--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Risk \& compliance tab # Risk \& compliance tab {#ariaid-title1} Release version: Australia Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Risk \& compliance tab The Risk \& compliance tab in the AI Risk and Compliance workspace provides a comprehensive view of the risk classification and compliance posture of your AI asset inventory. AI assets include AI systems, models, and datasets essential for AI development and operations. This tab helps you monitor risk levels and compliance with relevant authority documents and policies, enabling effective governance of AI assets within your organization. Show full answer Show less Note that dashboard data only includes Managed AI assets; Unmanaged assets remain visible in inventory but are excluded from metrics and widgets. Users with the AI steward role can manage asset statuses. ## Key Features * **Compliance overview:** Visualizes regulatory risk classifications (Low to Critical) using donut charts and displays compliance scores against frameworks such as the NIST AI Risk Management Framework and the EU Artificial Intelligence Act. You can filter compliance data by authority documents or policies and track related issues and AI cases. * **Risk overview:** Tracks the risk posture of AI assets by asset type and aggregated risk scores (Low, Medium, High). The Risk heatmap widget visualizes identified risks by risk and control effectiveness or impact and likelihood, with filters for residual or inherent risk and risk assessment methodologies. * **Regulatory landscape overview:** (Requires GRC: Regulatory Change Management application) Displays regulatory alerts, change tasks, and assessments by workflow state or lifecycle phase through donut charts, facilitating regulatory change tracking. ## Practical Benefits for ServiceNow Customers * Gain clear visibility into the risk and compliance status of AI assets to support informed decision-making and risk mitigation. * Leverage built-in compliance frameworks and customizable filters to align AI governance with organizational and regulatory requirements. * Identify and prioritize issues requiring immediate attention, enhancing the effectiveness of your AI governance program. * Integrate regulatory change management for a holistic view of compliance impact and regulatory updates. Overall, the Risk \& compliance tab empowers you to manage AI risks and compliance proactively, maintaining control over AI assets and ensuring adherence to relevant standards and policies. The Risk \& compliance tab on the AI Risk and Compliance displays the risk classification of an AI asset inventory and the compliance posture for the selected authority documents and policies. AI assets refer to the various components and resources that are essential for the development, deployment, and operation of artificial intelligence systems. These assets can include: 1. [AI systems](https://www.servicenow.com/docs/gIz~NmGxHM_t4mNtGmnnEg "An AI system is an AI-powered solution that is developed, deployed, and managed under a formal governance framework. This framework ensures that the system operates in a responsible, compliant, and risk-aware manner throughout its life cycle."): The complete software or hardware infrastructure that runs AI algorithms and processes. This can include machine learning platforms, natural language processing systems, and other AI-driven applications. 2. [AI models](https://www.servicenow.com/docs/mnRQGmhuUB4lt~zTu17c7A "An AI model goes through design, deployment, and monitoring in accordance with structured governance frameworks that support ethical use, regulatory compliance, and risk mitigation throughout its life cycle."): The mathematical and computational models that are trained on data to perform specific tasks. These models can range from simple linear regression models to complex deep learning neural networks. 3. [Datasets](https://www.servicenow.com/docs/uh1hqFkVnzdMwk5VNAUYrg "Datasets in AI Risk and Compliance capture and govern the data used by AI models, enabling organizations to evaluate risk, ensure compliance, and maintain transparency across the AI asset life cycle."): The collections of data used to train, validate, and test AI models. {#risk-and-compliance-tab-airc__ol_frz_qwv_x2c} Understanding and managing these AI assets is crucial for ensuring that AI systems are effective, reliable, and compliant with regulatory and ethical standards as defined by your organization. The Risk \& compliance dashboard has the following sections. You can drill down into the data on each widget in any section. Note: Dashboards in the AI Risk and Compliance Workspace (Risk and Compliance, Operations, and AI Cases) display data for Managed AI assets only. AI assets that are marked as Unmanaged are excluded from dashboard widgets, metrics, and summary counts, but remain visible in inventory and list views. If you have the AI steward \[sn_ai_governance.ai_steward\] role, you can mark assets as Managed or Unmanaged. For more information, see [AI assets- Managed and Unmanaged](https://www.servicenow.com/docs/access?context=assets-list-managing-and-unmanaging-assets&version=australia&pubname=australia-intelligent-experiences&ft:locale=en-US). ## Compliance overview {#risk-and-compliance-tab-airc__section_v4m_dqt_bgc} Regulatory risk classification : This section displays the risk classifications of AI