Complete action tasks and report regulatory incidents
Report incidents or security incidents associated with multiple regulations for various legal entities. The automated workflow generates regulatory reporting assessments of IT incidents, and Digital resilience incident (DRI) Initial, Intermediate, and Final reports, all within regulatory timelines. Complete the action tasks and generate reports in Microsoft Word format, as required by regulatory authorities for analysis.
Before you begin
Role required: sn_oper_res.manager
About this task
Note: The regulation status, previously a field on the Digital resilience incident reporting (DRIR) case form, is now displayed within the Regulations related list.
Procedure
-
Navigate to Workspaces > Operational Resilience Workspace > Digital resilience incident reporting > All incident reporting cases and open the incident reporting case from the list that you want to work on.
From the Digital resilience incident reporting (DRIR) cases in the instance, DRI0001003 is selected for this example.
[Omitted image "drir-cases-created-opres.png"] Alt text: Cases.
Its automated workflow generates the Regulatory reporting assessment of IT incidents, DRI Initial report, DRI Intermediate report, and DRI Final report action tasks.
-
Review the incident record's 'Action tasks' and 'Regulations' related lists for assigned tasks and mapped regulations.
The examples show that an action task is assigned automatically.
[Omitted image "ent-acer-w-dora-regulation.png"] Alt text: Action task is assigned automatically to the case.
A regulation is mapped to the case.
[Omitted image "ent-acer-w-dora-regulation-mapped.png"] Alt text: Regulation is mapped to the case.
-
Review the details of the Digital resilience incident reporting case and verify that the owner of the case is a member of the assignment group.
A sample Digital resilience incident reporting incident is shown. The source is Incident, the source record is in the New state (Incident INC0010005), and the date of discovery is listed. The case is assigned to the 'Digital Resilience Incident Managers' assignment group.
[Omitted image "inci-assigned.png"] Alt text: Incident assigned.
-
As a Digital Resilience Incident Manager, log in to the case record, assign it to an analyst from your group, and select Save.
The example shows that an analyst, Opres manager01, is assigned to the 'Digital resilience incident reporting: Facility issue' case.
[Omitted image "dri-case-to-analyst.png"] Alt text: Case assigned.
As the assigned analyst, you can begin working on the action tasks.
-
Open the first action task in the case, verify that it’s assigned to a user, and update the state of the action task to Assigned.
The example shows that the 'Regulatory reporting assessment of IT incidents' action task is updated to the Assigned state.
[Omitted image "update-state-assigned.png"] Alt text: Action task state is updated.
[Omitted image "act-task-assigned.png"] Alt text: Action task is in the assigned state.
-
Select View assessment, select Start in the assessment section of the action task, and respond to the questions in the assessment template.
Note: The View assessment UI action is displayed only when the action task is in the Assigned state.
As an analyst, you can start the assessment as shown in the example.
[Omitted image "asmt-section-of-action-task.png"] Alt text: Start the assessment.
Sample assessment questions and answers are shown in the example.
Note: You can trigger the assessment from an incident or a security incident.
[Omitted image "act-t1-asmt-q.png"] Alt text: Sample assessment questions and answers.
Note: Answers to matching questions are automatically carried forward (auto-filled) from one report to the next, for example, from the DRI Initial report to the DRI Intermediate report, and then to the DRI Final report. Reference-type questions are an exception - their answers are not carried forward, and you must answer them again on each report.
-
Manage who works on the assessment.
-
To bring in additional users to complete portions of the assessment, select Manage next to Contributors.
-
To hand off the action task to a different user, select Reassign.
Digital resilience incident reporting assessment instances uptake the contributor and collaborator capability from the shared Smart Assessment Engine, similar to how collaborators are used in the Operational Resilience risk assessment workflow.
Both the Manage contributors and Reassign dialogs list only users who have been assigned a DRIR role. The system automatically filters the user list to display only those with the appropriate DRIR role for the assessment. If a user you expect isn't listed, verify the following details:
- Confirm with your administrator that the user has been granted the required DRIR role (sn_dri_inc_rptg.digital_resilience_incident_user or equivalent).
- Confirm that the user's role assignment is active in your instance. Note: Role-based user filtering is managed through Smart Assessment. It is applied automatically when you open the contributor or reassign dialogs.
