---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Reviewing AI governance posture and compliance status

# Reviewing AI governance posture and compliance status {#ariaid-title1}

Release version: Australia  
Updated October 3, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Reviewing AI governance posture and compliance status

The Risk \& Compliance tab within the Govern section of AI Control Tower provides ServiceNow customers with a centralized dashboard to monitor AI governance activities across their AI portfolio.
It enables the review of AI asset classifications, risk and compliance status, and governance actions.
Customers can track regulatory risk classifications, compliance scores, and overall AI risk posture, including aggregated risk scores and heat maps, to identify and address governance concerns effectively.
Show full answer Show less  

## Compliance posture

This section features widgets that display actionable insights and metrics related to compliance, helping customers monitor implemented controls and regulatory risks across AI assets. Key elements include:

* **Your top recommendations:** Lists critical and prioritized governance actions, including assigned and unassigned tasks generated by AI insights (Stalled Lifecycle Tasks and Significant Issues). Customers should review these recommendations carefully before acting.
* **Regulatory risk classification:** Presents the classification of AI assets (Systems, Models, Datasets) by regulatory risk status, allowing filtering and drilling down to specific asset statuses.
* **Compliance score:** Shows compliance levels of AI assets against adopted frameworks and policies, highlighting compliant and non-compliant controls and flagging high-priority issues.

These widgets help customers stay informed about compliance gaps and prioritize remediation efforts.

## Risk posture

The risk posture widgets provide a summarized view of inherent and residual risks across the AI portfolio, enabling customers to assess overall AI risk exposure. Important features include:

* **Aggregated risk score:** Displays AI systems' risk landscape categorized by risk level (High, Medium, Low), with filters to toggle between inherent and residual risk.
* **Risk heat map:** A color-coded matrix visualizing assessed AI risks to identify clusters of higher-risk assets and compare current versus intended risk postures. It supports filtering by risk type and links to a detailed heat map workbench in the AI Risk and Compliance Workspace.

These tools empower customers to identify, prioritize, and manage AI-related risks effectively.

## Practical application for ServiceNow customers

By utilizing the Risk \& Compliance tab in AI Control Tower, customers can:

* Continuously monitor AI governance and compliance status within their portfolio.
* Identify and act on top compliance and risk-related recommendations promptly.
* Track regulatory classifications and compliance scores aligned with organizational policies and external frameworks.
* Visualize AI risk through aggregated scores and heat maps to focus remediation and risk mitigation efforts.
* Manage business application associations with AI systems to maintain governance alignment.

This comprehensive visibility supports maintaining regulatory compliance, reducing AI risk exposure, and improving governance effectiveness across AI initiatives.  
The Risk \& Compliance tab under Govern displays regulatory classification, risk posture, and compliance information for AI assets.

## Overview of Govern {#gov-airc-using__overview-govern}

Use the Risk \& Compliance tab under Govern in AI Control Tower to monitor governance activities across your AI portfolio. Review AI asset classifications, identify risk and compliance concerns, track governance work, and investigate issues that
require attention.{#gov-airc-using__overview-govern-para-1}  
From here, you can:

* Review and act on top recommendations
* Review regulatory risk classification
* Track compliance score and compliance posture
* Review AI risk posture, including aggregated risk score and the risk heat map
* Monitor cases, issues, and governance actions
* View and manage business application associations with AI systems. For more information, see [Associate a business application with an AI system](https://www.servicenow.com/docs/nXsulC620PS6Mo_jmi7XhQ "Associate an existing business application with an AI system asset, independently of whether the Enterprise Architecture Workspace plugin is installed.")
{#gov-airc-using__ul_g1p_jhh_rkc}  
The page is divided into the following components:

* Compliance posture: Monitor compliance of implemented controls and regulatory risk across the AI portfolio.
* Risk posture: Monitor inherent and residual risk across the AI portfolio.
{#gov-airc-using__ul_govern_components}

