---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Explore

# Exploring Risk and Compliance {#ariaid-title1}

Release version: Australia  
Updated September 30, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Exploring Risk and Compliance

Risk and Compliance in AI Control Tower offers comprehensive governance visibility for AI systems at both portfolio and individual asset levels.
It provides summarized insights into regulatory classification, compliance posture, risk scores, and heat maps across your AI portfolio.
This enables stakeholders to identify governance trends, prioritize critical issues, and focus on high-risk AI assets effectively.
Show full answer Show less  
When reviewing a specific AI asset from the inventory, the Risk \& Compliance tab displays detailed governance information including regulatory risk classification, compliance scores, aggregated risk scores, compliance posture aligned with priority frameworks, risk heat maps, and related governance records. These outputs facilitate oversight while governance activities like risk assessments, control execution, and remediation are managed through connected governance workflows.

## Users and Their Roles

* **AI Governance Stakeholders:** Use portfolio-level summaries to assess overall governance posture, identify priority recommendations, and monitor classification and governance across AI assets organization-wide.
* **AI Stewards or Asset Stakeholders:** Focus on the asset-level Risk and Compliance view to review detailed governance posture, assessment status, compliance score, aggregated risk score, and related governance records for individual AI systems.
* **Governance Reviewers:** Utilize framework-specific and risk-specific views to detect unresolved issues, incomplete assessments, ineffective controls, or missing governance data requiring follow-up.

## Key Features and Benefits

* **Top Recommendations:** Highlights high-priority governance tasks requiring immediate attention, aiding governance stakeholders and reviewers in efficient risk management.
* **Regulatory Risk Classification:** Groups AI assets by regulatory risk level, enabling targeted review of higher-risk AI systems for governance stakeholders and reviewers.
* **Compliance Score and Posture:** Displays compliance posture against configured frameworks, helping stakeholders identify governance coverage gaps and compliance issues.
* **Aggregated Risk Score and Risk Heat Map:** Shows how inherent risks and control effectiveness impact residual risk, supporting asset stakeholders and reviewers in risk evaluation.
* **Governance Records Access:** Allows viewing of assessments, risks, controls, issues, and policy exceptions tied to specific AI systems without leaving the AI system context, facilitating efficient governance reviews.

## Next Steps for ServiceNow Customers

To leverage Risk and Compliance in AI Control Tower effectively, customers should explore topics such as:

* Classifying AI assets by regulatory risk
* Understanding regulatory risk classification and risk score calculations
* Reviewing compliance score calculations and AI system compliance status
* Configuring Risk and Compliance settings within AI Control Tower
* Monitoring AI governance posture and compliance via dashboards
* Detecting and acting on governance insights and recommendations

This structured approach enables customers to maintain strong AI governance, ensure regulatory compliance, and mitigate risks effectively across their AI portfolios.  
Risk and Compliance in AI Control Tower provides a summary of regulatory classification, compliance, and risk across your AI portfolio and individual AI assets.

## Risk and Compliance overview {#gov-airc-exploring__cf-exploring-parent-overview}

Risk and Compliance in AI Control Tower provides governance visibility for AI systems at the portfolio level and the individual AI system level.

The Risk and Compliance page shows summarized signals across AI assets, including recommendations, regulatory risk classification, compliance posture, compliance score, aggregated risk scores, and risk heat maps. The
summaries help stakeholders identify trends, prioritize attention, and focus on higher-risk areas of the AI portfolio.

When you access a record from your AI asset inventory, the Risk \& Compliance tab provides detailed governance information for that AI asset. Details include its regulatory risk classification,
compliance score, aggregated risk score, compliance posture for priority frameworks, risk heat map, and related governance records.

AI Control Tower displays these outcomes for oversight. Risk assessments, control execution, remediation, and other governance activities are managed through related governance solutions and supporting
workflows.

## Risk and Compliance users {#gov-airc-exploring__cf-exploring-parent-users}

{#gov-airc-exploring__table_gov-airc-exploring__entry__2}

| User | Description |
|-|-|
| AI governance stakeholder | Uses portfolio-level summaries to assess overall governance posture, identify priority recommendations, and monitor how AI assets are classified and governed across the organization. |
| AI steward or asset stakeholder | Uses the asset-level Risk and Compliance view to review the governance posture of an individual AI system, including its assessment status, compliance score, aggregated risk score, and related governance records. |
| Governance reviewer | Uses framework-specific and risk-specific views to identify which areas require follow-up, such as unresolved issues, incomplete assessments, ineffective controls, or missing governance data. |
[Table 1. Risk and Compliance user types]