[Omitted image "drir-manage-contributors.png"] Alt text: Manage contributors dialog on a DRIR action task, listing users filtered to those with DRIR roles. [Omitted image "drir-reassign-contributors.png"] Alt text: Reassign dialog on a DRIR action task, showing the Reassign to field.
Contributors and collaborators added to the assessment are notified automatically so they know a questionnaire is waiting for them. For details on these notifications and the access that governs adding or reassigning a contributor, see Roles installed with Digital resilience incident reporting.
-
-
To submit the responses to the questions, select Submit and respond to the confirmation message by selecting Submit again.
The assessment submission form is shown in the example.
[Omitted image "act-task-submit-asmt.png"] Alt text: Submit the assessment.
When you complete the assessment, its state is shown as Completed in the Assessment tab.
[Omitted image "act-task-asmt-comp.png"] Alt text: Assessment completed.
The assessment is pending for review and the state is updated to Review as shown in the action task.
[Omitted image "act-task-asmt-pending-review.png"] Alt text: Pending for review.
Once the assessment is submitted, the regulation status is updated to 'Reportable' as shown in the Regulations related list.
[Omitted image "regu-reportable.png"] Alt text: Reporting status is updated to Reportable.
In this example, the action task CCT002001 is in the 'Review' state, while CCT002002 for 'DRI Initial report' has been created automatically.
[Omitted image "act-t2-created.png"] Alt text: Second action task is created.
-
As a reviewer of the action task, log in and complete the review.
-
Assign the second action task, 'DRI Initial report', to a user from the assignment group, update its state to Assigned, and select View assessment to respond to the assessment.
-
Complete the review and submit the assessment for the 'DRI Initial report' action task.
The next action task, 'DRI Intermediate report' is created automatically.
-
Assign the 'DRI Intermediate report' action task to a user from the assignment group and update its state to Assigned.
Respond to the questions, complete the review, and submit the assessment.
Starting with Digital resilience incident reporting Release 22.0.x, export capabilities for DRIR case tasks are enhanced. Export options are now consolidated into a unified Export drop-down, replacing the previous separate buttons to support multiple formats.
Note: The export functionality is available only for assessment-type action tasks.
When you navigate to an assessment action task, you can access the export options as shown in the example.
- Generate MS Word: Creates a Microsoft Word document of the assessment.
- Export Excel: Displays the assessment sections in separate sheets in Microsoft Excel, with questions as column headers and their respective answers in the columns.
- Export JSON: Provides a JSON structure with question-and-answer pairs in key-value format, ideal for automated systems and integrations. [Omitted image "dri-act-task-asmts-export-options.png"] Alt text: Options to export the action task reports.
Select a format from the Export drop-down, enter a file name, and save—the report downloads automatically. This enhancement streamlines your workflow for regulatory reporting, documentation, and compliance purposes.
The next action task, 'DRI Final report' is created automatically.
-
Assign the 'DRI Final report' action task to a user from the assignment group and update its state to Assigned.
Respond to the questions, complete the review, and submit the assessment.
The action task, 'DRI Final report' is complete.
You have now completed all action tasks required for reporting the incident or security incident mapped to the regulation.
-
To export the action task report to your local drive, select Export.
-
Select a format from the Export drop-down menu.
-
Enter a file name, and select Save.
Format options include the following:
- Generate MS Word: Creates a Microsoft Word document of the assessment.
- Export Excel: Displays the assessment sections in separate sheets in Microsoft Excel, with questions as column headers and their respective answers in the columns.
- Export JSON: Provides a JSON structure with question-and-answer pairs in key-value format, ideal for automated systems and integrations. Starting with Digital resilience incident reporting Release 22.0.x, export capabilities for DRIR case tasks are enhanced. Export options are now consolidated into a unified Export drop-down, replacing the previous separate buttons to support multiple formats.
Note: The export functionality is available only for assessment-type action tasks. This enhancement streamlines your workflow for regulatory reporting, documentation, and compliance purposes.
When you navigate to an assessment action task, you can access the export options as shown in the example.
[Omitted image "dri-act-task-asmts-export-options.png"] Alt text: Options to export the action task reports.
The report downloads automatically.
-
-
To generate the report of an action task in Microsoft Word format, select Generate MS Word.
Action task reports must be generated in Microsoft Word format as required by regulatory authorities for analysis. When you select the Generate MS Word UI action, the Generate report window is displayed.
-
In the Generate report window, choose the desired Word template in the Report template field.
