Foundations of AI Governance
Summarize
Summary of Foundations of AI Governance
TheFoundations of AI GovernanceAccelerator offers essential guidance for ServiceNow customers to establish and manage an Artificial Intelligence Management System (AIMS) aligned with ISO/IEC 42001 standards. It serves as the introductory step in a three-part series designed to help organizations progress their AI governance maturity through introduction, adoption, and auditing of their AIMS. This Accelerator is included in the Impact Guided+ (Strategic Value or Platform Governance), Advanced, and Total packages.
Show less
The program aims to equip customers with core principles, terminology, and best practices, enabling them to confidently approach AI governance and align AI initiatives with organizational risk and compliance frameworks.
Key Features
- Introductory Customer Session (up to 1 hour): Covers the definition and benefits of an AIMS, stakeholder expectations, AI governance vocabulary, principle drafting, and maturity evaluation.
- Customer Coaching Session (up to 1 hour): Facilitates use case brainstorming, risk triage, boundary mapping, defining success and safety criteria, pilot selection, and planning next steps.
- Optional Follow-Up Session (up to 1 hour): Provides opportunity for additional Q&A and guidance on leading practices in AI governance.
Customer Roles and Responsibilities
Successful AI governance requires engagement from multiple stakeholders with defined responsibilities:
- Platform Owner: Oversees the ServiceNow platform, ensures alignment with business strategy and governance.
- Executive Sponsor: Champions AI governance principles, secures resources, and drives stakeholder engagement.
- System Administrator(s): Maintains platform stability, manages application support, and handles configuration tasks.
- AI, Risk Management, and Governance Stakeholders: Learn AI governance terminology and concepts, align AI initiatives with organizational risk and governance frameworks.
- Trusted Service Partner(s): Participate in coaching sessions to understand best practices and support ongoing governance activities.
Information and Access Required from Customers
To effectively implement AI governance, customers need to provide:
- Organizational scope, AI business context, and objectives including regulated markets and AI use case boundaries.
- Details on existing management systems and certifications to align with (e.g., ISO 27001, SOC 2).
- Governance structure including executive sponsors, product owners, committees, and escalation paths.
- Stakeholder expectations and any existing trust or safety commitments.
- Risk and compliance posture, applicable laws and regulations, known AI incidents, risk appetite, and frameworks in use (e.g., ISO 31000, NIST AI RMF).
Important Notes
- ServiceNow provides guidance but does not implement AI governance recommendations.
- No guarantees are made regarding strategic outcomes from this engagement.
This Accelerator provides foundational guidance on establishing and managing an Artificial Intelligence Management System (AIMS).
Accelerator Overview
Foundations of AI Governance introduces Impact customers to the core principles and vocabulary of Artificial Intelligence Management System (AIMS) as defined by ISO/IEC 42001. Designed as the entry point for customers seeking to advance their AI governance maturity, this session will work as part one of a three-part series where we introduce, adopt, then audit customer AIMS as part of a comprehensive consulting solution. It also includes key resources and leading practice guides to help them approach AI governance with confidence.
Package Availability
Prerequisites
Customer has identified the necessary stakeholders who can discuss AI governance with confidence.
What You Get
- Introductory Customer Session (Up to 1 hour)
- Includes the following:
- What is an AIMS?
- Why implement one?
- Review stakeholder expectations
- Vocabulary overview
- Principles drafting
- Maturity evaluation
- Customer Coaching Session (Up to 1 hour)
- Session includes:
- Use case brainstorm
- Risk triage
- Light boundary mapping
- Success & safety criteria
- Pilot selection
- Next steps
- Follow-Up Customer Session (optional upon Customer request - up to 1 hour)
-
- Opportunity for Questions and Answers related to AI Governance
- Provide additional guidance on leading practices
Requested Customer Resources
| Customer Resource | Responsibilities | Required | Recommended |
|---|---|---|---|
| Platform Owner | Responsible for the overall accountability of the ServiceNow platform. Provides leadership and oversight to the System Administrators, ensures team alignment to business strategy and the ServiceNow roadmap, and is actively involved in the overarching governance of the platform. | ✓ | |
| Executive Sponsor | Set direction and purpose, champion principles, provide cover & resources, bridge to stakeholders, create momentum. | ✓ | |
| System Administrator(s) | Maintains the stability and usability of the ServiceNow platform. Performs application maintenance, manages support for cases related to ServiceNow applications. Contributes to ServiceNow software releases by delivering configuration tasks and features. | ✓ | |
| AI Stakeholder(s) | Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for aligning current AI use cases with information provided. | ✓ | |
| Risk Management Stakeholder(s) | Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for aligning with Risk Management practices across the org. | ✓ | |
| Governance Stakeholder(s) | Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for advancing Governance initiatives. | ✓ | |
| Trusted Service Partner(s) | Attends ServiceNow Impact Accelerator coaching session(s) to understand leading practices and potentially support customer going forward. | ✓ |
Requested Information / Access
- Organization & scope
- Business context and objectives for AI (where value/risk sits), geographies served, regulated markets.
- Desired initial AIMS scope (org units, products, services) and any out-of-scope areas.
- Existing management systems/certifications (for example, ISO 27001/27701, SOC 2, QMS) we can align to.
- Governance & people
- Executive sponsor, product owners, risk/compliance, privacy, security, legal, data science/ML, IT ops—names and roles (RACI if you have one).
- Existing committees/charters (ethics board, model risk committee), decision rights, and escalation paths.
- Stakeholders & expectations
- Internal/external stakeholders (customers, regulators, employees, impacted communities) and their top expectations/concerns.
- Any trust/safety commitments already made publicly or contractually.
- Risk & compliance posture
- Applicable laws/regimes you care about (for example, sectoral rules, state privacy laws, EU AI Act mapping if relevant) and current gap analyses.
- Known AI incidents/near misses, complaints, or audit findings; current risk taxonomy and appetite/tolerances.
- Frameworks already in play (ISO 31000, ISO/IEC 23894, NIST AI RMF).
Exclusions
- ServiceNow is not responsible for implementing Foundations of AI Governance recommendations.
- ServiceNow does not guarantee any strategic outcomes from this engagement.