{#gov-airc-exploring__table_gov-airc-exploring}

## Risk and Compliance benefits {#gov-airc-exploring__cf-exploring-parent-benefits}

{#gov-airc-exploring__table-benefits-gov-airc-exploring__entry__3}

| Feature | Benefit | Users |
|-|-|-|
| Top recommendations | Identify high-priority governance work that requires immediate attention. | AI governance stakeholder, governance reviewer |
| Regulatory risk classification | Review how AI assets are grouped by regulatory risk level and identify assets that require closer review. | AI governance stakeholder, governance reviewer |
| Compliance score and compliance posture for priority frameworks | Review compliance posture for the configured frameworks and see where issues affect governance coverage. | AI governance stakeholder, AI steward or asset stakeholder |
| Aggregated risk score and risk heat map | Learn how inherent risk and control effectiveness influence residual risk for an AI system. | AI steward or asset stakeholder, governance reviewer |
| Assessments, risks, controls, issues, and policy exceptions | Review governance records associated with a specific AI system without leaving the AI system context. | AI steward or asset stakeholder |
[Table 2. Benefits by feature]

{#gov-airc-exploring__table-benefits-gov-airc-exploring}

## What to explore next {#gov-airc-exploring__cf-exploring-parent-links}

For more information about Risk and Compliance in AI Control Tower, see:

* [Classifying AI assets by regulatory risk](https://www.servicenow.com/docs/LeJWku~rbfOnMP_7k9JozA "Regulatory risk classification places an AI asset in a risk rating, such as Low or High, based on the score from a risk assessment.")
* [Regulatory risk classification reference](https://www.servicenow.com/docs/x8WlcW7P0abn8zU_BvFM3A "Risk assessment methodologies, formulas, risk ratings, and records that determine the regulatory risk classification of an AI asset.")
* [Risk rating calculation](https://www.servicenow.com/docs/78FrL2BTwvbDH0UcwCa7Dw "The inherent, control effectiveness, and residual ratings of an AI system come from risk assessment scores that a risk rollup aggregates.")
* [AI risk score calculation reference](https://www.servicenow.com/docs/yAKQZKNdgwSvs1wRg_I3MA "Formulas, rating bands, lookup matrix, and rollup settings that determine the inherent, control effectiveness, and residual ratings of an AI system.")
* [Compliance score calculation](https://www.servicenow.com/docs/5dwedZjyxoqkHEk6lFkBbw "The compliance score of an AI system measures how well its controls are met, based on the scores of its active related entities.")
* [AI system compliance score calculation reference](https://www.servicenow.com/docs/Ix9Wt5J9naG7l3vIX_uUUA "Formula, calculation rules, scheduled jobs, and properties that determine the compliance score of an AI system.")
* [Configuring Risk and Compliance in AI Control Tower](https://www.servicenow.com/docs/mRInoAF_BfS5ZH98SWRVjQ "Risk and Compliance information appears in AI Control Tower only when the required governance applications, frameworks, and data are available in your environment.")
* [Reviewing AI governance posture and compliance status](https://www.servicenow.com/docs/DZXY4x5SefhW46dVS1YwmA "The Risk & Compliance tab under Govern displays regulatory classification, risk posture, and compliance information for AI assets.")
* [Reviewing regulatory classification and compliance status](https://www.servicenow.com/docs/1ElNg83gUDoHaweD6Swwmg "Review regulatory risk classification and compliance posture to understand how AI assets align with configured governance expectations.")
* [Reviewing AI risk posture](https://www.servicenow.com/docs/iC4jRzwKfQF1Ft9qg6m4rA "Aggregated risk posture displays inherent risk, residual risk, and control effectiveness for AI assets.")
* [Risk score and compliance score dashboard errors](https://www.servicenow.com/docs/5VzKMpK4eYLHDIEkSZeWxg "Properties and scheduled jobs that resolve No data found errors in the risk score and compliance score dashboards on the AI asset record and landing pages.")
* [Detecting governance insights](https://www.servicenow.com/docs/OLoVKbm4Mga7m3k~bt8uCw "Scheduled detection jobs evaluate your AI portfolio and generate the Stalled Lifecycle Tasks and Significant Issues insights that appear as recommendations.")
* [Governance insight detection reference](https://www.servicenow.com/docs/gbyi285jtI7DdN7wmhMDAw "Thresholds, criteria, and refresh schedule that determine when an AI system appears in the Stalled Lifecycle Tasks or Significant Issues insight.")
* [Act on AI asset governance insight recommendations](https://www.servicenow.com/docs/r7zcnSwmSYdiCRbNGk5r1Q "Resolve Stalled Lifecycle Tasks and Significant Issues recommendations to keep AI systems moving through their governance life cycle.")
* [Risk and Compliance reference](https://www.servicenow.com/docs/r~Ia73jqkHrJv~hbZ6WlDg "Review the scope of Risk and Compliance visibility in AI Control Tower, including key terminology used across these views.")
{#gov-airc-exploring__ul_v54_mwj_zjc}