-
Add the name of the report in the Name of report field.
The example shows the Word template and sample name of the report.
[Omitted image "act-task-word-report.png"] Alt text: Generate report UI action.
-
Select Generate.
A message is displayed that the report is being generated.
The action task report is generated in the Microsoft Word format. It includes information from the Details and Assessments tabs and attachments. It includes information such as form sections, questions, template sections, question answers, and attachment links as shown in the examples.
[Omitted image "word-rep-1.png"] Alt text: Word report sections.[Omitted image "word-rep-2.png"] Alt text: Details of Word report.
For information on Word templates and Template configurations, see Generating Microsoft Word reports using Document designer.
The generation of Microsoft Word reports, required by regulatory authorities for analysis in Digital resilience incident reporting, is completed with this step.
-
-
To generate a report using Microsoft Excel, select Export Excel.
The Microsoft Excel file and formats are shown in the example.
[Omitted image "drir-downloaded-excel-file.png"] Alt text: Excel.
-
To generate a report in JSON format, select Export JSON.
The example shows a report in JSON format.
[Omitted image "drir-downloaded-json-file-keypairs.png"] Alt text: JSON format.
-
To save the action task in the instance, select Save.
Saving the action task in the instance completes the required reporting workflow.
---
title: Complete action tasks and report regulatory incidents
description: Report incidents or security incidents associated with multiple regulations for various legal entities. The automated workflow generates regulatory reporting assessments of IT incidents, and Digital resilience incident \(DRI\) Initial, Intermediate, and Final reports, all within regulatory timelines. Complete the action tasks and generate reports in Microsoft Word format, as required by regulatory authorities for analysis.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/work-on-action-tasks.html
release: australia
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 8
breadcrumb: [Reporting incidents or security incidents for multiple regulations, Manage, Using Digital resilience incident reporting, Manage, Operational Resilience, Governance, Risk, and Compliance]
---
# Complete action tasks and report regulatory incidents
Report incidents or security incidents associated with multiple regulations for various legal entities. The automated workflow generates regulatory reporting assessments of IT incidents, and Digital resilience incident \(DRI\) Initial, Intermediate, and Final reports, all within regulatory timelines. Complete the action tasks and generate reports in Microsoft Word format, as required by regulatory authorities for analysis.
## Before you begin
Role required: sn\_oper\_res.manager
## About this task
**Note:** The regulation status, previously a field on the Digital resilience incident reporting \(DRIR\) case form, is now displayed within the Regulations related list.
## Procedure
1. Navigate to **Workspaces** > **Operational Resilience Workspace** > **Digital resilience incident reporting** > **All incident reporting cases** and open the incident reporting case from the list that you want to work on.
From the Digital resilience incident reporting \(DRIR\) cases in the instance, DRI0001003 is selected for this example.
\[Omitted image "drir-cases-created-opres.png"\] Alt text: Cases.
Its automated workflow generates the Regulatory reporting assessment of IT incidents, DRI Initial report, DRI Intermediate report, and DRI Final report action tasks.
2. Review the incident record's 'Action tasks' and 'Regulations' related lists for assigned tasks and mapped regulations.
The examples show that an action task is assigned automatically.
\[Omitted image "ent-acer-w-dora-regulation.png"\] Alt text: Action task is assigned automatically to the case.
A regulation is mapped to the case.
\[Omitted image "ent-acer-w-dora-regulation-mapped.png"\] Alt text: Regulation is mapped to the case.
3. Review the details of the Digital resilience incident reporting case and verify that the owner of the case is a member of the assignment group.
A sample Digital resilience incident reporting incident is shown. The source is Incident, the source record is in the New state \(Incident INC0010005\), and the date of discovery is listed. The case is assigned to the 'Digital Resilience Incident Managers' assignment group.
\[Omitted image "inci-assigned.png"\] Alt text: Incident assigned.
4. As a Digital Resilience Incident Manager, log in to the case record, assign it to an analyst from your group, and select **Save**.
The example shows that an analyst, Opres manager01, is assigned to the 'Digital resilience incident reporting: Facility issue' case.
\[Omitted image "dri-case-to-analyst.png"\] Alt text: Case assigned.
As the assigned analyst, you can begin working on the action tasks.
5. Open the first action task in the case, verify that it’s assigned to a user, and update the state of the action task to **Assigned**.
