---
sourceDocument: Brazil Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Perform impact assessment on an AI use case

# Perform impact assessment on an AI use case {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read  
Perform an impact assessment of an AI use case to identify risks like copyright issues, bias, privacy breaches, misinformation, or surveillance, enabling improved oversight and risk management.

## Before you begin

Role required: sn_ai_asset_mgmt.ai_asset_owner or sn_grc_ai_gov.ai_risk_and_compliance_business_user

## About this task

The impact assessment template includes Use and purpose questions that evaluate the AI system's intended outcomes, affected populations, level of autonomy, and data usage. When Use and purpose information is captured during AI system intake, those responses are carried forward into the relevant impact assessment questions. Review the populated answers before submitting the assessment and update them if the information has changed.  
Note:  
The ServiceNow Risk products help customers address regulatory requirements under various jurisdictions. However, we do not guarantee compliance and customers are ultimately responsible for their own compliance with
applicable regulations.

ServiceNow aims to provide software updates for new or updated major regulations and requirements within twelve to eighteen months of the regulation's publication. For regulations for which ServiceNow provides a level
of support in the base system, ServiceNow aims to provide software updates for minor regulatory changes within 12 months and for major regulatory changes within up to 18 months depending on scope and impact. We
differentiate between typical regulatory content updates, which do not require software updates or enhancements, and regulatory updates, which do require software updates or enhancements. Content updates are
generally delivered on a shorter cadence than if software update or enhancement is required for the regulatory update or change.

## Procedure

1. Navigate to AllAI Control Tower.
2. On the AI Control Tower dashboard, navigate to the Tasks section and select the assigned impact assessment task.
3. Select Take assessment.
4. **Optional:** To reassign the impact assessment to another user, select Reassign and do the following:
   1. In the Reassign task dialog box, fill in the fields as appropriate.  
      {#perform-impact-assessment-of-ai-use-case__table_pcl_lkb_11c__entry__2}

      | Field | Description |
      |-|-|
      | Assignee | Name of the user to whom you want to reassign the task. |
      | Additional comments | Additional information stating the reason for reassignment. |
      [Table 1. Reassign task]

      {#perform-impact-assessment-of-ai-use-case__table_pcl_lkb_11c}
   2. Select Reassign.
   {#perform-impact-assessment-of-ai-use-case__substeps_x2m_44v_z2c}
5. **Optional:** To initiate a sidebar discussion, select the more icon ![](), and select Discuss.
   1. In the Start a Sidebar discussion dialog box, fill in the fields as appropriate.  
      {#perform-impact-assessment-of-ai-use-case__table_pcl_lkb_11d__entry__2}

      | Field | Description |
      |-|-|
      | Subject | Option to provide a title for the sidebar discussion. |
      | Add participants | Options to add participants for the sidebar discussion. Note: You can include any users with access to this record in this discussion. |
      | Include a brief message for participants | Brief summary about the feedback to be discussed in the sidebar discussion. |
      [Table 2. Start a Sidebar discussion]

      {#perform-impact-assessment-of-ai-use-case__table_pcl_lkb_11d}
   2. Select Start discussion.
   {#perform-impact-assessment-of-ai-use-case__substeps_yrn_gqv_z2c}
6. To initiate the assessment, select Start.
7. Review any instructions or reference information.  
   You can see additional question guidance text for your review as you complete the questions.
8. Answer all relevant questions in the questionnaire.  
   Your responses are automatically saved, and based on them, relevant risk statements and control objectives are associated with the assessment. After the AI Risk and Compliance analyst marks the assessment state as Closed complete, risks and controls are generated from these risk statements and control objectives respectively and are mapped to the AI asset.  
   Note:  
   The system automatically maps risks and controls only when you use the default assessment questionnaire.
9. Select Submit.  
   The impact assessment is submitted for review. An AI Risk and Compliance analyst evaluates the completed assessment and the suggested list of risks and controls derived from your responses.

## Result

The impact assessment is submitted. The AI Risk and Compliance analyst receives the assessment
in their task queue for review. After the analyst closes the assessment
as Closed complete, risks and controls are
automatically mapped to the AI asset based on the assessment responses.

## What to do next

After submitting the impact assessment, next steps vary depending on your role.

AI asset owner \[sn_ai_asset_mgmt.ai_asset_owner\] or AI Risk and Compliance Business User
\[sn_grc_ai_gov.ai_risk_and_compliance_business_user\]: Your task is complete.
You may be contacted if the analyst needs additional information to complete
their review.

AI Risk and Compliance analyst
\[sn_grc_ai_gov.ai_risk_and_compliance_analyst\]: Review the completed assessment
in your task queue. Evaluate the responses and the suggested list of risks and
controls. When your review is complete, close the assessment as Closed complete to trigger automatic mapping of risks and controls to
the AI asset.

For more information, see [Initiate risk assessment on AI asset](https://www.servicenow.com/docs/WWBenCzqVbDDerkfWphNDw "Initiate risk assessment to enable the risk assessor to perform risk assessments on AI systems, evaluating the likelihood and impact of potential risks.").
**Related concepts**   

* [Intake requests](https://www.servicenow.com/docs/HklZLokgs29vkekV3JUgxA "Intake requests are the entry point for managing and governing AI initiatives. They capture essential information about proposed AI systems, models, and datasets so that requests can be reviewed, triaged, and evaluated early in the AI life cycle.")
* [Assessment templates](https://www.servicenow.com/docs/Si9~~L942vcvK~YUQsVGRg "The AI Risk and Compliance application uses assessment templates to evaluate AI assets for risk, regulatory compliance, and ethical alignment.")  
**Related tasks**   

* [Initiate risk assessment on AI asset](https://www.servicenow.com/docs/WWBenCzqVbDDerkfWphNDw "Initiate risk assessment to enable the risk assessor to perform risk assessments on AI systems, evaluating the likelihood and impact of potential risks.")

*[\>]: and then