--- sourceDocument: Brazil Enable AI sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Enable AI ft:clusterId : - platai bundleId : - platai workflow : - Platform --- # Explore # Exploring Risk and Compliance {#ariaid-title1} Release version: Brazil Updated September 30, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Risk and Compliance in AI Control Tower provides a summary of regulatory classification, compliance, and risk across your AI portfolio and individual AI assets. ## Risk and Compliance overview {#gov-airc-exploring__cf-exploring-parent-overview} Risk and Compliance in AI Control Tower provides governance visibility for AI systems at the portfolio level and the individual AI system level. The Risk and Compliance page shows summarized signals across AI assets, including recommendations, regulatory risk classification, compliance posture, compliance score, aggregated risk scores, and risk heat maps. The summaries help stakeholders identify trends, prioritize attention, and focus on higher-risk areas of the AI portfolio. When you access a record from your AI asset inventory, the Risk \& Compliance tab provides detailed governance information for that AI asset. Details include its regulatory risk classification, compliance score, aggregated risk score, compliance posture for priority frameworks, risk heat map, and related governance records. AI Control Tower displays these outcomes for oversight. Risk assessments, control execution, remediation, and other governance activities are managed through related governance solutions and supporting workflows. ## Risk and Compliance users {#gov-airc-exploring__cf-exploring-parent-users} {#gov-airc-exploring__table_gov-airc-exploring__entry__2} | User | Description | |-|-| | AI governance stakeholder | Uses portfolio-level summaries to assess overall governance posture, identify priority recommendations, and monitor how AI assets are classified and governed across the organization. | | AI steward or asset stakeholder | Uses the asset-level Risk and Compliance view to review the governance posture of an individual AI system, including its assessment status, compliance score, aggregated risk score, and related governance records. | | Governance reviewer | Uses framework-specific and risk-specific views to identify which areas require follow-up, such as unresolved issues, incomplete assessments, ineffective controls, or missing governance data. | [Table 1. Risk and Compliance user types] {#gov-airc-exploring__table_gov-airc-exploring} ## Risk and Compliance benefits {#gov-airc-exploring__cf-exploring-parent-benefits} {#gov-airc-exploring__table-benefits-gov-airc-exploring__entry__3} | Feature | Benefit | Users | |-|-|-| | Top recommendations | Identify high-priority governance work that requires immediate attention. | AI governance stakeholder, governance reviewer | | Regulatory risk classification | Review how AI assets are grouped by regulatory risk level and identify assets that require closer review. | AI governance stakeholder, governance reviewer | | Compliance score and compliance posture for priority frameworks | Review compliance posture for the configured frameworks and see where issues affect governance coverage. | AI governance stakeholder, AI steward or asset stakeholder | | Aggregated risk score and risk heat map | Learn how inherent risk and control effectiveness influence residual risk for an AI system. | AI steward or asset stakeholder, governance reviewer | | Assessments, risks, controls, issues, and policy exceptions | Review governance records associated with a specific AI system without leaving the AI system context. | AI steward or asset stakeholder | [Table 2. Benefits by feature] {#gov-airc-exploring__table-benefits-gov-airc-exploring} ## What to explore next {#gov-airc-exploring__cf-exploring-parent-links} For more information about Risk and Compliance in AI Control Tower, see: * [Classifying AI assets by regulatory risk](https://www.servicenow.com/docs/sClljCVF67CPXRFXGJUFxg "Regulatory risk classification places an AI asset in a risk rating, such as Low or High, based on the score from a risk assessment.") * [Regulatory risk classification reference](https://www.servicenow.com/docs/IJU8YzoOWMFirg40SQPKFw "Risk assessment methodologies, formulas, risk ratings, and records that determine the regulatory risk classification of an AI asset.") * [Risk rating calculation](https://www.servicenow.com/docs/lJlD8HrrCxUDFyxd0TNUFA "The inherent, control effectiveness, and residual ratings of an AI system come from risk assessment scores that a risk rollup aggregates.") * [AI risk score calculation reference](https://www.servicenow.com/docs/cQJhUBeCEFPNsMeyA_z77A "Formulas, rating bands, lookup matrix, and rollup settings that determine the inherent, control effectiveness, and residual ratings of an AI system.") * [Compliance score calculation](https://www.servicenow.com/docs/eKknGglQ_7OqGhO52vPSHA "The compliance score of an AI system measures how well its controls are met, based on the scores of its active related entities.") * [AI system compliance score calculation reference](https://www.servicenow.com/docs/S7Etxe6xKf5JSMdFLw5yOg "Formula, calculation rules, scheduled jobs, and properties that determine the compliance score of an AI system.") * [Configuring Risk and Compliance in AI Control Tower](https://www.servicenow.com/docs/rNMg97kQ8ffXxgs7RLTZxw "Risk and Compliance information appears in AI Control Tower only when the required governance applications, frameworks, and data are available in your environment.") * * * [Reviewing AI governance posture and compliance status](https://www.servicenow.com/docs/1GO8fG3lus8FwhTdlN3Eqw "The Risk & Compliance tab under Govern displays regulatory classification, risk posture, and compliance information for AI assets.") * [Reviewing regulatory classification and compliance status](https://www.servicenow.com/docs/88BJzQdcc1~XZJLvMq3j0w "Review regulatory risk classification and compliance posture to understand how AI assets align with configured governance expectations.") * [Reviewing AI risk posture](https://www.servicenow.com/docs/gDb48fnpUrgY6ZFNsRyjwA "Aggregated risk posture displays inherent risk, residual risk, and control effectiveness for AI assets.") * [Risk score and compliance score dashboard errors](https://www.servicenow.com/docs/13aowhpMtGaHdz1NC3~BxA "Properties and scheduled jobs that resolve No data found errors in the risk score and compliance score dashboards on the AI asset record and landing pages.") * [Detecting governance insights](https://www.servicenow.com/docs/RufDWBdsOYtaEvza0tm7Og "Scheduled detection jobs evaluate your AI portfolio and generate the Stalled Lifecycle Tasks and Significant Issues insights that appear as recommendations.") * [Governance insight detection reference](https://www.servicenow.com/docs/cqGvWDYixTkLyTEPcMmrkA "Thresholds, criteria, and refresh schedule that determine when an AI system appears in the Stalled Lifecycle Tasks or Significant Issues insight.") * [Act on AI asset governance insight recommendations](https://www.servicenow.com/docs/95VrE9rFLA_qLKBTj52Vag "Resolve Stalled Lifecycle Tasks and Significant Issues recommendations to keep AI systems moving through their governance life cycle.") * [Risk and Compliance reference](https://www.servicenow.com/docs/mReVJ5xU~HA5y0Gq2GwuUA "Review the scope of Risk and Compliance visibility in AI Control Tower, including key terminology used across these views.") {#gov-airc-exploring__ul_v54_mwj_zjc}