---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Explore

# Exploring Risk and Compliance {#ariaid-title1}

Release version: Australia  
Updated May 13, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Risk and Compliance in AI Control Tower provides visibility into risk, compliance, and governance status across your AI portfolio.

## Risk and Compliance overview {#gov-airc-exploring__cf-exploring-parent-overview}

Risk and Compliance in AI Control Tower provides governance visibility for AI systems at both the portfolio level and the individual AI system level. These views provide governance visibility into risk, compliance, and
governance status without requiring users to work directly in the underlying governance workflows.

The Risk and Compliance views show summarized governance signals across AI assets. These signals include action items, regulatory risk classification, compliance posture, compliance score, aggregated risk posture, and risk
heat maps. The generated summaries help stakeholders identify trends, prioritize attention, and focus on higher-risk areas of the AI portfolio.

At the AI system level, Risk and Compliance views provide more specific context for a single asset. Users can review regulatory classification status, compliance score, and compliance posture for priority frameworks. Users
can also review aggregated risk rating, risk heat maps, and related governance records such as assessments, risks, controls, issues, and policy exceptions.

AI Control Tower surfaces these governance outcomes for visibility and oversight. Risk assessments, control execution, remediation, and other governance activities are managed through related governance
solutions and supporting workflows.

## Risk and Compliance users {#gov-airc-exploring__cf-exploring-parent-users}

{#gov-airc-exploring__table_gov-airc-exploring__entry__2}

| User | Description |
|-|-|
| AI governance stakeholder | Uses portfolio-level summaries to understand overall governance posture, identify priority action items, and monitor how AI assets are classified and governed across the organization. |
| AI steward or asset stakeholder | Uses the asset-level Risk and Compliance view to understand the governance posture of an individual AI system, including its assessment status, compliance score, aggregated risk rating, and related governance records. |
| Governance reviewer | Uses framework-specific and risk-specific views to understand which areas require follow-up, such as unresolved issues, incomplete assessments, ineffective controls, or missing governance data. |
[Table 1. Users]

{#gov-airc-exploring__table_gov-airc-exploring}

## Risk and Compliance benefits {#gov-airc-exploring__cf-exploring-parent-benefits}

{#gov-airc-exploring__table-benefits-gov-airc-exploring__entry__3}

| Feature | Benefit | Users |
|-|-|-|
| Top action items | Identify high-priority governance work that requires immediate attention. | AI governance stakeholder, governance reviewer |
| Regulatory risk classification | Understand how AI assets are grouped by regulatory acceptability and identify assets that require closer review. | AI governance stakeholder, governance reviewer |
| Compliance score and compliance posture for priority frameworks | Understand compliance posture for configured frameworks and see where issues affect governance coverage. | AI governance stakeholder, AI steward or asset stakeholder |
| Aggregated risk rating and risk heat map | Understand how inherent risk and control effectiveness influence residual risk for an AI system. | AI steward or asset stakeholder, governance reviewer |
| Assessments, risks, controls, issues, and policy exceptions | Review governance records associated with a specific AI system without leaving the AI system context. | AI steward or asset stakeholder |
[Table 2. Benefits by feature]

{#gov-airc-exploring__table-benefits-gov-airc-exploring}

## What to explore next {#gov-airc-exploring__cf-exploring-parent-links}

For information about configuring and using Risk and Compliance in AI Control Tower, see:

* [Configuring Risk and Compliance visibility](https://www.servicenow.com/docs/mRInoAF_BfS5ZH98SWRVjQ "Risk and Compliance information appears in AI Control Tower only when the required governance applications, frameworks, and data are available in your environment.")
* [Regulatory status](https://www.servicenow.com/docs/1ElNg83gUDoHaweD6Swwmg "Review regulatory risk classification and compliance posture to understand how AI assets align with configured governance expectations.")
* [Risk posture](https://www.servicenow.com/docs/iC4jRzwKfQF1Ft9qg6m4rA "Aggregated risk posture displays inherent risk, residual risk, and control effectiveness for AI assets.")
* [Risk and Compliance reference](https://www.servicenow.com/docs/r~Ia73jqkHrJv~hbZ6WlDg "Reference information about the scope of Risk and Compliance visibility in AI Control Tower, including key terminology used across these views.")
{#gov-airc-exploring__ul_v54_mwj_zjc}