---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Act on recommendations for policies

# Accept
or dismiss recommendations for regulatory alert impacted policies {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read

Accept AI-generated recommendations in Regulatory Change Management to mark specific business areas as impacted so that you can help compliance practitioners capture and address the relevant regulatory alert for policies. You can also dismiss recommendations
to filter out irrelevant or unnecessary information.

## Before you begin

Important:  
This generative AI skill is turned on by default. The skill will be automatically available to appropriate role users for the application. For more information, see [AI agents, skills, and agentic workflows on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US).

Role required: To view your assigned regulatory alerts, you need the sn_grc_reg_change.user and sn_grc_comp_genai.reg_change_ai_user roles.  
Important:  
Be sure to check AI-generated recommendations for accuracy. If no information is available, the generated recommendations display "No recommendations available," "None," "No records to display," and so on.

To learn about the related roles and regulatory alerts for a recommendation, see [Types of alerts, user roles, and states of regulatory alerts](https://servicenow-prod.fluidtopics.net/KvffoAWix8XuHczAjHpCZA "Different users perform various actions on the alert records based on the type of the alert.").

## About this task

The
Recommendation Framework enables dynamic, AI-driven policy recommendations by evaluating regulatory alert content against configurable policy associations. This helps to enhance impact analysis and improve compliance
accuracy. When a regulatory alert is issued, the system generates relevant policy suggestions. After reviewing each recommendation, compliance analysts can accept applicable policies to mark the corresponding business areas
as impacted. For example, a regulatory alert related to Digital Operational Resilience Act (DORA) can prompt recommendations for policies such as Vendor Onboarding Procedures and Incident Response Protocols. After a compliance analyst reviews and accepts these
policies, they can mark the relevant business areas as impacted and take steps to help ensure regulatory compliance while managing regulatory tasks.

You can view the related activity for each recommendation by selecting the summary icon ![]() to open the Feedback trail side-panel.

## Procedure

1. Navigate to one of the following locations:  
   * WorkspacesCompliance Workspace, select the list icon ![]() and then navigate to Regulatory alerts.
   * WorkspacesCompliance Workspace and select the Regulatory Change Management dashboard icon ![]() and then in the Activity overview, Tracking, or Trends section, select any segment or value in an Alerts related widget to open the list of regulatory alerts with that state.
   {#manage-recos-for-policies__ul_zck_crf_c2c}
2. Select the regulatory alert that you want and review the recommendations by selecting the Recommendations tab.  
   Note:  
   If recommendations haven't already been generated, you can generate recommendations for a regulatory alert in any state except Closed or Cancelled by completing one of the following.
   * On the Overview tab, select Recommend.
   * On the Recommendations tab, select Show recommendations.

   {#manage-recos-for-policies__ul_qqn_dnm_tgc}For more information, see [Generate recommendations for regulatory alert impacted citations, control objectives, controls, and policies](https://servicenow-prod.fluidtopics.net/TvEkbKzagR30EbjD5Q6AWw "Generate recommendations to identify and mark potential impact areas, such as citations, control objectives, controls, and policies for regulatory alerts using the corresponding regulatory alert impacted skill. Recommendations simplify the process of associating impacts and creating action tasks.").
3. Review potential impact areas by selecting the Policies tab in the Recommended areas of the impact section.  
   The recommended policies only include policies that are part of the existing inventory.

