--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Content pack # AI Risk and Compliance Content Pack {#ariaid-title1} Release version: Australia Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of AI Risk and Compliance Content Pack The ServiceNow AI Risk and Compliance Content Pack offers foundational resources to help organizations manage risks and regulatory compliance related to artificial intelligence (AI). It provides a centralized platform to browse, search, and download AI regulations and frameworks, enabling customers to link these to their internal control objectives or risk statements and perform risk assessments efficiently. Show full answer Show less ## Key Features * **EU AI Act:** Covers 13 chapters and 113 articles outlining risk-based regulatory requirements for AI systems in the European Union. It classifies AI systems by risk level and mandates stricter controls for higher-risk systems, including risk management and human oversight. Authority documents and citations are included, though pre-mapped control objectives and risk statements are not provided. * **NIST AI Risk Management Framework (AI RMF):** Offers voluntary guidance for managing AI risks throughout the AI lifecycle, emphasizing governance, fairness, reliability, security, privacy, and transparency. It organizes controls into four functions---Govern, Map, Measure, and Manage---with preventive and detective controls addressing risks such as algorithmic bias and cybersecurity threats. * **Transparency in Frontier Artificial Intelligence Act (SB 53):** Focuses on safety and transparency requirements for frontier AI developers, including safety protocols and public disclosure obligations. The content pack includes authority documents, agency mappings, and citations. * **Colorado Artificial Intelligence Act (SB 205):** Establishes requirements for high-risk AI systems, including risk assessments, impact evaluations, and consumer disclosure. The pack provides relevant authority documents and mappings. ## Regulatory Support and Updates ServiceNow Risk products assist customers in addressing regulatory requirements across jurisdictions but do not guarantee compliance; customers remain responsible for their own compliance. The company aims to deliver software updates for major regulations within 12 to 18 months of publication, with minor updates targeted within 12 months. Content updates without software changes are typically provided on a shorter timeline. ## Next Steps for Customers * Install the AI Risk and Compliance Content Pack to access regulatory frameworks and controls. * Activate or update specific regulations within the ServiceNow platform, such as the NIST AI RMF, EU AI Act, Colorado AI Act, and Transparency in Frontier AI Act (SB 53). This content pack empowers ServiceNow customers to align AI risk management and compliance activities with current regulations and frameworks, enhancing governance and oversight of AI systems within their organizations. The ServiceNow AI Risk and Compliance Content Pack provides foundational content to help organizations manage AI-related risk and compliance. ## Content pack overview {#airc-content-pack__section_lg3_nrz_m3c} This application provides a centralized location to browse, search, and download AI regulations and frameworks to link to your internal control objectives or risk statements and run assessments against them. Currently, the application offers the following: EU AI Act : The EU AI Act is a regulatory framework that sets common rules for the use of artificial intelligence in the European Union. It follows a risk-based approach, classifying AI systems into unacceptable, high, limited, and minimal risk categories. Higher-risk AI systems are subject to stricter requirements such as risk management, transparency, human oversight, and ongoing monitoring. Authority documents and citations for the EU AI Act are available in the content pack. Pre-shipped control objective and risk statement mappings are not included for the EU AI Act. The EU AI Act content is structured into 13 chapters and contains 113 articles covering risk-based regulatory requirements for AI systems. NIST AI RMF : The NIST AI Risk Management Framework (AI RMF) provides voluntary guidance for managing risks associated with AI systems throughout their lifecycle. It focuses on building trustworthy AI by addressing risks related to governance, fairness, reliability, security, privacy, and transparency. The framework is organized around four core functions: Govern, Map, Measure, and Manage. Preventive controls dominate in Govern, Map, and Manage, as these functions focus on policies, risk identification, and mitigation planning. Detective controls are concentrated in Measure and the monitoring aspects of Manage, focusing on ongoing assessments, audit trails, and reporting. AI-specific risk libraries address both common and AI-specific risks, such as algorithmic bias, model drift, data integrity, and cybersecurity threats. Transparency in Frontier Artificial Intelligence Act (SB 53) : California Senate Bill 53 establishes transparency and safety requirements for developers of frontier AI systems. It requires developers to implement safety and security protocols and publicly disclose information about their AI systems and safety practices. Authority documents, agency mappings, and citations for SB 53 are available in the content pack. Colorado Artificial Intelligence Act (SB 205) : The Colorado Artificial Intelligence Act establishes requirements for developers and deployers of high-risk AI systems, including risk assessments, impact evaluations, and disclosure obligations to consumers affected by AI-driven decisions. Authority documents, agency mappings, and citations for the Colorado AI Act are available in the content pack. ## Regulatory support statement {#airc-content-pack__regulatory_support_statement} Note: The ServiceNow Risk products help customers address regulatory requirements under various jurisdictions. However, we do not guarantee compliance and customers are ultimately responsible for their own compliance with applicable regulations. ServiceNow aims to provide software updates for new or updated major regulations and requirements within twelve to eighteen months of the regulation's publication. For regulations for which ServiceNow provides a level of support in the base system, ServiceNow aims to provide software updates for minor regulatory changes within 12 months and for major regulatory changes within up to 18 months depending on scope and impact. We differentiate between typical regulatory content updates, which do not require software updates or enhancements, and regulatory updates, which do require software updates or enhancements. Content updates are generally delivered on a shorter cadence than if software update or enhancement is required for the regulatory update or change. **Related tasks** * [Install AI Risk and Compliance content](https://www.servicenow.com/docs/lNprHf9R6iwmDQhaRzY3Jw "Install the AI Risk and Compliance content application (sn_grc_ai_gov_cont) to add predefined governance content such as frameworks, authority documents, control objectives, and risk statements.") * [Activate or update NIST Risk Management Framework](https://www.servicenow.com/docs/hM4AT8Ocq538ogD7ufHj6g "Activate or update NIST Risk Management Framework to install its citations, control objectives, and risk statements on your instance so they can be used in assessments and mapped to your AI assets.") * [Activate or update EU Artificial Intelligence Act](https://www.servicenow.com/docs/zK3X6oTPuQBnOhjEkeZqWw "Activate or update the EU Artificial Intelligence Act framework and select the citations relevant to your organization. The citations are installed into your instance so they can be mapped to control objectives and used in assessments.") * [Activate or update the Colorado Artificial Intelligence Act](https://www.servicenow.com/docs/L9vdS~Ez6jAsC_5t1ug3xQ "Activate or update the Colorado Artificial Intelligence Act (Senate Bill 24-205) to install its citations, control objectives, and risk statements on your instance so they can be used in assessments and mapped to your AI assets.") * [Activate or update the Transparency in Frontier Artificial Intelligence Act (SB 53)](https://www.servicenow.com/docs/VTOF_aSvyj_60dRyn5Jphw "Activate or update the Transparency in Frontier Artificial Intelligence Act (SB 53) to install its citations, control objectives, and risk statements on your instance so they can be used in assessments and mapped to your AI assets.")