Governing AI asset risk and compliance

  • Release version: Zurich
  • Updated July 21, 2026
  • 1 minute to read

    • Get a consolidated view of your AI asset's regulatory risk classification, compliance posture, control effectiveness metrics, and governance artifacts from the Risk & compliance tab.

    When you open an AI asset record, the Risk & compliance tab provides a consolidated view of regulatory risk classification, compliance posture, control effectiveness metrics, and associated governance tasks.

    Risk and Compliance tab showing regulatory risk classification, compliance posture, aggregated risk rating, risk heat map, and governance sections.
    The following table describes each section of the Risk & Compliance Asset page.
    Table 1. Risk & Compliance asset page sections
    Section What it displays Status breakdown Roles required
    Regulatory risk classification Regulatory risk classification of the asset in the portfolio. For more information, see Reviewing regulatory classification and compliance status
    • Low
    • Medium
    • High
    • Unacceptable
    • Critical
    • To be determined
    		 sn_ai_governance.ai_steward
    Compliance score Overall compliance score for the AI asset and trend information over time. The score reflects the asset's compliance with adopted frameworks and policies. 0-100% sn_ai_governance.ai_steward
    Compliance posture for priority frameworks
    • Compliance scores for AI assets compared to adopted frameworks and policies.
    • Compliance status for priority frameworks showing the number of compliant and non-compliant controls associated with the AI asset. The progress indicator shows compliant and non-compliant controls and displays an alert badge for high priority issues. Toggle between Authority documents and Policies to view detailed information.
    For more information, see Reviewing regulatory classification and compliance status
    • Conforming
    • Non-conforming
    • To be determined
    		 sn_ai_governance.ai_steward
    Aggregated risk rating Aggregated risk rating for the AI asset, including residual risk, inherent risk, and control effectiveness metrics.
    • High
    • Medium
    • Low
    		 sn_ai_governance.ai_steward
    Risk heat map Identified risks associated with the AI asset. By default, the risk heat map applies the Residual risk filter, but you can filter the heat map by Inherent risk. Segmentation changes based on the selected filter. Risks appear under the respective combination of risk and control effectiveness, or impact and likelihood, depending on the selected risk classification filter. The risk heat map consists of the following parameters along the X and Y axes:
    • Residual risk
      • Inherent risk (X-axis)
        • Low
        • Medium
        • High
      • Control effectiveness (Y-axis)
        • Effective
        • Needs improvement
        • Ineffective
    • Inherent risk
      • Impact (X-axis)
        • Low
        • Medium
        • High
        • Critical
      • Likelihood (Y-axis)
        • Unlikely
        • Likely
        • Highly likely
        • Almost certain
    		 sn_ai_governance.ai_steward
    Governance Risk assessments, controls, compliance tasks, and related governance artifacts for the AI asset. Governance-related items are organized into categories with expandable subsections. Select an artifact to open it in the AI Control Tower workspace. For more information, seeGoverning AI asset risk and compliance. NA sn_ai_governance.ai_steward