Policy and Compliance Management release notes
Summarize
Summary of Policy and Compliance Management release notes
The ServiceNow® Policy and Compliance Management application centralizes the creation and management of policies, standards, and internal control procedures, linking them to external regulations and benchmarks. The Yokohama release introduces several enhancements to improve compliance visibility, collaboration, performance, and access control.
Show less
Key Features
- Compliance Score by Entity: View a comprehensive compliance score rolled up through the entity hierarchy, combining child entities’ scores with the parent entity’s controls.
- Duplicate Citation Elimination: When downloading UCF content, duplicate citations associated with authority documents are identified, allowing one active citation with duplicates marked inactive and control objectives consolidated.
- Integration with Microsoft SharePoint: Enables periodic policy revisions and updates of policy text through SharePoint integration.
- Policy Authoring and Redlining: Policy owners and reviewers can collaborate effectively by reviewing and redlining policies within the application.
- Improved Compliance Workspace Performance: Removal of the Issues widget from the Compliance Workspace landing page enhances user experience; issues remain accessible via the "Issues Overview" section.
- Entity-Based Access Controls: Provides granular data access by restricting user permissions to specific entities and their related records, configurable by administrators through user or group assignments.
- AI-Powered Deduplication of Control Objectives: Generative AI recommends similar control objectives for review, enabling users to retain, dismiss, or merge duplicates. Related records like policies and risk statements are consolidated accordingly.
Changes and Updates
- Now Assist Skills Enabled by Default: From Yokohama Patch 11, certain Now Assist skills are automatically enabled for new installations and for some previously unconfigured skills on upgrades.
- Now Assist Usage Measurement Update: Starting with Yokohama Patch 5, usage measurement switches to a 365-day burn-down model resetting at contract anniversaries.
- Deprecation: The GRC DevOps Accelerator is deprecated and unsupported for new activations.
Activation and Requirements
Policy and Compliance Management is available via request from the ServiceNow Store. Users can find related version histories and cumulative release notes on the store website.
Supported browsers include the latest public release and two previous versions of Google Chrome, Firefox (including ESR), Microsoft Edge Chromium, and Safari 12.0 or later.
The ServiceNow® Policy and Compliance Management application provides a centralized process for creating and managing policies, standards, and internal control procedures that are cross-mapped to external regulations and benchmarks. Policy and Compliance Management was enhanced and updated in the Yokohama release.
Policy and Compliance Management highlights for the Yokohama release
- View the compliance score at the entity level based on the hierarchy of entities.
- Eliminate duplicate citations associated with the authority documents when you download UCF content.
- Revise your policies and update the policy text periodically by integrating with Microsoft SharePoint.
- Enable policy owners and reviewers to collaborate, review, and redline policies by using policy authoring and the redlining feature.
- The Issues widget has been removed from the Compliance Workspace landing page to enhance the performance.
- Enable data access by implementing Entity-Based Access controls.
- Recommend similar control objectives using generative AI. You can then retain, dismiss, or merge duplicate control objectives.
See Policy and Compliance Management for more information.
New in the Yokohama release
- Calculate compliance score and roll up to entity
- View a comprehensive compliance score at the entity level that includes all the child entities rolled up to the parent entity along with the compliance score of the parent entity's direct controls.
- Elimination of duplicate citations from UCF Shared list download
- Eliminate duplicate citations associated with the authority documents when you download UCF content. You can retain one citation as active and mark the duplicate citations as inactive. Move the control objectives of the duplicate citations to the active citation, and update the duplicate citation records with the Source ID of the active citation.
- Improve compliance workspace performance
- Improved the performance of the compliance workspace by removing the issue widget to ensure a faster and smoother user experience. You can still access issue details from the "Issues Overview" section.
- Entity based access
- Entity based access aims to provide a more granular approach to data access, ensuring that users can only access data through entity-based access. The entity-based access has been enabled for controls, attestations and policy exception to control mappings. Administrators can grant access to an entity's related records by adding users or user groups, or by using entity user fields for entity-based access configuration.
- Deduplication of control objectives
- Using Generative AI, identify and recommend similar control objectives. You can choose to accept a control objective as duplicate, dismiss those that are not similar, or retain a control objective as primary in which details from all other similar control objectives are merged. Additionally, the system automatically copies related records, including policies and risk statements, to ensure comprehensive information is maintained in one location after retiring the accepted control objectives.
Changed in this release
- Yokohama Patch 11
- Some Now Assist skills are turned on by default
- The new default behavior works as follows:
- New customers: When you install a Now Assist product, designated skills are turned on automatically.
- Existing customers who are upgrading (starting with Yokohama Patch 11): Any previously unconfigured skill is turned on automatically (the skill was never configured and turned on, then turned off again). Previously configured skills that were turned on, then off, remain inactive.
- Changes to Now Assist usage measurement
- Starting with Yokohama Patch 5, Now Assist usage measurement is transitioning from a 365-day look-back model to a 365-day burn-down model, with usage resetting at the contract anniversary date. For more information, refer to KB KB2704710: Now Assist Usage - Overview & New Measurement Logic.
Deprecations
GRC DevOps Accelerator is now deprecated and no longer supported or available for new activation. For details, see the Deprecation process [KB0867184] article in the Now Support Knowledge Base.
Activation information
Install Policy and Compliance Management by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
Browser requirements
- Google Chrome
- Firefox and Firefox Extended Support Release (ESR)
- Microsoft Edge Chromium
- Safari 12.0 and later versions