Foundations of AI Governance

  • Release version: Zurich
  • Updated November 6, 2025
  • 2 minutes to read
  • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Foundations of AI Governance

    This accelerator provides essential guidance for establishing and managing an Artificial Intelligence Management System (AIMS) based on ISO/IEC 42001. It serves as an entry point for Impact customers aiming to enhance their AI governance maturity through a three-part consulting series that includes introduction, adoption, and auditing of AIMS. Resources and best practices are included to empower customers in their AI governance journey.

    Show full answer Show less

    Key Features

    • Introductory Customer Session (Up to 1 hour): Covers the definition of AIMS, reasons for implementation, stakeholder expectations, vocabulary, principles drafting, and maturity evaluation.
    • Customer Coaching Session (Up to 1 hour): Focuses on brainstorming use cases, risk triage, boundary mapping, success criteria, and pilot selection.
    • Follow-Up Customer Session (Optional, up to 1 hour): Provides an opportunity for Q&A and additional guidance on AI governance practices.

    Key Outcomes

    By participating in this accelerator, customers can expect to:

    • Develop a foundational understanding of AIMS and its importance in AI governance.
    • Identify key stakeholders and their roles in AI governance.
    • Align AI initiatives with organizational risk management and governance frameworks.
    • Gain insights into leading practices and resources for effective AI governance.

    This accelerator provides foundational guidance on establishing and managing an Artificial Intelligence Management System (AIMS).

    Accelerator Overview

    Foundations of AI Governance introduces Impact customers to the core principles and vocabulary of Artificial Intelligence Management System (AIMS) as defined by ISO/IEC 42001. Designed as the entry point for customers seeking to advance their AI governance maturity, this session will work as part one of a three-part series where we introduce, adopt, then audit customer AIMS as part of a comprehensive consulting solution. It also includes key resources and leading practice guides to help them approach AI governance with confidence.

    Note:
    This Accelerator is available for Impact Guided+ (Strategic Value add-on), Advanced and Total Packages.

    Prerequisites

    Customer has identified the necessary stakeholders who can discuss AI governance with confidence.

    What You Get

    Introductory Customer Session (Up to 1 hour)
    Includes the following:
    • What is an AIMS?
    • Why implement one?
    • Review stakeholder expectations
    • Vocabulary overview
    • Principles drafting
    • Maturity evaluation
    Customer Coaching Session (Up to 1 hour)
    Session includes:
    • Use case brainstorm
    • Risk triage
    • Light boundary mapping
    • Success & safety criteria
    • Pilot selection
    • Next steps
    Follow-Up Customer Session (optional upon Customer request - up to 1 hour)
    • Opportunity for Questions and Answers related to AI Governance
    • Provide additional guidance on leading practices

    Requested Customer Resources

    Table 1. Customer resource and responsibilities
    Customer Resource Responsibilities Required Recommended
    Platform Owner Responsible for the overall accountability of the ServiceNow platform. Provides leadership and oversight to the System Administrators, ensures team alignment to business strategy and the ServiceNow roadmap, and is actively involved in the overarching governance of the platform.
    Executive Sponsor Set direction and purpose, champion principles, provide cover & resources, bridge to stakeholders, create momentum.
    System Administrator(s) Maintains the stability and usability of the ServiceNow platform. Performs application maintenance, manages support for cases related to ServiceNow applications. Contributes to ServiceNow software releases by delivering configuration tasks and features.
    AI Stakeholder(s) Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for aligning current AI use cases with information provided.
    Risk Management Stakeholder(s) Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for aligning with Risk Management practices across the org.
    Governance Stakeholder(s) Learn specific vocabulary and validate foundational concepts for the organization, serve as a key resource for advancing Governance initiatives.
    Trusted Service Partner(s) Attends ServiceNow Impact Accelerator coaching session(s) to understand leading practices and potentially support customer going forward.

    Requested Information / Access

    1. Organization & scope
      1. Business context and objectives for AI (where value/risk sits), geographies served, regulated markets.
      2. Desired initial AIMS scope (org units, products, services) and any out-of-scope areas.
      3. Existing management systems/certifications (for example, ISO 27001/27701, SOC 2, QMS) we can align to.
    2. Governance & people
      1. Executive sponsor, product owners, risk/compliance, privacy, security, legal, data science/ML, IT ops—names and roles (RACI if you have one).
      2. Existing committees/charters (ethics board, model risk committee), decision rights, and escalation paths.
    3. Stakeholders & expectations
      1. Internal/external stakeholders (customers, regulators, employees, impacted communities) and their top expectations/concerns.
      2. Any trust/safety commitments already made publicly or contractually.
    4. Risk & compliance posture
      1. Applicable laws/regimes you care about (for example, sectoral rules, state privacy laws, EU AI Act mapping if relevant) and current gap analyses.
      2. Known AI incidents/near misses, complaints, or audit findings; current risk taxonomy and appetite/tolerances.
      3. Frameworks already in play (ISO 31000, ISO/IEC 23894, NIST AI RMF).

    Exclusions

    • ServiceNow is not responsible for implementing Foundations of AI Governance recommendations.
    • ServiceNow does not guarantee any strategic outcomes from this engagement.