## Compliance posture {#gov-airc-using__section_compliance_posture}

The widgets under compliance posture display the top action items to execute and track the risk classification and compliance score of AI systems and controls. Each widget reflects the
active filter state. View details for each metric area by selecting the arrow for each metric. Select an individual component on the widget to view underlying assets.{#gov-airc-using__section_compliance_posture-para-1}  
{#gov-airc-using__table_compliance_posture_widgets__entry__4}

| Widget | What it displays | Status breakdown | Roles required |
|-|-|-|-|
| Your top recommendations | Recommended action items along with other assigned and unassigned action items. For more information, see [Act on AI asset governance insight recommendations](https://www.servicenow.com/docs/r7zcnSwmSYdiCRbNGk5r1Q "Resolve Stalled Lifecycle Tasks and Significant Issues recommendations to keep AI systems moving through their governance life cycle.") | * 1-Critical * 2-High * 3-Medium * 4-Low {#gov-airc-using__ul_k1p_jhh_rkc} | sn_ai_governance.ai_steward |
| Regulatory risk classification | * Regulatory risk classification of assets in the portfolio. Use the drop-down to filter the assets into AI System, AI Model, and Dataset. * The assets are categorized based on their status. Select each status to drill down further. {#gov-airc-using__ul_l1p_jhh_rkc}For more information, see [Reviewing regulatory classification and compliance status](https://www.servicenow.com/docs/1ElNg83gUDoHaweD6Swwmg "Review regulatory risk classification and compliance posture to understand how AI assets align with configured governance expectations.") | * Low * Medium * High * Unacceptable * Critical * To be determined {#gov-airc-using__ul_m1p_jhh_rkc} | sn_ai_governance.ai_steward |
| Compliance score | * Compliance scores for AI assets compared to adopted frameworks and policies. * Compliance status for top regulatory frameworks. The progress indicator shows compliant and non-compliant controls and displays an alert badge for high-priority issues. Toggle between Authority documents and Policies to view detailed information. {#gov-airc-using__ul_n1p_jhh_rkc}For more information, see [Reviewing regulatory classification and compliance status](https://www.servicenow.com/docs/1ElNg83gUDoHaweD6Swwmg "Review regulatory risk classification and compliance posture to understand how AI assets align with configured governance expectations.") | * Compliant * Non-compliant * To be determined {#gov-airc-using__ul_o1p_jhh_rkc} | sn_ai_governance.ai_steward |
[Table 1. Compliance posture widgets]

{#gov-airc-using__table_compliance_posture_widgets}

## Actionable intelligence insights {#gov-airc-using__section_actionable_intelligence_agents}

The Your top recommendations widget is powered by two AI-generated insights, Stalled Lifecycle Tasks and Significant Issues, that evaluate your AI
portfolio and surface governance work that needs attention. AI-generated insights may not reflect all relevant context --- review recommendations before acting on them. For what each insight identifies, how it's determined, and how to act on its recommendations, see [Detecting governance insights](https://www.servicenow.com/docs/OLoVKbm4Mga7m3k~bt8uCw "Scheduled detection jobs evaluate your AI portfolio and generate the Stalled Lifecycle Tasks and Significant Issues insights that appear as recommendations.").{#gov-airc-using__section_actionable_intelligence_agents-para-1}

## Risk posture {#gov-airc-using__section_risk_posture}

The widgets under risk posture provide a summary view of the inherent and residual risk across the AI portfolio. Use the drop-down to filter the assets into AI System,
AI Model, and Dataset. To view detailed information about the risk and compliance posture, select Take me there. This opens the AI Risk and Compliance Workspace.{#gov-airc-using__section_risk_posture-para-1}  
{#gov-airc-using__table_risk_posture_widgets__entry__4}

| Widget | What it displays | Status breakdown | Roles required |
|-|-|-|-|
| Aggregated risk score | AI system risk landscape, categorized by aggregated risk score. Use the drop-down to filter between Inherent and Residual risk. For more information, see [Reviewing AI risk posture](https://www.servicenow.com/docs/iC4jRzwKfQF1Ft9qg6m4rA "Aggregated risk posture displays inherent risk, residual risk, and control effectiveness for AI assets.") | * High * Medium * Low {#gov-airc-using__ul_p1p_jhh_rkc} |   |
| Risk heat map | Assessed AI risks displayed in a color-coded matrix to help identify concentrations of higher-risk AI assets and compare current and intended risk posture. Use the drop-down to filter between Inherent and Residual risk. Select Open heatmap workbench to open the heat map in the AI Risk and Compliance Workspace. For more information, see [Reviewing AI risk posture](https://www.servicenow.com/docs/iC4jRzwKfQF1Ft9qg6m4rA "Aggregated risk posture displays inherent risk, residual risk, and control effectiveness for AI assets."). | * High * Medium * Low {#gov-airc-using__ul_q1p_jhh_rkc} |   |
[Table 2. Risk posture widgets]

{#gov-airc-using__table_risk_posture_widgets}