AI cases and inquiries
Summarize
Summary of AI Cases and Inquiries
The AI Case Management application supports AI Risk and Compliance (AIRC) by providing a structured approach to report, track, and manage AI-related concerns and inquiries. This ensures alignment with organizational policies and regulatory requirements throughout the AI life cycle. Users can access AI cases and inquiries through the AI Risk and Compliance dashboard.
Show less
Key Features
- Intake Types: AI cases report observed concerns or risks, while AI inquiries seek guidance on AI systems and governance.
- Submission Process: Business users submit cases and inquiries via the Employee Center, including relevant details to aid review.
- Anonymous Reporting: Organizations can enable anonymous case submissions to enhance participation in governance.
- Case Management: Analysts assess and manage cases in the AI Risk and Compliance Workspace, which includes oversight by managers to coordinate follow-ups and prioritize tasks.
- Role-Based Access: Access to submit and manage cases is defined by roles to maintain security and clear responsibilities.
Key Outcomes
Utilizing AI cases and inquiries allows organizations to effectively manage AI-related risks and ensure compliance with governance standards. By facilitating anonymous reporting and structured case management, organizations can enhance their AI governance efforts, drive accountability, and promote ethical AI usage across teams.
AI cases and inquiries provide a structured way to report, track, and manage AI-related concerns and questions as part of AI governance in AI Control Tower and AI Risk and Compliance.
AI cases and inquiries overview
The AI Case Management application is used as part of AI Risk and Compliance (AIRC). It provides the workflows used to review, investigate, and respond to AI‑related risks, incidents, and governance questions associated with AI systems, models, and datasets governed in AI Control Tower (AICT). AI cases and inquiries help identify potential issues, capture governance signals, and ensure that AI systems align with organizational policies, regulatory expectations, and ethical principles across the AI life cycle. You can view AI cases and inquiries from the AI Risk and Compliance dashboard.
AI cases and AI inquiries
AI cases and AI inquiries represent two related intake types used to capture AI-related input from users and stakeholders.
AI cases are typically used to report observed AI-related concerns, risks, incidents, or potential noncompliance. AI inquiries are used to ask questions or request guidance related to AI systems, acceptable usage, governance requirements, or next steps.
Submission and intake
AI Case Business Users [sn_ai_case_mgmt.ai_case_business_user] submit AI cases and inquiries through the Employee Center to report concerns or request guidance. Submissions include descriptive information that helps reviewers understand context, such as the AI system, model, or dataset involved, observed behavior or concern, impacted users or business areas, and any supporting details or attachments. For more information, see Report an AI case from the Employee Center.
After upgrading to version 22.0.3 and installing the AI Case Management application, organizations can enable anonymous submission of AI cases through the Employee Center. Anonymous reporting supports broader participation in AI governance while protecting the identity of the reporter.
Before an anonymous report is saved, all free‑text fields in the forms (such as case type, summary, business unit, and jurisdiction) are sanitized to accomplish the following.
- Remove HTML and embedded script or style content
- Restrict input to standard alphanumeric characters and basic punctuation
- Trim extra whitespaces
For more information, see Report an AI case anonymously, Follow up on a report from the Anonymous Reporting Center, and Anonymous Reporting Center.
Case management and follow-up
After submission, AI cases and inquiries are managed in the AI Risk and Compliance Workspace. AI Risk and Compliance analysts [sn_ai_case_mgmt.ai_case_analyst] review case details, investigate reported issues, assess potential impact, and work assigned governance tasks.
AI Risk and Compliance managers [sn_grc_ai_gov.ai_risk_and_compliance_manager] who inherit the AI case manager [sn_ai_case_mgmt.ai_case_manager] role oversee case status, prioritize work, and coordinate follow-up across governance teams. Cases can result in tasks, identification of impacted areas such as policies or regulations, and the creation of related issues to support remediation, escalation, or ongoing governance activities across the AI life cycle.
Roles and access
Access to create and manage AI cases and inquiries is controlled through roles that support separation of duties and least-privilege access.
Business users focus on reporting concerns and requesting guidance. Analysts and managers focus on investigation, assessment, coordination, and oversight. AI stewards [sn_ai_governance_ai_steward] and other governance stakeholders, such as security, legal, privacy, or data governance teams, contribute expertise and perform review or remediation tasks as needed.
Governance stakeholders participate in case review and investigation activities without owning business outcomes or life cycle approval decisions.
For more information, see Roles installed with AI Risk and Compliance.