Assess the impact of a regulatory alert

task australia Updated Sep 10, 2026 1 min read impact-assessment-tasks.md
Raw file servicenow.com

Evaluate the risk of a regulatory alert by initiating either a risk assessment or a regulatory assessment.

Before you begin

Role required: sn_grc_reg_change.user

About this task

You can initiate one of the following assessments:

  • Regulatory assessment: Uses the Smart Assessment Engine. A regulatory assessment is used to assess the potential effects of new or updated regulations before the regulations are finalized or implemented.
  • Risk assessment: Uses the classic risk assessment. A risk-based approach is used to identify and address both direct and indirect impacts.

Procedure

  1. Navigate to Workspaces > Compliance Workspace.

  2. Select the List icon [Omitted image "ListsIcon.jpg"] Alt text:.

  3. In the Lists tab, navigate to Regulatory alerts > All assigned alerts.

  4. Select the regulatory alert that you want to assess.

  5. Select Assess impact.

  6. For Regulatory assessment, perform the following in the Evaluate regulatory impact dialog box.

    1. In the Assessment template field, specify the template to use for the assessment.

    2. In the Select a group field, select the group responsible to perform the assessment.

    3. In the Assessors field, specify individual assessors of the group.

      Ensure that the assessors have the sn_grc_reg_change.user or sn_grc.business_user roles granted.

    4. In the Due date field, specify the due date for the assessment completion.

    5. Select Send.

    In the Regulatory assessments related list in the regulatory alert record, the new regulatory assessments are listed.

  7. For Risk assessment, filter and select the entities to assess in the Evaluate risk impact dialog box.

    1. In the Filter by dropdown, select one of the following options:

      • Entities by Impacted Areas: Displays entities derived from impacted areas, including citations, control objectives, controls, policies, risk statements, and risks. These correspond to the records on the Impacted areas tab of the alert.
      • Entities by Recommendations: Displays entities derived from AI-recommended impacted areas, including citations, control objectives, controls, and policies. These correspond to the records on the Recommendations tab of the alert.
    2. Select the entities, and then, select Send.

      Ensure that the entity owners who are the risk assessors have the sn_grc.business_user and sn_risk_advanced.ara_assessor roles.

      In the Risk assessments tab in the regulatory alert record, the new risk assessments are listed.

Related topics

Update a regulatory assessment template

Search documentation
Search document titles and file paths on the australia branch