---
title: Review action plan
description: Review the remediation tasks created for the controls or risks associated with cybersecurity activities. You can only edit or update action plans if you have sufficient privileges for the GRC suite.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-common-functions/review-action-plan.html
release: australia
product: GRC Common Functions
classification: grc-common-functions
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Align and prioritize cybersecurity activities, Process overview, NIST CSF Use Case Accelerator, GRC use case accelerators, Common GRC features, Governance, Risk, and Compliance]
---

# Review action plan

Review the remediation tasks created for the controls or risks associated with cybersecurity activities. You can only edit or update action plans if you have sufficient privileges for the GRC suite.

## Before you begin

Policy and Compliance Management Role required: admin

NIST CSF role required: sn\_irm\_nist\_csf.risk\_executive or sn\_irm\_nist\_csf.security\_officer or sn\_irm\_nist\_csf.control\_provider

## About this task

Action plans are typically created in the ServiceNow® GRC product through the Policy and Compliance Management, Risk Management, or Audit Management applications.

## Procedure

1.  Navigate to **All** > **NIST CSF** > **Framework Profiling** > **Action Plan**.

2.  Search for an action plan using parameters, such as issue, control, or risk, that are associated it.

3.  Open the record.

4.  Review the action plan.


**Parent Topic:**[Align and prioritize cybersecurity activities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/align-prioritize-activities.md)