--- sourceDocument: Brazil Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Act on AI recommended control objectives # Accept or dismiss AI-recommended control objectives {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Generate AI-assisted recommendations while reviewing a privacy assessment to quickly identify relevant control objectives from the privacy library. ## Before you begin The assessment task must be in Review state. Role required: sn_privacy.analyst, sn_prm_gen_ai.user Note: Without the sn_prm_gen_ai.user role, the privacy analyst reviewing the assessment can't generate AI recommendations. ## About this task After a business user submits a privacy assessment, the assessment task moves to the Review state. As its assigned analyst, generate AI recommendations to quickly surface relevant control objectives and risk statements based on the assessment's responses. The corresponding controls and risks for the accepted records are automatically scoped to the processing activity when the assessment task closes. Note: Review all AI-generated recommendations for accuracy. The Control Objective Recommender skill generates the control objective recommendations. For more information about the skill, see [AI reviewer assist for privacy assessment tasks](https://www.servicenow.com/docs/xphcXDdHenJ_0~o9suvWww "Privacy analysts reviewing an assessment can use AI-assisted recommendations to quickly identify control objectives and risk statements that are most likely to apply to a processing activity."). ## Procedure 1. Navigate to WorkspacesPrivacy Workspace. 2. Select the Tasks icon ![](). 3. In the My pending tasks tab, select Privacy assessments. 4. Open the privacy assessment to be reviewed. 5. On the Overview tab, select Recommend. The Recommendations tab organizes results into two tabs, Control objectives and Risk statements. If the request is still in progress, reload the page after some time. The request might take longer depending on the volume of data the skill processes. If no relevant data is available, the tab indicates that the request was completed and there are no recommendations currently available. 6. To review the control objective recommendations, select the Control objectives tab. 7. Select a control objective recommendation card to review. Each card displays:{#act-ai-recco-co-pia__table_f34_r23_jkc__entry__2} | Field | Description | |-|-| | Name | Name of the control objective. | | Category | Business or technical domain of the control objective. | | Classification | Functional intent of the control objective, such as Preventive or Corrective. | | AI suggestion guide | Reason for recommending the control objective. It references the specific assessment responses and record context that contributed to the recommendation. Note: Review AI-generated content for accuracy. | | Description | Description and summary of the control objective. | | Supplemental guidance | Additional guidance related to the control objective and how to address it. | | Mapped citations | Citations mapped to the control objective. Citations are informational and don't affect the applicable scope. | [ ] {#act-ai-recco-co-pia__table_f34_r23_jkc} 8. **Optional:** View the control objective in the privacy library or refresh your recommendations. | Option | Description | | Select the details icon ![](). | View details of the record in the privacy library. | | Select the refresh icon ![](). | Refresh the recommendations to reflect the latest data. | |-|-| {#act-ai-recco-co-pia__choicetable_zwf_rnd_ngc} 9. Accept or dismiss the recommendation. * If the recommendation is relevant, select Accept, then select Accept and add to confirm. * If the recommendation isn't relevant, select Dismiss, then select Confirm. {#act-ai-recco-co-pia__choices_p24_zqm_tgc} Accepted control objectives are automatically added to the Applicable scope tab of the assessment task. 10. **Optional:** To change your decision on an accepted or dismissed recommendation, select the card, then select Revert. ## Result All the records scoped to a processing activity based on assessment responses appear in the Applicable scope tab of the assessment task. These include the accepted AI recommendations, and records added manually and through smart assessment automation rules. To verify that the accepted control objective recommendations appear in the list correctly, filter by AI-assisted in the Mode column. If you must add more records, you can manually add those to the tab. Note: If a recommended record is already in Applicable scope from another mode such as automation, accepting the recommendation does not create a duplicate. The Mode column retains the value of the original source. If that record is later removed from Applicable scope and you then accept the same recommendation, the record is added back with AI-assisted as its mode. ## What to do next Review the risk statement recommendations. For steps, see [Accept or dismiss AI-recommended risk statements](https://www.servicenow.com/docs/LpGAlQ7ZeERH3IVx4KMuPQ "Generate AI-assisted recommendations while reviewing a privacy assessment to quickly identify relevant risk statements from the privacy library."). After reviewing all recommendations, mark the assessment as complete. For steps, see [Review a privacy assessment](https://www.servicenow.com/docs/oYnBDy_Yv187qfihSzDu6w "Review a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information."). Closing an assessment task automatically adds the corresponding controls for the accepted recommendations to the processing activity record. *[\>]: and then