Agentic AI and generative AI (Gen AI) features for Integrated Risk Management (IRM), powered by Now Assist, enhance analysts' productivity, team coordination, and overall efficiency.
Issue summarization:
The Now Assist for IRM application can quickly analyze an issue record, including the description, activity log, and remediation tasks, and then generate a concise summary that provides you with the information needed to quickly understand the context of the issue.
Issue resolution agentic workflow:
Optimize GRC issue resolution is an agentic workflow in the Integrated Risk Management application that enables issue managers and analysts to resolve GRC issues through the Now Assist panel. This workflow leverages AI agents to suggest targeted solutions for key steps during the resolution process.
Risk assessment summarization:
Risk assessment summary generation uses generative AI to assist assessors during submissions and provide approvers and stakeholders with a quick overview of assessment progress and key insights.
Control objective rationalization and deduplication:
The control objective rationalization and deduplication process leverages generative AI to identify similar or duplicate control objectives, enabling teams to consolidate them by retaining one, retiring duplicates, or merging them into a common control objective, enhancing overall efficiency and effectiveness across compliance operations.
Risk event summarization:
The risk event summarization feature helps risk managers quickly understand the context and key details of a risk event, even when multiple coordinators have been involved over time. It streamlines onboarding for new assignees and improves decision-making efficiency for approvers, especially in multi-level approval workflows, by providing concise AI-generated summaries of each event.
Rationalization of control objectives
Skill for creating a common control objective as part of the rationalization process for control objectives.
Control recommendation on regulatory alert
Skill for recommending controls for an incoming regulatory alert.
Issue submission agent:
The issue submission AI agent is now available in Employee Center, enabling employee users to report issues through a guided conversational experience. The agent helps structure the issue and recommends relevant controls, entities, and policies based on the input provided. This ensures that the issue is well-defined and enriched with contextual information before it is submitted.
Suggest potential risks agentic workflow
AI-driven risk identification analyzes entity context and surfaces relevant risks from internal libraries, industry patterns, and optional external sources. It generates a single, ready-to-triage risk list, reducing manual effort and duplication while ensuring comprehensive coverage.
Control objective impact analyzer:
The citation-driven impacted control objective identifier uses generative AI to analyze changes in citations and identify control objectives that should be reviewed based on the modified citation content. It intelligently matches changed citation requirements with existing control objectives to suggest potential updates, helping teams maintain alignment between citations and control objectives.
Control objective change agent:
This capability introduces an AI-driven process to automatically update a control objective’s description and supplemental guidance whenever its associated citations are modified. Leveraging agentic AI, it analyzes citation changes, identifies their impact on the control objective, and generates precise, contextually relevant updates.
[New]
Issue submission agent:
The Issue Submission agent is now available in Employee Center, enabling employee users to report issues through a guided conversational experience. The agent helps structure the issue and recommends relevant controls, entities, and policies based on the input provided. This ensures that the issue is well-defined and enriched with contextual information before it is submitted.
Check product documentation for activation details.
Suggest potential risks agentic workflow
- AI-driven risk identification
Conversational AI automatically analyzes entity context and surfaces relevant risks from internal libraries, industry patterns, and optional external sources. - Consolidated risk view
Generates a single, ready-to-triage risk list, reducing manual effort and duplication while ensuring comprehensive coverage. - Guided user experience
Embedded in the Now Assist Panel, the workflow provides step-by-step guidance for risk domain selection, simplifying complex risk discovery. - Proactive intelligence for emerging risks
External scanning capabilities deliver early warnings of new threats, helping organizations stay ahead of evolving regulations and trends.
Control objective impact analyzer:
The citation-driven impacted control objective identifier uses generative AI to analyze changes in citations and identify control objectives that should be reviewed based on the modified citation content. It intelligently matches changed citation requirements with existing COs to suggest potential updates, helping teams maintain alignment between citations and control objectives.
Control objective change agent:
This introduces an AI-driven capability to automatically update a control objective's description and supplemental guidance whenever its associated citations are modified. Leveraging agentic AI, the enhancement analyzes the changes in citation content, identifies their impact on the control objective, and generates precise, contextually relevant updates. Users can review and approve AI-suggested changes directly within the workflow, ensuring that control objectives always reflect the most current regulatory requirements and best practices.
[Changed]
- Removed the issue summarization step from the issue resolution agentic workflow as part of performance improvements.
- Added support for LTS models for previously released Now Assist IRM skills.
- Enhanced security by implementing role masking.
- Rationalization process now auto-generates recommendations using the skill when the Rationalize button is clicked on a control objective.
- Added a quick summary view for each recommendation card and clarified task sequence during the analyze step of the rationalization process.
- Control objective requirements and control requirements are now considered in the rationalization process for control objectives.
[Fixed]
- Implemented a fix to skip redundant approvals in the rationalization process.
- Resolved issues related to synchronizing impacted items and automatic refreshes.
Requirements:
- Now Assist for Platform should be installed
- GRC: Risk Management Workspace/GRC: Compliance Management Workspace (minimum version needed is 21.x).
- AI Search should be enabled on the instance.
- Generative AI skills and agentic workflows should be activated through Now Assist Admin or Agentic AI Studio.