systems, AI models, Datasets using donut charts. The risks are qualitatively classified as Low, Medium, High, Unacceptable, Critical, and To be determined. These classifications are based on the risk assessments of the AI assets. Compliance by authority documents and policies : The section shows compliance based on controls implemented. By default, the compliance scores are displayed for the following frameworks that are provided in the library: * NIST AI Risk Management Framework: This framework displays the four key associated citations, namely map, measure, manage, and govern. Each citation's compliance score is displayed based on its control attestations. * EU Artificial Intelligence Act: This framework has multiple chapters that are displayed as citations and child citations. Each citation is mapped to a control objective to provide you with a compliance percentage score. {#risk-and-compliance-tab-airc__ul_y5f_4jd_w2c} You can choose to view compliance data by selecting one of two options: Authority Documents or Policies. Additionally, you can view the overall compliance score percentage, along with the number of compliant and non-compliant authority documents and policies, by using the drop-down filter to select specific authority documents or policies. You can also see all the issues that require immediate attention and AI cases related to each authority document or policy. The authority documents are provided solely for informational and guidance purposes to assist with the initial setup of AI Risk and Compliance frameworks. It doesn't constitute legal advice or assurance of regulatory compliance. You're solely responsible for ensuring that all use of the content complies with applicable laws, regulations, directives, and industry standards in their jurisdictions. Note: You can configure which authority documents and policies you want to display on the home page. For more information, see [Set up properties for compliance posture](https://www.servicenow.com/docs/ZRUrlBRSI~Engipzdjzp~w "Configure AI Risk and Compliance properties to specify which authority documents and policies you want to display on the home page. You can also specify a default automated risk classification assessment RAM for AI systems and specify a default RAM to be used for risk assessments of AI systems."). ## Risk overview {#risk-and-compliance-tab-airc__section_v5g_2qt_bgc} This section monitors and tracks the risk posture of the AI assets in your organization. Using the AI asset filter, you can filter risk posture insights by the type of AI asset inventory. AI systems by aggregated risk score : This section displays the classifications of AI systems by aggregated risk score using donut chart. The risk scores are qualitatively classified as Low, Medium, and High. Risk heatmap : The Risk heatmap widget displays the visualization of all identified risks within the AI assets. By default, a residual risk filter is applied, but you can filter it based on inherent risk level. The heatmap is segmented, and the segmentation changes based on the filter. The activities fall under the respective combination of risk and control effectiveness, or impact and likelihood. The combination is based on the selected risk classification filter. You can filter the risk heatmap by Risk Assessment Methodology (RAM), if you have more than one risk RAMs published. ## Regulatory landscape overview {#risk-and-compliance-tab-airc__section_hn3_fqt_bgc} You need to install GRC: Regulatory Change Management application to see this section. For more information, see [Installing Regulatory Change Management](https://www.servicenow.com/docs/b0cC9NDliiQ2vZ9ASmFGTA "Download the GRC: Regulatory Change Management application from the ServiceNow Store and run it in your ServiceNow instance."). Overview : * AlertsThis section displays the distribution of regulatory alerts by workflow state or life cycle phase using a donut chart. * Change tasksThis section displays the distribution of regulatory change tasks by workflow state or life cycle phase using a donut chart. {#risk-and-compliance-tab-airc__ul_nx4_3st_bgc} Assessments : This section displays the regulatory impact assessments and risk assessments linked to regulatory changes using a donut chart. By default, the regulatory assessments filter is applied, but you can change it to risk assessments. The following image shows the Risk \& compliance dashboard. Figure 1. Risk \& compliance dashboard **Related concepts** * [AI Risk and Compliance workspace](https://www.servicenow.com/docs/GWra97fbuMSeap4RZObPLQ "The AI Risk and Compliance workspace is the central hub for AI risk and compliance managers to monitor risk posture, track assessments, manage controls and issues, and oversee AI cases across the enterprise.") * [AI Risk and Compliance Content Pack](https://www.servicenow.com/docs/YmHykiAGYphuc49oD4JrCw "The ServiceNow AI Risk and Compliance Content Pack provides foundational content to help organizations manage AI-related risk and compliance.") **Related tasks** * [Set up AI Risk and Compliance properties](https://www.servicenow.com/docs/ZRUrlBRSI~Engipzdjzp~w "Configure AI Risk and Compliance properties to specify which authority documents and policies you want to display on the home page. You can also specify a default automated risk classification assessment RAM for AI systems and specify a default RAM to be used for risk assessments of AI systems.")