and action tasks that help implement regulatory change. You can get started by selecting Generate action plan from the Ask Now Assist action menu on the regulatory alert page or by selecting Generate Regulatory Action Plan from the Now Assist panel.
- Identify risks for an entity
-
If you’re a Workspace user with the sn_grc_sharegenai.risk_suggestion_aiagent_user role, you can use the Risk Suggestion AI Agent to identify risks related to an entity. The AI agent analyzes the entity and suggests relevant risks from various sources, consolidating them into a reviewable list to verify for accuracy. Risk managers can then confirm and promote these risks to the risk register for further assessment. This feature automates risk discovery, helping identify potential risks and prepare for compliance requirements.
- Report a GRC issue AI agent
- The report a GRC issue AI agent is now available in Employee Center, enabling employee users to report issues through a guided conversational experience. As users respond to prompts, the agent structures the issue and recommends relevant controls, entities, and policies based on the input provided. The AI agent helps ensure that the issue is well-defined and enriched with contextual information before it's submitted.
- Zurich Patch 1
- Recommend controls for a regulatory alert
- If you’re a RCM User [sn_grc_reg_change.user] and have the Regulatory change AI user [sn_grc_comp_genai.reg_change_ai_user] role, you can generate AI-driven recommendations to help identify and mark relevant controls as impacted during regulatory alert reviews. These recommendations assist in associating control impacts with alerts, reducing manual effort and improving consistency. You can accept suggested control impacts to create action tasks immediately or dismiss recommendations to filter out irrelevant information.
UI changes
- Zurich Patch 7
- Now Assist skills for Risk & Sustainability
- The skill family name Regulatory change management has been updated to Regulatory change to improve naming clarity and consistency within Now Assist skills for Risk & Sustainability under the Technology workflow module in the Now Assist Admin Center.
- Zurich Patch 4
- Now assist skills group renamed
- The skill group previously named IRM is now renamed Risk & Sustainability under the Technology workflow module in the Now Assist Admin Center.
Changed in this release
- Zurich Patch 5
- Changes to Now Assist usage measurement
- Starting with Zurich Patch 5, Now Assist usage measurement is transitioning from a 365-day look-back model to a 365-day burn-down model, with usage resetting at the contract anniversary date. For more information, refer to KB KB2704710: Now Assist Usage - Overview & New Measurement Logic.
- Zurich Patch 4
- Some Now Assist skills, agents, and agentic workflows are turned on by default
- The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be
needed to use the skill. The new default behavior works as follows:
- New customers: When you install a Now Assist product, designated skills and agentic workflows are turned on automatically.
- Existing customers who are upgrading (starting with Zurich Patch 4): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive.
- Role configuration required for agentic workflows and AI agents
- Agentic workflows and AI agents included with Now Assist applications require additional security configuration. If you select Users with selected roles for your user access security controls for an agentic workflow or AI agent, you must add the installed roles, or they won't execute. Data access settings must also include these roles. See the documentation for the agentic workflow or AI agent for the specific roles you must add. After the roles are configured, users must have the specified role to invoke the agentic workflow or AI agent.
Activation information
Install Now Assist for Integrated Risk Management (IRM) by requesting it from ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
All Now Assist for IRM skills and agentic workflows are activated by default after installing Now Assist for Integrated Risk Management (IRM).