--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Assessment templates # Assessment templates reference {#ariaid-title1} Release version: Australia Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Assessment Templates Reference Assessment templates provided with the AI Risk and Compliance application in ServiceNow are delivered in a Draft state and must be published before use by users with the AI Risk and Compliance Admin role. These templates help organizations evaluate AI systems for risk, compliance with regulations such as the EU AI Act, and potential impacts on fundamental rights. AI case assessment templates are part of the AI Case Management application and published separately. Show full answer Show less ServiceNow updates these templates to support regulatory requirements timely but does not guarantee compliance, which remains the customer's responsibility. ## Key Features * **AI Impact Assessment:** Evaluates AI system impacts on individuals, society, and organizations using questionnaires that map responses to risk statements and control objectives. Requires configuration of automation rules for mapping. * **AI Impact Assessment for EU AI Act Conformity:** Assesses if an AI system falls under the EU AI Act, focusing on risk classification and transparency, guiding whether further governance is needed. * **EU AI Act Conformity Assessment:** Provides detailed evaluation of high-risk AI systems against EU AI Act requirements across multiple governance areas. * **Fundamental Rights Impact Assessment (FRIA):** Reviews potential effects of high-risk AI systems on fundamental rights before deployment, to identify and mitigate adverse impacts. * **High-risk AI Assessment Questionnaire:** Captures detailed data on AI systems flagged as potentially high risk to determine applicable governance and monitoring controls. * **AI Impact Assessment on AI Asset Inventory:** Evaluates risks of individual AI models, supporting governance when models are shared or have unique risk profiles. * **AI Case Assessment Questionnaire:** Standardizes evaluation of AI cases reported through various channels to assist in consistent investigation and root cause analysis. ## Practical Use and Roles * Templates are published via the Assessment Workspace by users with the appropriate administrative role. * Different roles are required to perform assessments, including AI asset owners, AI risk and compliance business users, analysts, and managers. * Template use is integrated into AI system lifecycle phases such as intake screening, assessment, conformity evaluation, and deployment review. ## Key Outcomes * Enables structured, consistent evaluation of AI risks and regulatory compliance within ServiceNow. * Supports governance decisions by providing actionable insights from assessments aligned with major regulations like the EU AI Act. * Facilitates identification of high-risk AI systems and fundamental rights impacts early in the AI lifecycle. * Improves case management and risk mitigation through standardized AI case assessments. Reference table listing the assessment templates installed with AI Risk and Compliance. Templates are delivered in Draft state and must be published before use. ## Assessment templates {#airc-assessment-templates-ref__section_assessment_templates} The following table lists assessment templates installed with AI Risk and Compliance. Templates are delivered in Draft state. A user with the AI Risk and Compliance Admin \[sn_grc_ai_gov.ai_risk_and_compliance_admin\] role publishes draft templates through the Assessment Workspace. For instructions, see [Assessment templates](https://www.servicenow.com/docs/t0PCxPupZs44JS1Ava6gpg "The AI Risk and Compliance application uses assessment templates to evaluate AI assets for risk, regulatory compliance, and ethical alignment."). AI case assessment templates are delivered as part of the AI Case Management application (`sn_ai_case_mgmt`) and are not included in AI Risk and Compliance base assessment templates. They are published through the same Assessment Workspace in a separate category. Note: Note: The ServiceNow Risk products help customers address regulatory requirements under various jurisdictions. However, we do not guarantee compliance and customers are ultimately responsible for their own compliance with applicable regulations. ServiceNow aims to provide software updates for new or updated major regulations and requirements within twelve to eighteen months of the regulation's publication. For regulations for which ServiceNow provides a level of support in the base system, ServiceNow aims to provide software updates for minor regulatory changes within 12 months and for major regulatory changes within up to 18 months depending on scope and impact. We differentiate between typical regulatory content updates, which do not require software updates or enhancements, and regulatory updates, which do require software updates or enhancements. Content updates are generally delivered on a shorter cadence than if software update or enhancement is required for the regulatory