The example shows that the 'Regulatory reporting assessment of IT incidents' action task is updated to the **Assigned** state.
\[Omitted image "update-state-assigned.png"\] Alt text: Action task state is updated.
\[Omitted image "act-task-assigned.png"\] Alt text: Action task is in the assigned state.
6. Select **View assessment**, select **Start** in the assessment section of the action task, and respond to the questions in the assessment template.
**Note:** The **View assessment** UI action is displayed only when the action task is in the **Assigned** state.
As an analyst, you can start the assessment as shown in the example.
\[Omitted image "asmt-section-of-action-task.png"\] Alt text: Start the assessment.
Sample assessment questions and answers are shown in the example.
**Note:** You can trigger the assessment from an incident or a security incident.
\[Omitted image "act-t1-asmt-q.png"\] Alt text: Sample assessment questions and answers.
**Note:** Answers to matching questions are automatically carried forward \(auto-filled\) from one report to the next, for example, from the DRI Initial report to the DRI Intermediate report, and then to the DRI Final report. Reference-type questions are an exception - their answers are not carried forward, and you must answer them again on each report.
7. Manage who works on the assessment.
1. To bring in additional users to complete portions of the assessment, select **Manage** next to **Contributors**.
2. To hand off the action task to a different user, select **Reassign**.
Digital resilience incident reporting assessment instances uptake the contributor and collaborator capability from the shared Smart Assessment Engine, similar to how collaborators are used in the Operational Resilience risk assessment workflow.
Both the Manage contributors and Reassign dialogs list only users who have been assigned a DRIR role. The system automatically filters the user list to display only those with the appropriate DRIR role for the assessment. If a user you expect isn't listed, verify the following details:
- Confirm with your administrator that the user has been granted the required DRIR role \(sn\_dri\_inc\_rptg.digital\_resilience\_incident\_user or equivalent\).
- Confirm that the user's role assignment is active in your instance.
**Note:** Role-based user filtering is managed through Smart Assessment. It is applied automatically when you open the contributor or reassign dialogs.
\[Omitted image "drir-manage-contributors.png"\] Alt text: Manage contributors dialog on a DRIR action task, listing users filtered to those with DRIR roles. \[Omitted image "drir-reassign-contributors.png"\] Alt text: Reassign dialog on a DRIR action task, showing the Reassign to field.
Contributors and collaborators added to the assessment are notified automatically so they know a questionnaire is waiting for them. For details on these notifications and the access that governs adding or reassigning a contributor, see [Roles installed with Digital resilience incident reporting](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/roles-with-drir.md).
8. To submit the responses to the questions, select **Submit** and respond to the confirmation message by selecting **Submit** again.
The assessment submission form is shown in the example.
\[Omitted image "act-task-submit-asmt.png"\] Alt text: Submit the assessment.
When you complete the assessment, its state is shown as **Completed** in the **Assessment** tab.
\[Omitted image "act-task-asmt-comp.png"\] Alt text: Assessment completed.
The assessment is pending for review and the state is updated to **Review** as shown in the action task.
\[Omitted image "act-task-asmt-pending-review.png"\] Alt text: Pending for review.
Once the assessment is submitted, the regulation status is updated to 'Reportable' as shown in the Regulations related list.
\[Omitted image "regu-reportable.png"\] Alt text: Reporting status is updated to Reportable.
In this example, the action task CCT002001 is in the 'Review' state, while CCT002002 for 'DRI Initial report' has been created automatically.
\[Omitted image "act-t2-created.png"\] Alt text: Second action task is created.
9. As a reviewer of the action task, log in and complete the review.
10. Assign the second action task, 'DRI Initial report', to a user from the assignment group, update its state to **Assigned**, and select **View assessment** to respond to the assessment.
11. Complete the review and submit the assessment for the 'DRI Initial report' action task.
The next action task, 'DRI Intermediate report' is created automatically.
12. Assign the 'DRI Intermediate report' action task to a user from the assignment group and update its state to **Assigned**.
Respond to the questions, complete the review, and submit the assessment.
Starting with Digital resilience incident reporting Release 22.0.x, export capabilities for DRIR case tasks are enhanced. Export options are now consolidated into a unified Export drop-down, replacing the previous separate buttons to support multiple formats.
**Note:** The export functionality is available only for assessment-type action tasks.
When you navigate to an assessment action task, you can access the export options as shown in the example.