   Note:  
   The `Suggest business operations affected by regulatory alert recommendation context` provides the recommendations that you see here. For more information, see [Recommendation contexts and templates](https://servicenow-prod.fluidtopics.net/kSyd5BFg6OEtsZTvZj5m9w "By using the Governance, Risk, and Compliance recommendations framework, you can use recommendation contexts and templates to deliver AI-driven insights directly to your users within the user interface. With these insights, your users can make informed decisions and take prompt actions.").  
   If
   recommendations are available, you can scroll through the generated list of policies recommendation cards and review the information about each policy, such as its name and compliance status.
4. Select the policies recommendation card that you want and review the following sections:  
   {#manage-recos-for-policies__id_o2v_k4c_cfc__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name of the policy. |
   | Type | Type of policy. |
   | Owner | Owner of the policy. |
   | Policy categories | Categories that classify the policy based on its purpose, scope, or regulatory domain. |
   | Compliance score | A numerical or qualitative score that reflects how well the policy aligns with regulatory requirements or internal standards. |
   | Description | Description and summary of the policy. |
   | Policy text | Additional guidance on how to address the policy. |
   | Evaluate affected associations for policies ||
   | Control objectives | Related goal or requirement that can be associated with the policy. For each control objective, the following information is provided if available. * Reference * Name of the control objective * Category that the control objective is associated with * Classification for the control objective {#manage-recos-for-policies__ul_ygx_wqs_vgc} |
   | Policies | Related policies that can be associated with the policy. For each policy, the following information is provided if available. * Number assigned to the policy * Name of the policy * Type of policy * State of the policy {#manage-recos-for-policies__ul_ycq_b4s_vgc} |
   | Policy Exceptions | Related goal or requirement that can be associated with the policy. For each control objective, the following information is provided if available. * Number assigned to the policy exception * Name of the policy * Name of the control objective * Name of issue {#manage-recos-for-policies__ul_yk1_grt_1hc} |
   [ ]

   {#manage-recos-for-policies__id_o2v_k4c_cfc}

   For full descriptions of these fields, see [Create a control objective](https://servicenow-prod.fluidtopics.net/fG69PHeRk7XVOU2QZ8a89A "A control objective is an objective, direction, or standard that acts as guidance for company interactions and operations. Control objectives can be categorized, classified, and related to policies."), [Create a policy](https://servicenow-prod.fluidtopics.net/unaAVs8Ggm0NGiF6I5N1fg "A policy defines an internal practice that processes must follow. Policies are defined as policies, procedures, standards, plans, checklists, frameworks, and templates."), and [Create a control](https://servicenow-prod.fluidtopics.net/jbzCes4f6AkMQacFwUm6_A "Controls are automatically generated when you associate a policy with an entity type or an entity type with a control objective. A control is created for each entity listed in the entity type for the control objective. Controls can also be manually created.").
5. To associate control objectives or risks with your recommendation, navigate to the corresponding tab and select the check box for each record that you want to include as part of the impacted areas.  
   Each selected risk will be added as an impacted area after you accept the recommendation.  
   Note:  
   The policy you're reviewing may not have any risks associated with it. Control objectives or risks must be mapped to policies in the inventory for them to appear.

6. **Optional:** View the record for a policy, refresh your recommendations, or review related activity for each recommendation.

   | Option | Description |
   | Select the details icon ![](). | View the record for a policy. |
   | Select the refresh icon ![](). | Refresh the recommendations to reflect the latest data. |
   | Select the summary icon ![](). | Open the Feedback trail side-panel to review the related activity for the recommendation. |
   |-|-|

   {#manage-recos-for-policies__choicetable_zwf_rnd_ngc}
7. Accept or dismiss the recommendations and their associations.
   * Select Accept and then Confirm to accept a recommendation as an impacted area.
   * Select Dismiss and then Confirm to avoid a recommendation from being shown again.

   {#manage-recos-for-policies__choices_p24_zqm_tgc}  
   Before you act on a recommendation, you see a summary of the impact areas and associations that you're accepting or dismissing.  
   If you accept the recommendation, it's marked as an impacted area and is added to the list of impacts. If you dismiss the recommendation, it's marked as dismissed and isn't shown again for that specific regulatory
   alert.
{#manage-recos-for-policies__steps_rbc_pzw_kgc}

## What to do next

If you accepted any recommendations, confirm the creation of an impacted area by navigating to the Impacted areas tab. If you dismissed all recommendations or must add more impacted areas, you can
manually add impacted areas. For more information, see [Add impacted areas manually to a regulatory alert](https://servicenow-prod.fluidtopics.net/nBx2HZOfslXr6HiPDagczw "Add impacted areas such as citations, control objectives, policies, and more to your regulatory alerts. Adding impacted areas to a regulatory alert captures additional impacts that you identified and impacts that weren’t initially recommended.").

*[\>]: and then