Identify risks for an entity using ServiceNow Otto for IRM
Identify and consolidate risks using the Risk Suggestion AI agent through a conversational assistant. This feature helps streamline risk discovery, eliminate duplicates, and provide a comprehensive list of risks relevant to the entity.
Before you begin
Role required: sn_grc_sharegenai.risk_suggestion_aiagent_user
The following prerequisites must be met to use this feature:
- ServiceNow Otto for IRM and any Workspace must be installed.
- Suggest potential risks workflow and Risk Suggestion AI agent must be activated. For more information, see Activate agentic workflows in ServiceNow Otto for Integrated Risk Management (IRM).
Procedure
-
Navigate to All > Risk > Risk Workspace.
You can also navigate to your required Workspace.
-
Select the list [Omitted image "list-icon.png"] Alt text: icon.
-
From the list, navigate to Library > Entities.
-
Select the entity to identify potential risks.
-
Navigate to the Risks tab and select Suggested risks.
-
Select the Suggest risks button.[Omitted image "suggest-risks.png"] Alt text: Suggest risks button.
A conversational assistant opens within the Now Assist panel.
-
Interact with the conversational AI agent by responding to its questions to identify potential risks.[Omitted image "risk-suggestion-ai-agent.png"] Alt text: Now Assist panel displaying the conversational chat.
The agent automatically pulls the entity context, guides you through risk domain selection, and surfaces relevant risks from internal, industry, and external sources. During this process, it automatically removes any duplicate suggestions that exist. After selecting risk types, you can provide additional context to refine search results, with the agent dynamically asking follow-up questions when needed.
-
Review the consolidated list of suggested risks in the panel before proceeding.
-
Choose whether to add risks to the suggested risks section when prompted.
Before adding risks to the suggested risks section, you can review and modify suggested risks by updating descriptions, renaming risks, or removing items from the list.
If you select Yes, the risks are added to the suggested risks section.
-
Review the listed risks for accuracy and make any necessary changes before creating them.[Omitted image "traige-risk-records.png"] Alt text: Suggested risk records
Risks identified from existing risk statements are listed under Risks from risk statements. Any newly identified risks are listed under the Ad-hoc risks type.
-
Choose the required risks and select Create risk.
The selected risks are added and appear in the Directly related risks section.
-
Select the Suggest risk button to repeat the process.
-
To delete the suggested risks, choose the required risks, and select Delete.
---
title: Identify risks for an entity using ServiceNow Otto for IRM
description: Identify and consolidate risks using the Risk Suggestion AI agent through a conversational assistant. This feature helps streamline risk discovery, eliminate duplicates, and provide a comprehensive list of risks relevant to the entity.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/governance-risk-compliance/grc-risk-management-workspace/identify-risks-for-entity.html
release: brazil
product: GRC: Risk Management Workspace
classification: grc-risk-management-workspace
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Suggest potential risks workflow, AI in Risk Management, Explore, Risk Management, Governance, Risk, and Compliance]
---
# Identify risks for an entity using ServiceNow Otto for IRM
Identify and consolidate risks using the Risk Suggestion AI agent through a conversational assistant. This feature helps streamline risk discovery, eliminate duplicates, and provide a comprehensive list of risks relevant to the entity.
## Before you begin
Role required: sn\_grc\_sharegenai.risk\_suggestion\_aiagent\_user
The following prerequisites must be met to use this feature:
- ServiceNow Otto for IRM and any Workspace must be installed.
- Suggest potential risks workflow and Risk Suggestion AI agent must be activated. For more information, see [Activate agentic workflows in ServiceNow Otto for Integrated Risk Management \(IRM\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/grc-common-functions/activate-agentic-workflows.md).
## Procedure
1. Navigate to **All** > **Risk** > **Risk Workspace**.
You can also navigate to your required Workspace.
2. Select the list \[Omitted image "list-icon.png"\] Alt text: icon.
3. From the list, navigate to **Library** > **Entities**.
4. Select the entity to identify potential risks.
5. Navigate to the **Risks** tab and select **Suggested risks**.
6. Select the **Suggest risks** button.\[Omitted image "suggest-risks.png"\] Alt text: Suggest risks button.
A conversational assistant opens within the Now Assist panel.
7. Interact with the conversational AI agent by responding to its questions to identify potential risks.\[Omitted image "risk-suggestion-ai-agent.png"\] Alt text: Now Assist panel displaying the conversational chat.
The agent automatically pulls the entity context, guides you through risk domain selection, and surfaces relevant risks from internal, industry, and external sources. During this process, it automatically removes any duplicate suggestions that exist. After selecting risk types, you can provide additional context to refine search results, with the agent dynamically asking follow-up questions when needed.
8. Review the consolidated list of suggested risks in the panel before proceeding.
9. Choose whether to add risks to the suggested risks section when prompted.
Before adding risks to the suggested risks section, you can review and modify suggested risks by updating descriptions, renaming risks, or removing items from the list.
If you select **Yes**, the risks are added to the suggested risks section.
10. Review the listed risks for accuracy and make any necessary changes before creating them.\[Omitted image "traige-risk-records.png"\] Alt text: Suggested risk records
Risks identified from existing risk statements are listed under Risks from risk statements. Any newly identified risks are listed under the Ad-hoc risks type.
11. Choose the required risks and select **Create risk**.
The selected risks are added and appear in the **Directly related risks** section.
12. Select the **Suggest risk** button to repeat the process.
13. To delete the suggested risks, choose the required risks, and select **Delete**.
This file has no frontmatter.