---
sourceDocument: Zurich Release Notes
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/zurich/release-notes

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Release Notes

ft:clusterId :

    - rn

bundleId :

    - rn


---

# ServiceNow Otto for Integrated Risk Management (IRM)

# ServiceNow Otto for Integrated Risk Management (IRM) {#ariaid-title1}

Release version: Zurich  
Updated November 5, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 7 minutes to read  
The ServiceNow®
ServiceNow Otto for Integrated Risk Management (IRM) application brings generative AI to Governance, Risk, and Compliance. ServiceNow Otto for Integrated Risk Management (IRM) was enhanced and updated in the Zurich release.

## About ServiceNow Otto for Integrated Risk Management (IRM) {#now-assist-for-irm-rn__grc-now-assist-rn-highlights}

[Zurich Patch 5](https://servicenow-prod.fluidtopics.net/EUKjGiGPGAI0Y2J3e0OXkQ "The Zurich Patch 5 release contains important problem fixes.")

* Review changes to Now Assist usage measurement.
{#now-assist-for-irm-rn__ul_th5_hpb_xhc}  
[Zurich Patch 4](https://servicenow-prod.fluidtopics.net/i4YMnCLVW7eu1rHqMLWEww "The Zurich Patch 4 release contains important problem fixes.")

* Some Now Assist skills, agents, and agentic workflows are now turned on by default.
* Use AI-generated recommendations to identify which policies are impacted by a regulatory alert.
* Use the get regulatory analysis agentic workflow to enrich regulatory alerts with external context, classification, summarization, and recommended impacted items. Start by selecting Get analysis from the Ask Now Assist action menu on the regulatory alert page or Get Regulatory Analysis from the Now Assist panel.
* Use the generate regulatory action plan agentic workflow to turn regulatory insights into actionable compliance strategies with structured tasks, clear ownership, and timelines. Start by selecting Generate action plan from the Ask Now Assist action menu on the regulatory alert page or Generate Regulatory Action Plan from the Now Assist panel.
* Use the Risk Suggestion AI Agent to discover potential risks for an entity, giving risk managers better insights for informed decision-making.
* Use the report a GRC issue AI agent in the Employee Center to report issues through a guided conversational experience.
* Additional role configuration required for agentic workflows and AI agents included with your applications.
{#now-assist-for-irm-rn__ul_wrc_krm_hhc}  
[Zurich Patch 1](https://servicenow-prod.fluidtopics.net/ryznRs456gpDAGVQsRzm4g "The Zurich Patch 1 release contains important problem fixes."):

* Use AI-generated recommendations to identify which controls are impacted by a regulatory alert.
{#now-assist-for-irm-rn__ul_tmn_ls5_c3c}

See [ServiceNow Otto for Integrated Risk Management (IRM)](https://www.servicenow.com/docs/access?context=now-assist-for-irm&version=zurich&pubname=zurich-governance-risk-compliance&ft:locale=en-US) for more information.{#now-assist-for-irm-rn__grc-now-assist-rn-highlights-5}

## Activation and other requirements

Important:  
ServiceNow Otto for Integrated Risk Management (IRM) is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.

Activation information

:   Install ServiceNow Otto for Integrated Risk Management (IRM) by requesting it from ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#now-assist-for-irm-rn__grc-now-assist-rn-activation-1}

    [Zurich Patch 4](https://servicenow-prod.fluidtopics.net/i4YMnCLVW7eu1rHqMLWEww "The Zurich Patch 4 release contains important problem fixes."){#now-assist-for-irm-rn__grc-now-assist-rn-activation-2}

    All ServiceNow Otto for IRM skills and agentic workflows are activated by default after installing ServiceNow Otto for Integrated Risk Management (IRM).{#now-assist-for-irm-rn__grc-now-assist-rn-activation-3}

## March 2026 {#ariaid-title2}

The ServiceNow®
ServiceNow Otto for Integrated Risk Management (IRM) application brings generative AI to Governance, Risk, and Compliance. ServiceNow Otto for Integrated Risk Management (IRM) was enhanced and updated in the Zurich release.

### What's changed {#now-assist-for-irm-rn-2026-03__grc-now-assist-rn-ui-changes}

Now Assist skills for Risk \& Sustainability
:   The skill family name Regulatory change management has been updated to Regulatory change to improve naming clarity and consistency within Now Assist skills for Risk \& Sustainability under the Technology workflow module in the AI Admin Hub Center.

