--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # AI risk heatmap workbench # AI risk heatmap workbench {#ariaid-title1} Release version: Australia Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of AI risk heatmap workbench The AI risk heatmap workbench in ServiceNow provides a visual matrix to display assessed AI risks using color-coded cells. It helps you quickly identify areas with higher risk concentrations among AI assets and compare the current and intended risk postures. The heatmap is generated from completed AI risk assessments and reflects calculated risk data based on the selected risk assessment methodology (RAM) configured in your instance. Show full answer Show less ## Key Features * **Risk Visualization:** The heatmap uses a matrix format with axes and segmentation defined by your chosen view, such as likelihood versus impact or inherent risk versus control effectiveness. * **Risk Posture Views:** You can analyze different risk states: * **Inherent Risk:** Risk exposure before controls are applied. * **Residual Risk:** Risk exposure after controls are applied. * **Target Risk:** The future desired risk posture after planned treatments. * **Color-Coded Risk Ratings:** Cells are colored based on risk ratings configured in your instance, making it easy to spot high-risk AI assets. * **Drill-Down Capability:** Selecting a heatmap cell shows a list of risks in that category with details like risk score, rating, owner, and associated entity. You can open full risk records and search or paginate through the list. * **Filtering Options:** Filters allow tailoring the heatmap display by risk assessment methodology, AI asset/entity, risk subsets (top risks or all risks), and risk posture views. * **Saved Filters and Export:** Save filter configurations for reuse and export heatmap data per your instance settings. ## Practical Benefits for ServiceNow Customers This workbench enables AI risk managers to: * Gain immediate insight into the risk landscape of AI assets by visualizing concentrations of risk. * Compare inherent, residual, and target risk postures to support informed decision-making and risk treatment planning. * Quickly access detailed risk data behind heatmap cells for investigation and action. * Customize risk views and filters to focus on the most relevant AI assets and risk assessment methodologies applicable to their organization. By leveraging the AI risk heatmap workbench, organizations can more effectively monitor, communicate, and manage AI risks within their ServiceNow AI Risk and Compliance governance framework. Use the AI risk heatmap workbench to visualize assessed AI risks in a color-coded matrix. The heatmap helps you identify concentrations of higher-risk AI assets and compare current and intended risk posture. The AI risk heatmap workbench displays risks derived from completed AI risk assessments. The heatmap visualizes calculated risk data produced by the selected risk assessment methodology (RAM). Heatmap structure, scoring ranges, and rating thresholds are defined by your instance risk configuration. You can use the heatmap to analyze different risk postures, including inherent, residual, and target risk, depending on the selected view. Figure 1. AI risk heatmap ## How risk is represented {#ai-risk-heatmap-workbench__section_calc_logic} The heatmap visualizes assessed AI risks in a matrix format. The axes and segmentation used depend on the selected View risk by option. Inherent risk : Displays risk exposure before any controls are applied. In this view, risks are typically positioned by likelihood and impact. Residual risk : Displays risk exposure after current controls are applied. In this view, risks are positioned based on inherent risk and control effectiveness. Target risk : Displays the intended future risk posture, representing where the organization aims to be after planned risk treatment actions and control improvements are implemented. Each cell in the heatmap is color-coded based on the risk rating configured for the corresponding score range. Availability and meaning of target risk values depend on the configuration of the selected risk assessment methodology. The heatmap reflects calculated risk assessment data and updates when risk scores are recalculated by the system. ## Drill-down {#ai-risk-heatmap-workbench__section_drilldown} Select a heatmap cell to view the list of risks included in that classification. The List panel shows the risks that correspond to the selected heatmap cell. Each risk entry displays key details such as risk rating, score, identifier, name, owner, and associated entity. Select a risk entry to open the full risk record. * Use the search field to locate a specific risk within the current results. * Use the pagination controls to navigate through the list. * Use the actions menu on a risk to access additional options, depending on configuration. ## Filters {#ai-risk-heatmap-workbench__section_filters} Use the filter bar to control which risks appear in the heatmap. Risk assessment methodology : Select the risk assessment methodology (RAM) used to generate the risk data displayed in the heatmap. For information about the pre-shipped RAMs and risk ratings defined for AI assets, see [Risk assessment methodologies](https://www.servicenow.com/docs/80vrGOfBZeOmYFHe0iJYeA "The AI Risk and Compliance application uses risk assessment methodologies (RAMs) to define the scoring frameworks and classification criteria used during risk assessments."). Top risks : Limit the heatmap view to a subset of risks or select Show all to display all risks. Entity : Filter risks by the AI asset or entity they are associated with. View heatmap by : Select how risks are labeled within the heatmap cells, such as by risk name. View risk by : Select which risk posture to visualize: * Inherent * Residual * Target Select Filter overview to view or modify advanced filter conditions. ## UI elements {#ai-risk-heatmap-workbench__section_ui_elements} List tab : Displays the drill-down list of risks for the selected heatmap cell or for the current filter set. My saved filters : Displays filter configurations you have saved for reuse. Filter icons : Use the filter icons above the heatmap to open filter options or export data, depending on your instance configuration. Note: To understand more about configuring the heatmap and its filters, refer to [Configure risk heatmaps](https://www.servicenow.com/docs/idZC8asz1BsqZgW~jTaT0g "Within a risk assessment methodology (RAM), configure the heatmap visualization for inherent and residual assessments. Use different heatmaps for different risk assessment methodologies."). **Related concepts** * [AI Risk and Compliance workspace](https://www.servicenow.com/docs/GWra97fbuMSeap4RZObPLQ "The AI Risk and Compliance workspace is the central hub for AI risk and compliance managers to monitor risk posture, track assessments, manage controls and issues, and oversee AI cases across the enterprise.") **Related tasks** * [Perform risk assessments on AI systems](https://www.servicenow.com/docs/K0tsT4exWDorFxIz_fiXaQ "Perform risk assessments on AI systems to evaluate the likelihood and impact of potential risks using the AI Risk and Compliance application.") * [Initiate risk assessment on AI asset](https://www.servicenow.com/docs/39tz7ucci~8Nti9owhzwZw "Initiate risk assessment to enable the risk assessor to perform risk assessments on AI systems, evaluating the likelihood and impact of potential risks.") * [Create bulk risk assessment](https://www.servicenow.com/docs/yJSyiJhz3WbWQ1d62LT6iQ "Create a bulk risk assessment project to perform assessments on multiple risks and controls simultaneously using the AI Risk and Compliance workspace. You can define the project context, including the assessable entity, Risk assessment methodology (RAM), project name, description, and identify and add stakeholders.")