--- sourceDocument: Australia Enable AI sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences Release : - australia ft:locale : - en-US ft:publication_title : - Australia Enable AI ft:clusterId : - platai bundleId : - platai workflow : - Platform --- # Compliance score calculation # Compliance score calculation {#ariaid-title1} Release version: Australia Updated October 5, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Compliance score calculation The compliance score of an AI system reflects how well the system meets its compliance controls by averaging the compliance scores of its active related entities. This score helps ServiceNow customers understand the AI system's overall compliance posture based on its linked governance entities. Show full answer Show less ## How the Compliance Score Is Calculated * The AI system itself is not scored directly; instead, it averages the compliance scores of all active entities linked to it in the AI system entity map. * Entities that are inactive, retired, canceled, or related to third-line audit entries are excluded from the calculation. * It is critical to map every relevant entity to the AI system, as unmapped entities do not influence the score and can cause an inaccurate representation of compliance. * Example: If an AI system links to entities with scores 80, 60, and 70, the compliance score is the average (70). Adding another entity with a lower score (e.g., 50) lowers the overall score accordingly. ## Source of Entity Scores The Policy and Compliance engine calculates each linked entity's compliance score based on the state of its controls, such as passing tests and attestations. These entity scores may incorporate related entities' scores depending on configuration. Entity scores are color-coded for ease of interpretation: * **Green:** 80-100 * **Yellow:** 50-79 * **Red:** 0-49 ## Score Processing and Updates * When a compliance score record is created for an AI system, it is queued for recalculation. * A scheduled process picks up these queued records, calculates the updated average compliance score, and stores the new score. * Errors during calculation are logged, but the queued record is removed regardless; recalculation only occurs again if a new record is queued. ## Scores by Authority Document or Policy Compliance scores can also be associated with authority documents and their related controls through citations. These scores are displayed separately in compliance scorecards and dashboards, providing insight into compliance posture by frameworks, policies, and authority documents, distinct from the AI system's overall compliance score. ## Review and Accuracy Considerations Compliance scores are calculated automatically without manual assessment. Scores may be inaccurate or incomplete if entities or controls are missing or outdated. ServiceNow customers should review both the AI system's compliance score and the contributing entity scores before relying on them for decision-making. ## Troubleshooting If compliance score dashboards show "No data found" errors, refer to relevant troubleshooting guidance for resolving risk and compliance score dashboard issues on AI asset record pages or landing pages. The compliance score of an AI system measures how well its controls are met, based on the scores of its active related entities. ## How the score is calculated {#gov-airc-compliance-score-calculation__section_how_calculated} AI Risk and Compliance doesn't score an AI system directly. It averages the compliance scores of the entities that are linked to the AI system. For the formula, calculation rules, scheduled jobs, and properties, see [AI system compliance score calculation reference](https://www.servicenow.com/docs/Ix9Wt5J9naG7l3vIX_uUUA "Formula, calculation rules, scheduled jobs, and properties that determine the compliance score of an AI system."). An AI system links to one or more entities in the AI system entity map. The system averages the compliance scores of the active linked entities and stores the result as the compliance score of the AI system. The system skips AI systems in the Retired or Canceled state and excludes entities that belong to third-line audit entries. Note: Map every relevant entity to the AI system. An entity that isn't mapped doesn't affect the score, so a missing entity can make the score look better or worse than the real compliance posture. ## Example: Hiring assistant AI system {#gov-airc-compliance-score-calculation__example_score} A hiring assistant AI system is linked to three active entities in its governance plan: Data privacy compliance (80), Model bias testing (60), and Vendor risk assessment (70). The compliance score of the AI system is `(80 + 60 + 70) ÷ 3 = 70`. After an AI steward also links a fourth entity, Incident response readiness, with a compliance score of 50, the score becomes `(80 + 60 + 70 + 50) ÷ 4 = 65` - mapping an additional entity can lower the overall score if that entity needs attention. ## Where the entity scores come from {#gov-airc-compliance-score-calculation__section_entity_score} The Policy and Compliance engine calculates the compliance score of each entity, based on the state of its controls, such as whether the controls pass compliance tests and attestations. Depending on configuration, this calculation can also take the scores of related entities into account. For the formula, calculation rules, and configuration options, see [Compliance score calculation of an entity](https://www.servicenow.com/docs/access?context=compliance-score-calculation-pc-ws&version=australia&pubname=australia-governance-risk-compliance&ft:locale=en-US). The compliance score of an AI system changes when the score of any contributing entity changes. An individual entity's compliance score is color-coded consistently with other Policy and Compliance records: green for 80-100, yellow for 50-79, and red for 0-49. ## How and when scores are processed {#gov-airc-compliance-score-calculation__section_processing} The system queues an AI system for recalculation when its compliance score record is inserted. A scheduled process then completes these actions: 1. Picks up queued records that are in the Inserted or Error state and marks them as processing. 2. Calculates the average of the compliance scores of the related entities for each queued AI system. 3. Stores the new score on the AI system. 4. Removes the processed records from the queue. {#gov-airc-compliance-score-calculation__ol_processing} If the calculation fails for an AI system, the system logs an error, but the queued record is still removed in the same run. The AI system isn't automatically retried unless a new compliance score record is queued for it again. ## Scores by authority document or policy {#gov-airc-compliance-score-calculation__section_frameworks} A compliance score relates to an authority document through the citation that the authority document is associated with. The citation is also linked to the applicable control. Based on these relationships, the system calculates the compliance score for the corresponding authority document. The Compliance score card shows the score as a percentage on a gauge. The card also shows compliance posture for the priority frameworks, with separate tabs for authority documents and policies. Those posture scores come from the compliance of citations and their controls, and they are separate from the compliance score of the AI system. For how to read the compliance views, see [Reviewing regulatory classification and compliance status](https://www.servicenow.com/docs/1ElNg83gUDoHaweD6Swwmg "Review regulatory risk classification and compliance posture to understand how AI assets align with configured governance expectations."). ## Review of calculated scores {#gov-airc-compliance-score-calculation__section_review_score} The system calculates the compliance score automatically, without an assessor. The score can be inaccurate or incomplete, for example, when entities or controls are missing or out of date. Review the score and the entity scores that produced it before you rely on it. ## Things to note for addressing errors {#gov-airc-compliance-score-calculation__section_troubleshooting} If the Risk and Compliance dashboards on the AI asset record page or the landing page show a No data found error for the compliance score, see [Risk score and compliance score dashboard errors](https://www.servicenow.com/docs/5VzKMpK4eYLHDIEkSZeWxg "Properties and scheduled jobs that resolve No data found errors in the risk score and compliance score dashboards on the AI asset record and landing pages.").