## January 2026 {#ariaid-title3}

The ServiceNow®
ServiceNow Otto for Integrated Risk Management (IRM) application brings generative AI to Governance, Risk, and Compliance. ServiceNow Otto for Integrated Risk Management (IRM) was enhanced and updated in the Zurich release.

### What's changed {#now-assist-for-irm-rn-2026-01__grc-now-assist-rn-changed-features}

[Changes to Now Assist usage measurement](https://www.servicenow.com/docs/access?context=monitoring-now-assist-usage&version=zurich&pubname=zurich-platform-administration&ft:locale=en-US)
:   Starting with Australia Early Access, AI usage measurement is transitioning from a 365-day look-back model to a 365-day burn-down model, with usage resetting at the contract anniversary date. For more information, refer to [KB KB2704710: AI Usage - Overview \& New Measurement Logic](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2704710).

## December 2025 {#ariaid-title4}

The ServiceNow®
ServiceNow Otto for Integrated Risk Management (IRM) application brings generative AI to Governance, Risk, and Compliance. ServiceNow Otto for Integrated Risk Management (IRM) was enhanced and updated in the Zurich release.

### What's new {#now-assist-for-irm-rn-2025-12__grc-now-assist-rn-new-features}

[Recommend policies for a regulatory alert](https://www.servicenow.com/docs/access?context=manage-recos-for-policies&version=zurich&pubname=zurich-governance-risk-compliance&ft:locale=en-US)
:   If
    you're a RCM User \[sn_grc_reg_change.user\] and have the Regulatory change AI user \[sn_grc_comp_genai.reg_change_ai_user\] role, you can generate AI-driven recommendations to
    help identify and mark relevant policies as impacted during regulatory alert reviews. These recommendations assist in associating policy impacts with alerts. You can accept suggested policy impacts to create action tasks
    immediately or dismiss recommendations to filter out irrelevant
    information.

Citation impact analysis and updates with Now Assist for IRM
:   When a citation's description or supplemental guidance is updated, Control Objective Impact Analyzer skill identifies related control objectives that might be affected. The AI agent, ControlObjective Change Agent, then
    reviews these control objectives to determine whether the descriptions or guidance need changes and provides suggested updates. Users can review, provide feedback, and approve these updates directly in the Now Assist panel,
    ensuring that citation changes are reflected in associated control objectives.

Enhancements to control objectives rationalization process
:   The following enhancements have been introduced to the generative AI rationalization process of control objectives:

    * Rationalization process is now automatically created when selecting the Rationalize button in the control objective page.

    * The recommendation workflow has been simplified into a two-step process: Step 1 identifies duplicates by accepting or dismissing recommendations; Step 2 finalizes by retaining one recommendation or creating a new common control objective.
    * Approvals for the rationalization process are skipped for owners who are reviewers, and levels where all reviewers are owners are automatically approved.

    * Owners and approvers can add comments and justifications directly on recommendation cards and reply to existing comments.

    * The user interface has been updated with better navigation, quick summaries, visual improvements, and clear error messages.
    {#now-assist-for-irm-rn-2025-12__ul_l13_1k3_4hc}

[Get regulatory analysis agentic workflow](https://www.servicenow.com/docs/access?context=get-rcm-reg-insight&version=zurich&pubname=zurich-governance-risk-compliance&ft:locale=en-US)
:
    If you're a RCM User \[sn_grc_reg_change.user\] and have the \[sn_grc_comp_genai.reg_change_ai_agent_user\] role, you can analyze and enrich regulatory alerts by using the get regulatory analysis
    agentic workflow in the Now Assist panel. This agentic workflow uses web search to enhance alert context, summarizes the alert, and recommends potential impacts on citations, policies, and control objectives to support fast and
    accurate compliance decisions. You can get started by
    selecting Get analysis from the Ask Now Assist action menu on the regulatory alert page or by selecting Get Regulatory Analysis from the Now Assist
    panel.

[Generate regulatory action plans agentic workflow](https://www.servicenow.com/docs/access?context=generate_regulatory_action_plans&version=zurich&pubname=zurich-governance-risk-compliance&ft:locale=en-US)
:
    If you're a RCM User \[sn_grc_reg_change.user\] and have the sn_grc_comp_genai.reg_change_ai_agent_user role, you can generate a regulatory action plans by using the generate regulatory action plans
    agentic workflow in the Now Assist panel. This agentic workflow analyzes impacted areas and similar historical alerts to create change tasks and action tasks that help implement regulatory change. You can get started by selecting
    Generate action plan from the Ask Now Assist action menu on the regulatory alert page or by selecting Generate Regulatory Action Plan from the Now Assist
    panel.

