--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Configure # Configuring AI Risk and Compliance {#ariaid-title1} Release version: Australia Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Configuring AI Risk and Compliance AI Risk and Compliance enables ServiceNow customers to manage and assess risks associated with AI systems through a comprehensive application. To use this application effectively, customers must download, activate, and configure it by publishing assessment templates and setting up assessments with automation logic to ensure accurate risk scoring. Proper configuration includes verifying required applications, reference data, lifecycle integrations, workspaces, governance artifacts, and access controls for end-to-end functionality. Show full answer Show less ## Configuration and Setup * **Installation:** Install AI Risk and Compliance and its Content Pack to access necessary features and data. * **Workspace and Properties:** Configure the AI Risk and Compliance workspace and set the core and advanced risk assessment properties to tailor the risk evaluation process. * **Email Intake:** Set up email-based intake to streamline AI risk and compliance submissions. Publishing assessment templates is essential to define the criteria for risk assessment and automate evaluation processes. ## Plugin Dependencies and Integration * Some AI capabilities require specific plugins such as the AI Risk and Asset Management for Now Assist plugin, which depends on other plugins including AI Risk and Compliance Integration with Control Tower and AI Asset Management. * AI Control Tower supports governance for both enterprise and ServiceNow AI assets, while AI Control Tower with Now Assist focuses on ServiceNow AI assets only. * For new Integrated Risk Management (IRM) deployments using AI Control Tower Core with AI Risk and Compliance, the IRM Standard plugin is required to enable AI intake request forms via the Employee Portal for AI system, model, and dataset registration and governance. * This requirement applies only to intake forms and not to AI cases, inquiries, or anonymous reporting. ## Upgrade Considerations When upgrading AI Risk and Compliance along with AI Control Tower Core or Enterprise Architecture for AICT plugins, customers must carefully follow the recommended upgrade order and review dependencies to prevent configuration issues. Guidance on upgrade sequencing is provided in the Enterprise Architecture for AICT plugin installation and upgrade documentation. ## Practical Benefits By properly configuring AI Risk and Compliance, customers can automate and standardize AI risk assessments, ensure governance of AI assets, and maintain compliance with organizational and regulatory standards. This setup supports efficient intake, evaluation, and management of AI-related risks across the enterprise. To use the AI Risk and Compliance application, you download and activate the application and then you must publish the assessment templates and set up the assessments and their automation logic to ensure accurate risk assessment scores. ## Configuration overview {#configuring-ai-risk-and-compliance__airc-config-overview} Verify that required applications, reference data, life cycle integrations, workspaces, governance artifacts, and access controls are in place so AI Risk and Compliance can be used end-to-end. Important: If you are upgrading AI Risk and Compliance, AI Control Tower Core, or Enterprise Architecture for AICT plugins together, review the upgrade order and dependencies in [Enterprise Architecture for AICT plugin installation and upgrade considerations](https://www.servicenow.com/docs/access?context=aict-ea-common-upgrade-considerations&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US) to avoid configuration issues. 1. [Install AI Risk and Compliance](https://www.servicenow.com/docs/HGpQdMf3BHE8g8miy~sDPg "Install the AI Risk and Compliance application (sn_grc_ai_gov) if you have the admin role. The application includes demo data and related dependencies.") 2. [AI Risk and Compliance Content Pack](https://www.servicenow.com/docs/YmHykiAGYphuc49oD4JrCw "The ServiceNow AI Risk and Compliance Content Pack provides foundational content to help organizations manage AI-related risk and compliance.") 3. [Install AI Risk and Compliance content](https://www.servicenow.com/docs/lNprHf9R6iwmDQhaRzY3Jw "Install the AI Risk and Compliance content application (sn_grc_ai_gov_cont) to add predefined governance content such as frameworks, authority documents, control objectives, and risk statements.") 4. [Configure AI Risk and Compliance Workspace](https://www.servicenow.com/docs/l49q4xmBIwLwfsqwGY6BWA "Configure the AI Risk and Compliance Workspace using UI Builder.") 5. [Set up AI Risk and Compliance properties](https://www.servicenow.com/docs/ZRUrlBRSI~Engipzdjzp~w "Configure AI Risk and Compliance properties to specify which authority documents and policies you want to display on the home page. You can also specify a default automated risk classification assessment RAM for AI systems and specify a default RAM to be used for risk assessments of AI systems.") 