---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Manage controls

# Manage controls using AI Risk and Compliance {#ariaid-title1}

Release version: Australia  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
You can add, remove, and delete controls for an AI asset using the AI Risk and Compliance.

Control management in AI Risk and Compliance enables organizations to define, maintain, and validate the controls applied to AI assets throughout their life cycle. Controls represent governance measures that help verify that AI
systems operate responsibly, ethically, and in alignment with applicable regulatory and policy requirements.

Controls are associated with AI assets through control objectives derived from authority documents such as the EU AI Act and the NIST AI Risk Management Framework. After impact assessments are completed and marked as Closed
complete, controls are automatically generated and mapped to the AI asset based on configured post-assessment automation rules. You can also add controls manually from existing control objectives in the inventory.

You can perform the following control management tasks in the AI Risk and Compliance workspace:

* [Add controls from control objective](https://www.servicenow.com/docs/p3ixMFPcserFB6hy3OPn4A "Add controls manually from published control objectives to an AI asset in AI Risk and Compliance. Use this task when controls were not automatically generated by a post-assessment action, or when you need to apply additional controls beyond those mapped through the impact assessment."): Add controls from published control objectives to an AI asset.
* [Create control attestations for an AI asset](https://www.servicenow.com/docs/UOa9JTo3GOvSgif6eDgtYA "Create control attestations for AI assets to document the existence, implementation, and effectiveness of controls that govern behavior, data usage, performance, and risk posture. Attestations serve as formal evidence that the AI asset meets regulatory, ethical, security, and operational standards."): Create control attestations to document that a control is implemented and effective.
* [Remove controls from an AI asset](https://www.servicenow.com/docs/7522RbGMeIcx0kx1QvlfOg "Remove associated controls from an AI asset to keep the inventory accurate and up to date. This step is essential to retire outdated or irrelevant controls without deleting their records."): Remove controls from an AI asset without deleting the control records.
* [Delete controls from an AI asset](https://www.servicenow.com/docs/7EJttVDlJlz32pj3IFrURA "Delete controls from an AI asset to remove them permanently from the control table. This task confirms outdated or unnecessary controls are deleted."): Permanently delete control records from an AI asset.

{#manage-controls-in-airc__ul_iqt_k2l_gjc}  
Note:  
The Add controls from control objective, Attest, and Remove buttons appear only when an AI analyst is assigned to the AI asset record.
* **[Add controls from control objective](https://www.servicenow.com/docs/p3ixMFPcserFB6hy3OPn4A)**   
  Add controls manually from published control objectives to an AI asset in AI Risk and Compliance. Use this task when controls were not automatically generated by a post-assessment action, or when you need to apply additional controls beyond those mapped through the impact assessment.
* **[Remove controls from an AI asset](https://www.servicenow.com/docs/7522RbGMeIcx0kx1QvlfOg)**   
  Remove associated controls from an AI asset to keep the inventory accurate and up to date. This step is essential to retire outdated or irrelevant controls without deleting their records.
* **[Delete controls from an AI asset](https://www.servicenow.com/docs/7EJttVDlJlz32pj3IFrURA)**   
  Delete controls from an AI asset to remove them permanently from the control table. This task confirms outdated or unnecessary controls are deleted.
* **[Create control attestations for an AI asset](https://www.servicenow.com/docs/UOa9JTo3GOvSgif6eDgtYA)**   
  Create control attestations for AI assets to document the existence, implementation, and effectiveness of controls that govern behavior, data usage, performance, and risk posture. Attestations serve as formal evidence that the AI asset meets regulatory, ethical, security, and operational standards.

**Related tasks**   

* [Add controls from control objective](https://www.servicenow.com/docs/p3ixMFPcserFB6hy3OPn4A "Add controls manually from published control objectives to an AI asset in AI Risk and Compliance. Use this task when controls were not automatically generated by a post-assessment action, or when you need to apply additional controls beyond those mapped through the impact assessment.")
* [Create control attestations for an AI asset](https://www.servicenow.com/docs/UOa9JTo3GOvSgif6eDgtYA "Create control attestations for AI assets to document the existence, implementation, and effectiveness of controls that govern behavior, data usage, performance, and risk posture. Attestations serve as formal evidence that the AI asset meets regulatory, ethical, security, and operational standards.")
* [Remove controls from an AI asset](https://www.servicenow.com/docs/7522RbGMeIcx0kx1QvlfOg "Remove associated controls from an AI asset to keep the inventory accurate and up to date. This step is essential to retire outdated or irrelevant controls without deleting their records.")
* [Delete controls from an AI asset](https://www.servicenow.com/docs/7EJttVDlJlz32pj3IFrURA "Delete controls from an AI asset to remove them permanently from the control table. This task confirms outdated or unnecessary controls are deleted.")