update or change. {#airc-assessment-templates-ref__table_assessment_templates__entry__5} | Name | Description | Applies to | Default state | When to use | |-|-|-|-|-| | AI impact assessment | Evaluates the potential impact of an AI system on individuals, society, and the organization. Identifies risks related to privacy, non-discrimination, fairness, and other fundamental rights using a questionnaire-based approach. Responses can be configured to map to risk statements and control objectives through Post Assessment Actions. Automation rules that drive this mapping must be configured by your organization; no pre-configured mapping rules are included. Role required: AI asset owner or AI risk and compliance business user \[sn_grc_ai_gov.ai_risk_and_compliance_business_user\]. | AI systems | Draft | After AI use case submission, during the Assess phase. | | AI impact assessment for EU AI Act conformity assessment | Evaluates whether an AI system may be subject to the EU Artificial Intelligence Act (AI Act). Focuses on risk classification, fundamental rights, safety, and transparency requirements. Assessment results determine whether additional governance activities are required, such as a full EU AI Act Conformity Assessment or a Fundamental Rights Impact Assessment (FRIA). Role required: AI asset owner or AI risk and compliance business user \[sn_grc_ai_gov.ai_risk_and_compliance_business_user\]. | AI systems | Draft | When an AI system may be subject to the EU AI Act, especially when high-risk classification is possible. | | EU AI Act Conformity Assessment | Provides a comprehensive evaluation of whether a high-risk AI system meets applicable EU AI Act requirements, including risk management, data governance, technical documentation, transparency, human oversight, accuracy, and robustness. Role required: AI risk and compliance analyst \[sn_grc_ai_gov.ai_risk_and_compliance_analyst\] or AI risk and compliance manager \[sn_grc_ai_gov.ai_risk_and_compliance_manager\]. | AI systems | Draft | After initial EU AI Act assessment classifies the system as high risk, and before pre-deployment review. | | Fundamental Rights Impact Assessment (FRIA) | Evaluates how a high-risk AI system may affect fundamental rights such as privacy, non-discrimination, freedom of expression, access to justice, and human dignity. Complete the FRIA before deployment to document and mitigate potential adverse effects. Role required: AI risk and compliance analyst \[sn_grc_ai_gov.ai_risk_and_compliance_analyst\] or AI risk and compliance business user \[sn_grc_ai_gov.ai_risk_and_compliance_business_user\]. | AI systems | Draft | After conformity assessment identifies potential fundamental rights implications and before deployment. | | High-risk AI assessment questionnaire | Captures detailed information for AI systems flagged as potentially high risk, including design, data handling, decision-making, and potential harms. Results determine which governance controls, monitoring requirements, and review processes apply throughout the AI system's life cycle. Role required: AI asset owner or AI risk and compliance business user \[sn_grc_ai_gov.ai_risk_and_compliance_business_user\]. | AI systems | Draft | When an AI system is flagged as potentially high risk during intake screening or impact assessment. | | AI Impact Assessment on AI asset inventory | Evaluates risks associated with a specific AI model independent of its parent AI system. Supports model-level governance when a model is shared across systems or has a distinct risk profile. Role required: AI asset owner or AI risk and compliance analyst \[sn_grc_ai_gov.ai_risk_and_compliance_analyst\]. | AI models | Draft | When a model requires independent governance evaluation (for example, a shared model or one with distinct risk factors). | | AI case assessment questionnaire | Provides a standardized evaluation framework for AI cases reported through the AI Risk and Compliance Workspace, Employee Center, or email. Supports consistent evaluation, case prioritization, and root cause analysis. Delivered with AI Case Management (`sn_ai_case_mgmt`). Role required: AI case analyst \[sn_ai_case_mgmt.ai_case_analyst\] or AI risk and compliance analyst \[sn_grc_ai_gov.ai_risk_and_compliance_analyst\]. | AI cases | Draft | During the investigation phase, after the case is triaged and assigned to an analyst. | [Table 1. Assessment templates] {#airc-assessment-templates-ref__table_assessment_templates} **Related concepts** * [Assessment templates](https://www.servicenow.com/docs/t0PCxPupZs44JS1Ava6gpg "The AI Risk and Compliance application uses assessment templates to evaluate AI assets for risk, regulatory compliance, and ethical alignment.") **Related reference** * [Risk assessment methodologies reference](https://www.servicenow.com/docs/FbLkKbdklzzRb6wISj~ALQ "Reference table listing the default risk assessment methodologies (RAMs) installed with AI Risk and Compliance. RAMs define the scoring frameworks, classification criteria, and contributing factors used to evaluate risks associated with AI assets.")