Types of alerts, user roles, and states of regulatory alerts

  • Release version: Xanadu
  • Updated July 31, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Types of alerts, user roles, and states of regulatory alerts

    The Regulatory Alerts module in ServiceNow provides a structured way to manage alerts related to regulatory changes. Different alert types, user roles, and alert states define how users interact with alert records, enabling efficient tracking and resolution of regulatory events.

    Show full answer Show less

    Types of Alerts

    • All Assigned Alerts: Shows alerts assigned to a user via the Coordinator field.
    • Unassigned Alerts: Alerts without an assigned Coordinator, where overall impact can be marked (No impact, Low, Medium, High, Critical).
    • New Alerts: Unassigned alerts newly created in the system.
    • Deferred Alerts: Alerts postponed to a future date, assigned to a Coordinator, and set with a reminder.
    • Impact Assessment Alerts: Alerts currently undergoing impact assessment.
    • In Progress Alerts: Alerts actively being worked on.
    • Closed Alerts: Alerts that are resolved or deemed irrelevant.

    User Roles and Permissions

    • sngrcregchange.manager, sngrcregchange.admin, sngrcregchange.user: Roles that define user access and actions on alerts.
    • Managers: Can view all alerts and perform all actions including update, reassign, defer, mark applicability, initiate impact assessment, and cancel.
    • Users (sngrcregchange.user): Can only view and work on alerts assigned to them; cannot see unassigned or others' alerts.
    • Actions include: Updating details, reassigning alerts, deferring alerts, marking alerts as applicable or not applicable, initiating impact assessments, and cancelling alerts.

    States of Regulatory Alerts

    • New: Default state for incoming alerts; assignment by admin or manager required.
    • Deferred: Alerts postponed for later action with a reminder date.
    • Impact Assessment: Alerts undergoing evaluation for applicability.
    • In Progress: Alerts actively being addressed, assigned to a user.
    • Closed: Alerts resolved or deemed irrelevant, including those with completed associated tasks.
    • Cancelled: Alerts that have been cancelled.

    Additional Notes

    The attributes on alert records come from third-party regulatory intelligence providers and are non-editable within the Regulatory Change Management application. These attributes assist in determining the alert's applicability to an organization.

    Different users perform various actions on the alert records based on the type of the alert.

    You can view the following types of alerts under the Regulatory Alerts module:
    • All Assigned Alerts: Displays all assigned alerts in the instance where the Coordinator field is assigned to an appropriate user.
    • Unassigned Alerts: Displays the unassigned alerts in the instance where the Coordinator field is empty. Mark the Overall impact as No impact, Low, Medium, High, or Critical.
    • New Alerts: Displays new alerts in the instance where the Coordinator field is empty.
    • Deferred Alerts: Displays the deferred alerts where the Coordinator field is assigned to an appropriate user, the state is Deferred, and a reminder date is listed to perform the action post deferral.
    • Impact Assessment Alerts: Displays the alerts for regulatory events that are in Impact Assessment state.
    • In Progress Alerts: Displays the alerts that are in In Progress state.
    • Closed Alerts: Displays the alerts that are in Closed state.
    The following table provides information on the user roles, the actions that these users can perform, and the description of these actions.
    Table 1. User roles, actions, and description
    User roles Actions Description
    • sn_grc_reg_change.manager
    • sn_grc_reg_change.user
    • sn_grc_reg_change.admin
    		 Update Updates the details of the alert.
    Reassign Reassigns the details of the alert.
    Defer Defers a regulatory alert to a future date.
    Applicable Marks the alert as applicable.
    Initiate Impact Assessment Initiates an impact assessment on the alert.
    Not Applicable Marks the alert as not applicable.
    Cancel Cancels the alert.

    Managers can view all alerts. Users with the sn_grc_reg_change.user role can view assigned alerts that are assigned to them, but they cannot view unassigned alerts or alerts that are assigned to other people.

    See the following table for information on the states of regulatory alerts.
    Table 2. States of the alerts and their description
    State Description
    New Each incoming regulatory alert is by default assigned to a new state. Only the sn_grc_reg_change.admin or the sn_grc_reg_change.manager can assign an alert record.
    Deferred Some alerts do not require an immediate action and therefore, they are in the Deferred state and they are assigned to a later date.
    Impact Assessment The alert records that are of type regulatory event are assessed for applicability and are marked for an impact assessment. After an impact assessment, the alerts are marked as applicable or not applicable.
    In Progress Alerts with the In Progress state are being worked on. An sn_grc_reg_change.user is assigned to each alert.
    Closed Alerts that are not relevant to an organization are in the Closed state. Alerts that have associated tasks that have been completed are also in the Closed state.
    Cancelled Alerts that are in Cancelled state.
    Note:
    The attributes on the alert record are part of the metadata that is given by the third-party regulatory intelligence provider. These attributes help in determining the applicability of the alert to the organization. These records are non-editable in the Regulatory Change Management application.