Using AI Risk and Compliance

Use the AI Risk and Compliance to request AI systems, AI models, AI datasets, and so on and perform assessments for them to determine their risk posture.

Use AI Risk and Compliance to request AI assets, perform assessments, manage risks and controls, and investigate AI cases and inquiries across the AI governance life cycle.

The following topics describe the tasks you can perform:

• Request an AI use case
• Request an AI model
• Request a dataset
• Raise an AI inquiry
• Report an AI case from the Employee Center
• Report an AI case anonymously
• Create an AI issue in the AI Risk and Compliance workspace
• Remediate an issue in AI Risk and Compliance
• Initiate AI assessment on an AI asset
• Perform impact assessment on an AI use case
• Initiate risk assessment on AI asset
• Perform risk assessments on AI systems
• Manage controls using AI Risk and Compliance
• Initiate risk assessment on AI asset's risks
• Create bulk risk assessment
• Create an AI case in the AI Risk and Compliance workspace

• Request an AI use case
  Request the development or procurement of an AI system to initiate and document the need for an AI‑driven solution within an organization. This process helps ensure that AI implementations are aligned with business goals, compliant with regulations, and technically feasible.
• Request an AI model
  Request the development or procurement of an AI model to support an AI system. This process captures the technical and business context needed to initiate governance review, risk assessment, and life cycle tracking for the model.
• Request a dataset
  Request a dataset to support AI model training, testing, validation, or analytical use cases. This process helps ensure data sources are reviewed for quality, privacy, and compliance.
• Raise an AI inquiry
  Submit your questions about AI systems, models, or datasets and their business applications.
• Report an AI case from the Employee Center
  Report an AI case by providing a detailed description, such as system behavior, affected users, and relevant data. Include supporting attachments for prompt resolution.
• Report an AI case anonymously
  Report an AI case without revealing your identity using the Anonymous Reporting Center. Your name and contact details are not shared with investigators. Save the report key and report number provided after submission to track updates or provide additional information later.
• Create an AI issue in the AI Risk and Compliance workspace
  Identify and manage issues related to the impacted areas for the reported AI case in the AI Risk and Compliance workspace.
• Remediate an issue in AI Risk and Compliance
  After an issue has been created, reported, identified, triaged, and investigated, you can remediate it.
• Initiate AI assessment on an AI asset
  Initiate AI assessment for the whole AI asset.
• Perform impact assessment on an AI use case
  Perform an impact assessment of an AI use case to identify risks like copyright issues, bias, privacy breaches, misinformation, or surveillance, enabling improved oversight and risk management.
• Initiate risk assessment on AI asset
  Initiate risk assessment to enable the risk assessor to perform risk assessments on AI systems, evaluating the likelihood and impact of potential risks.
• Perform risk assessments on AI systems
  Perform risk assessments on AI systems to evaluate the likelihood and impact of potential risks using the AI Risk and Compliance application.
• Manage controls using AI Risk and Compliance
  You can add, remove, and delete controls for an AI asset using the AI Risk and Compliance.
• Initiate risk assessment on AI asset's risks
  Request risk assessments for risks identified during the AI system's impact assessment. These risks are generated based on the responses provided during the impact assessment of the AI system.
• Create bulk risk assessment
  Create a bulk risk assessment project to perform assessments on multiple risks and controls simultaneously using the AI Risk and Compliance workspace. You can define the project context, including the assessable entity, Risk assessment methodology (RAM), project name, description, and identify and add stakeholders.
• Perform bulk assessment in stacked view
  Perform assessments on multiple risks and controls simultaneously in a risk assessment project using AI Risk and Compliance Workspace. You can assess inherent risks, effectiveness of controls, residual risks, and target risks. You can define risk responses that enable you to manage and mitigate the risks identified during the risk assessment process.
• Perform bulk assessment in grid view
  Perform assessments on multiple risks and controls simultaneously in a risk assessment project in the grid view using AI Risk and Compliance Workspace. You can assess inherent risks, effectiveness of controls, residual risks, and target risks. You can define risk responses that enable you to manage and mitigate the risks identified during the risk assessment process.
• Create an AI case in the AI Risk and Compliance workspace
  Create an AI case in the AI Risk and Compliance workspace by providing a detailed description, such as system behavior, affected users, and any relevant data. Ensure all necessary information, such as supporting attachments, is included for prompt resolution.