Perform risk assessments on AI systems

  • Release version: Australia
  • Updated May 20, 2026
  • 1 minute to read
  • Perform risk assessments on AI systems to evaluate the likelihood and impact of potential risks using the AI Risk and Compliance application.

    Before you begin

    The Advanced Risk application must be installed to perform risk assessment on the AI systems.

    Role required: sn_grc_ai_gov.ai_risk_and_compliance_analyst

    About this task

    To confirm risk-based assessments on AI assets and risk roll-up function correctly, the Migrate to Advanced Risk Assessments property must be enabled. If the property is set to No, risk score roll-up does not occur. For more information, see Set up Advanced Risk assessments properties.

    Procedure

    1. Navigate to All > AI Risk and Compliance > AI Risk and Compliance Workspace.
    2. Select the list icon .
    3. From the Lists, open the AI systems for which you want to perform risk assessments.
    4. Navigate to Assessments > Risk assessments.
    5. Open the risk assessment.
    6. Optional: To reassign the assessment, select Reassign and do the following:
      1. Select the reason for reassignment.
      2. Select the new assessor.
      3. Enter additional details for the reassignment in the Additional Comments field.
      4. Select Reassign.
    7. To initiate the assessment, select Start assessment.
    8. Respond to all the risk assessment questions or factors.
      Your responses are automatically saved, and the overall risk score is calculated.
    9. Optional: To change the computed risk score, do the following:
      1. Select the I would like to change the computed score option.
      2. From the Override regulatory risk classification field, select the appropriate value.
      3. Enter comments that explain the reasons for the change in the computed score.
    10. Select Submit.
      The assessment is sent for review and approval if it meets the criteria, or published directly if no approvals are required.

    What to do next

    Create control attestations for an AI asset