6. [Set up Advanced Risk assessments properties](https://www.servicenow.com/docs/5V2EInNDWWLxCotcdM4k0g "Enable Advanced Risk Assessments (ARA) to confirm that risk‑based assessments and risk score roll‑up function correctly in the AI Risk and Compliance application.") 7. [Configure email-based intake for AI Risk and Compliance](https://www.servicenow.com/docs/vE5rfIPJcbHlz8DweQqWrw "Configure email-based intake so that incoming email messages create intake records in AI Risk and Compliance.") {#configuring-ai-risk-and-compliance__cf-config-parent-tasks-ol} For more information on assessments and publishing assessments, see [Assessment templates](https://www.servicenow.com/docs/t0PCxPupZs44JS1Ava6gpg "The AI Risk and Compliance application uses assessment templates to evaluate AI assets for risk, regulatory compliance, and ethical alignment."). Note: Some AI capabilities are available only when the required plugins are installed. * AI Risk and Asset Management capabilities in AI Control Tower with Now Assist require the AI Risk and Asset Management for Now Assist plugin (sn_aict_irm_aiam), which depends on: * AI Risk and Compliance Integration with Control Tower (sn_grc_ai_irm_intg) * AI Asset Management (sn_ai_asset_mgmt) * AI Control Tower supports governance of both enterprise AI assets and ServiceNow AI assets, while AI Control Tower with Now Assist supports governance of ServiceNow AI assets only. * When AI Control Tower Core (sn_ai_governance) is used with AI Risk and Compliance in a new IRM deployment, the IRM Standard (sn_irm_std) plugin is required to make AI intake request forms available. These intake forms are used to submit requests through the Employee Portal for registering AI systems, AI models, and datasets for governance and risk evaluation. This requirement applies only to AI intake request forms and does not apply to AI cases, inquiries, or the Anonymous Reporting Center. For more information on applicable requests, see [Request an AI use case](https://www.servicenow.com/docs/TXYz1JsnVUTz~sDfFgUe2w "Request the development or procurement of an AI system to initiate and document the need for an AI-driven solution within an organization."), [Request an AI model](https://www.servicenow.com/docs/A2Mjmx9Eb7YBEQ~fPKbLPw "Request the development or procurement of an AI model to support an AI system and initiate governance review, risk assessment, and life cycle tracking."), and [Request a dataset](https://www.servicenow.com/docs/IER6aZijTWa5Sn_At4LBSw "Request a dataset to support AI model training, testing, validation, or analytical use cases. Datasets are reviewed for quality, privacy, and compliance."). For information about AI Control Tower setup and plugin dependencies, see [Activation and installation of AI Control Tower](https://www.servicenow.com/docs/access?context=activation-and-installation-of-ai-control-tower&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US). If your deployment also includes the Enterprise Architecture for AICT plugin (`com.sn_ea_aict`), review the upgrade-order guidance for AI Risk and Compliance, EA Workspace, and AI Control Tower Core before upgrading any of these applications out of sync. For more information, see [Enterprise Architecture for AICT plugin installation and upgrade considerations](https://www.servicenow.com/docs/access?context=aict-ea-common-upgrade-considerations&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US). **Related tasks** * [Install AI Risk and Compliance](https://www.servicenow.com/docs/HGpQdMf3BHE8g8miy~sDPg "Install the AI Risk and Compliance application (sn_grc_ai_gov) if you have the admin role. The application includes demo data and related dependencies.") * [Install AI Risk and Compliance content](https://www.servicenow.com/docs/lNprHf9R6iwmDQhaRzY3Jw "Install the AI Risk and Compliance content application (sn_grc_ai_gov_cont) to add predefined governance content such as frameworks, authority documents, control objectives, and risk statements.") * [Set up AI Risk and Compliance properties](https://www.servicenow.com/docs/ZRUrlBRSI~Engipzdjzp~w "Configure AI Risk and Compliance properties to specify which authority documents and policies you want to display on the home page. You can also specify a default automated risk classification assessment RAM for AI systems and specify a default RAM to be used for risk assessments of AI systems.") * [Configure AI Risk and Compliance Workspace](https://www.servicenow.com/docs/l49q4xmBIwLwfsqwGY6BWA "Configure the AI Risk and Compliance Workspace using UI Builder.") **Related reference** * [Roles and responsibilities](https://www.servicenow.com/docs/N~TRseDRy4NDiLKrO5Zn9g "The AI Risk and Compliance installs the essential roles to perform respective day-to-day operational tasks for managing AI assets across the enterprise.") **Related topics** * [Enterprise Architecture for AICT plugin installation and upgrade considerations](https://www.servicenow.com/docs/access?context=aict-ea-common-upgrade-considerations&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US)