[Identify risks for an
entity](https://www.servicenow.com/docs/access?context=suggest-potential-risks-workflow&version=zurich&pubname=zurich-governance-risk-compliance&ft:locale=en-US)

:   If you're a Workspace user with the sn_grc_sharegenai.risk_suggestion_aiagent_user role, you can use the Risk Suggestion AI Agent to identify risks related to an entity. The AI agent analyzes the entity and suggests relevant risks from various sources, consolidating them into a reviewable list to verify for
    accuracy. Risk managers can then confirm and promote these risks to the risk register for further assessment. This feature automates risk discovery, helping identify potential risks and prepare for compliance
    requirements.

[Report a GRC issue AI agent](https://www.servicenow.com/docs/access?context=issue-submission-ai-agent&version=zurich&pubname=zurich-governance-risk-compliance&ft:locale=en-US)
:   The report a GRC issue AI agent is now available in Employee Center, enabling employee users to report issues through a guided conversational experience. As users respond to prompts, the agent structures the issue and recommends relevant controls, entities, and
    policies based on the input provided. The AI agent helps ensure that the issue is well-defined and enriched with contextual information before it's
    submitted.
{#now-assist-for-irm-rn-2025-12__grc-now-assist-rn-new-features-1}

### What's changed {#now-assist-for-irm-rn-2025-12__grc-now-assist-rn-changed-features}

[Role configuration required for agentic workflows and AI agents](https://www.servicenow.com/docs/access?context=aia-role-masking&version=zurich&pubname=zurich-intelligent-experiences&ft:locale=en-US)
:   Agentic workflows and AI agents included with your applications require additional security configuration. If you select Users with selected roles for your user access security controls for an agentic workflow or AI agent, you must add the installed roles, or they will not execute. See the documentation for the agentic workflow or AI agent for the specific roles you must add.

[Some generative AI skills, AI agents, and agentic workflows are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&version=zurich&pubname=zurich-intelligent-experiences&ft:locale=en-US)
:   The skills are automatically available to appropriate role users for the application, such as ITIL roles on incident forms or change forms. This change simply activates the skill and does not touch the roles that may be needed to use the skill. The new default behavior works as follows:

    * New customers: When you install an AI product, designated skills and agentic workflows are turned on automatically.
    * Existing customers who are upgrading (starting with Australia Early Access): Any previously unconfigured skill, agent, or agentic workflow is turned on automatically (the AI asset was never configured and turned on, then turned off again). Previously configured skills and agentic workflows that were turned on, then off, remain inactive.
{#now-assist-for-irm-rn-2025-12__grc-now-assist-rn-changed-features-1}

Now assist skills group renamed
:   The skill group previously named IRM is now renamed Risk \& Sustainability under the Technology workflow module in the AI Admin Hub Center.
{#now-assist-for-irm-rn-2025-12__grc-now-assist-rn-ui-changes-1}

## Zurich General Availability {#ariaid-title5}

The ServiceNow®
ServiceNow Otto for Integrated Risk Management (IRM) application brings generative AI to Governance, Risk, and Compliance. ServiceNow Otto for Integrated Risk Management (IRM) was enhanced and updated in the Zurich release.

### What's new {#now-assist-for-irm-rn-2025-09__grc-now-assist-rn-new-features}

[Recommend controls for a regulatory alert](https://www.servicenow.com/docs/access?context=manage-recos-for-controls&version=zurich&pubname=zurich-governance-risk-compliance&ft:locale=en-US)
:
    If you're a RCM User \[sn_grc_reg_change.user\] and have the Regulatory change AI user \[sn_grc_comp_genai.reg_change_ai_user\] role, you can generate AI-driven recommendations to help identify and
    mark relevant controls as impacted during regulatory alert reviews. These recommendations assist in associating control impacts with alerts, reducing manual effort and improving consistency. You can accept suggested control
    impacts to create action tasks immediately or dismiss recommendations to filter out irrelevant
    information.
{#now-assist-for-irm-rn-2025-09__grc-now-assist-rn-new-features-1}