---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Risk assessments

# Risk assessments {#ariaid-title1}

Release version: Australia  
Updated July 17, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Complete a risk assessment that AI Control Tower generates automatically for a
managed AI asset, evaluating its inherent, control, and residual risk.

Unlike a case, an issue, or a policy exception, you don't create a risk assessment. AI
Control Tower generates a risk assessment automatically and assigns it to the asset's
steward or owner to complete. For more information about how risk is assessed across
your AI portfolio, see [Reviewing AI risk posture](https://www.servicenow.com/docs/iC4jRzwKfQF1Ft9qg6m4rA "Aggregated risk posture displays inherent risk, residual risk, and control effectiveness for AI assets.").

## How risk assessments are generated {#ac-risk-assessments__origin}

AI Control Tower generates a risk assessment when a managed AI asset is onboarded,
and again whenever someone edits the asset's use and purpose details, since a
change in how an asset is used can change its risk profile. AI Control Tower
doesn't surface the specific reason for a re-triggered assessment on the Risk
assessments tab itself; that reason appears in the asset's work notes.

To respond, open the risk assessment from Activity Center, or select New assessment from the asset's own record. Both paths take you to an
assessment response view, where you evaluate the asset's inherent risk, the
effectiveness of its controls, and its resulting residual risk. Some assessments
also require a target assessment, or a risk response describing whether you plan
to accept, avoid, mitigate, or transfer the risk, before you submit the assessment
for approval.

## Risk assessment lifecycle {#ac-risk-assessments__lifecycle}

A risk assessment moves from new to in progress as you work through it, to
awaiting approval once you submit it for review, and then to completed once an
approver signs off. A completed assessment can later be archived, and an
assessment can be canceled at any point if it's no longer needed.

## Where risk assessments appear {#ac-risk-assessments__where-they-appear}

Activity Center
:   Risk assessments appear on the Risk assessments
    sub-tab of the Team and Assigned to you tabs, depending on assignment.

The asset record
:   You can start or continue a risk assessment for a specific asset directly
    from that asset's own record, using the New assessment action.