- **Generate MS Word**: Creates a Microsoft Word document of the assessment.
- **Export Excel**: Displays the assessment sections in separate sheets in Microsoft Excel, with questions as column headers and their respective answers in the columns.
- **Export JSON**: Provides a JSON structure with question-and-answer pairs in key-value format, ideal for automated systems and integrations.
\[Omitted image "dri-act-task-asmts-export-options.png"\] Alt text: Options to export the action task reports.
Select a format from the **Export** drop-down, enter a file name, and save—the report downloads automatically. This enhancement streamlines your workflow for regulatory reporting, documentation, and compliance purposes.
The next action task, 'DRI Final report' is created automatically.
13. Assign the 'DRI Final report' action task to a user from the assignment group and update its state to **Assigned**.
Respond to the questions, complete the review, and submit the assessment.
The action task, 'DRI Final report' is complete.
You have now completed all action tasks required for reporting the incident or security incident mapped to the regulation.
14. To export the action task report to your local drive, select **Export**.
1. Select a format from the **Export** drop-down menu.
2. Enter a file name, and select **Save**.
Format options include the following:
- **Generate MS Word**: Creates a Microsoft Word document of the assessment.
- **Export Excel**: Displays the assessment sections in separate sheets in Microsoft Excel, with questions as column headers and their respective answers in the columns.
- **Export JSON**: Provides a JSON structure with question-and-answer pairs in key-value format, ideal for automated systems and integrations.
Starting with Digital resilience incident reporting Release 22.0.x, export capabilities for DRIR case tasks are enhanced. Export options are now consolidated into a unified Export drop-down, replacing the previous separate buttons to support multiple formats.
**Note:** The export functionality is available only for assessment-type action tasks. This enhancement streamlines your workflow for regulatory reporting, documentation, and compliance purposes.
When you navigate to an assessment action task, you can access the export options as shown in the example.
\[Omitted image "dri-act-task-asmts-export-options.png"\] Alt text: Options to export the action task reports.
The report downloads automatically.
15. To generate the report of an action task in Microsoft Word format, select **Generate MS Word**.
Action task reports must be generated in Microsoft Word format as required by regulatory authorities for analysis. When you select the **Generate MS Word** UI action, the Generate report window is displayed.
1. In the Generate report window, choose the desired Word template in the **Report template** field.
2. Add the name of the report in the **Name of report** field.
The example shows the Word template and sample name of the report.
\[Omitted image "act-task-word-report.png"\] Alt text: Generate report UI action.
3. Select **Generate**.
A message is displayed that the report is being generated.
The action task report is generated in the Microsoft Word format. It includes information from the **Details** and **Assessments** tabs and attachments. It includes information such as form sections, questions, template sections, question answers, and attachment links as shown in the examples.
\[Omitted image "word-rep-1.png"\] Alt text: Word report sections.\[Omitted image "word-rep-2.png"\] Alt text: Details of Word report.
For information on Word templates and Template configurations, see [Generating Microsoft Word reports using Document designer](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/gen-word-reports.md).
The generation of Microsoft Word reports, required by regulatory authorities for analysis in Digital resilience incident reporting, is completed with this step.
16. To generate a report using Microsoft Excel, select **Export Excel**.
The **Microsoft Excel** file and formats are shown in the example.
\[Omitted image "drir-downloaded-excel-file.png"\] Alt text: Excel.
17. To generate a report in JSON format, select **Export JSON**.
The example shows a report in JSON format.
\[Omitted image "drir-downloaded-json-file-keypairs.png"\] Alt text: JSON format.
18. To save the action task in the instance, select **Save**.
Saving the action task in the instance completes the required reporting workflow.
| title | Complete action tasks and report regulatory incidents |
| description | Report incidents or security incidents associated with multiple regulations for various legal entities. The automated workflow generates regulatory reporting assessments of IT incidents, and Digital resilience incident \(DRI\) Initial, Intermediate, and Final reports, all within regulatory timelines. Complete the action tasks and generate reports in Microsoft Word format, as required by regulatory authorities for analysis. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/governance-risk-compliance/work-on-action-tasks.html |
| release | australia |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 8 |
| breadcrumb | Reporting incidents or security incidents for multiple regulationsManageUsing Digital resilience incident reportingManageOperational ResilienceGovernanceRiskand Compliance |