AI Risk and Compliance Content
The AI Risk and Compliance Content application is a centralized repository of frameworks, citations, risk statements, and control objectives. Using this application accelerates the adoption of AI Risk and Compliance frameworks.
You can install AI Risk and Compliance Content from the ServiceNow Store. After installation, you can launch the application by selecting the AI Risk and Compliance Content icon on the AI Risk and Compliance Workspace.
Frameworks and regulations
- EU Artificial Intelligence Act
- NIST Risk Management Framework
- Transparency in Frontier Artificial Intelligence Act (SB 53)
- Colorado Artificial Intelligence Act (SB 205)
Benefits of the AI Risk and Compliance Content application
- Provides the ability to choose the framework you want to use and activate.
- Helps you to choose the citations that are associated with a particular framework and install them in the active state in your instance.
- Enables you to choose control objectives, which are associated with the selected citations.
- Helps you to select the risk statements from the authority documents.
Regulatory support statement
The ServiceNow Risk products help customers address regulatory requirements under various jurisdictions. However, we do not guarantee compliance and customers are ultimately responsible for their own compliance with applicable regulations.
ServiceNow aims to provide software updates for new or updated major regulations and requirements within twelve to eighteen months of the regulation's publication. For regulations for which ServiceNow provides a level of support in the base system, ServiceNow aims to provide software updates for minor regulatory changes within 12 months and for major regulatory changes within up to 18 months depending on scope and impact. We differentiate between typical regulatory content updates, which do not require software updates or enhancements, and regulatory updates, which do require software updates or enhancements. Content updates are generally delivered on a shorter cadence than if software update or enhancement is required for the regulatory update or change.