AI Risk and Asset Management for ServiceNow AI release notes
Summarize
Summarized using AI
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.
Summary of AI Risk and Asset Management for ServiceNow AI release notes
The AI Risk and Asset Management for ServiceNow AI application provides enhanced capabilities to manage AI-related risks, compliance tasks, and asset governance within the ServiceNow platform. This application integrates risk and asset management features from the AI Control Tower (AICT) product to help organizations automate control verification, manage compliance lifecycle tasks, and streamline governance processes.
Show less
Key Features
- Product Owner Persona (Risk-based Tasks): Allows AI product owners to access and act on risk and compliance lifecycle tasks such as impact assessments and control attestations directly from the Task Inbox and Activity Center. This persona sees a tailored Risk and Compliance tab focused on Governance, aligning with their specific responsibilities.
- Continuous Controls Monitoring: Automates and accelerates control verification by scheduling indicators that evaluate control compliance in real time. Failed indicators automatically generate issues for product owners to remediate, reducing manual testing effort and enhancing control health visibility.
- Governance and Issue Management Assistance: Enables creation and documentation of governance, risk, and compliance issues with guided help from the employee center. It supports generation of concise summaries and executive reports to facilitate faster reviews and stakeholder communication.
- Smart Assessment Template Management: Supports versioning, creation, publishing, and deletion of assessment templates to maintain consistent governance. Users can view related entities, risks, and controls directly from task and work queue lists for efficient management.
- AI Regulatory Content Pack: Provides access to authority documents, agency mappings, and citations supporting AI regulatory frameworks, enhancing regulatory compliance coverage.
- Security Enhancements: Strengthened authorization validations within Multiple Record Association (MRA) workflows to ensure consistent access control and improve overall security during record associations.
- Automated Impact Assessment: Introduced automatic impact assessment flows triggered when new AI datasets are created, streamlining risk evaluation early in the dataset lifecycle.
Key Outcomes
- Improved alignment of risk and compliance tasks with product owner responsibilities, enhancing task focus and governance efficiency.
- Reduced manual effort in control verification through automation and real-time monitoring, leading to faster issue identification and resolution.
- Enhanced documentation and communication of governance and risk issues with automated summaries and executive reporting, supporting better decision-making.
- Consistent and governed management of assessments with template version control and easier access to regulatory references.
- Stronger security posture through improved authorization checks during record association workflows.
- Faster risk assessment initiation via automated impact assessments upon AI dataset creation.
Version history for the ServiceNow® AI Risk and Asset Management for ServiceNow® AI application on the ServiceNow Store.
Important:
For details on system requirements and family compatibility, view the application
listing on the ServiceNow Store
website.
Version history
- Version 1.4.2 - August 2026 (Australia)
- New:
- Product Owner Persona (Risk-based Tasks)AI product owners can now access and act on risk and compliance lifecycle tasks, such as impact assessments and control attestations, from the Task Inbox and Activity Center in AI Control Tower. The Activity Center surfaces AI asset tasks, issues, policy exceptions, and AI cases for this persona. On the asset record page, the Risk and Compliance tab now shows only the Governance widget for product owners; risk assessments and regulatory risk assessments are hidden from the Assessments section, matching the scope of tasks this persona is responsible for.
- Continuous Controls Monitoring Continuous Controls Monitoring automates and accelerate control verification, reducing manual testing burden and providing real-time visibility into control health. Configure indicators that run on a schedule to evaluate whether a control is compliant or non-compliant. When an indicator fails, an issue is created so that the product owner of the affected asset can remediate it.
- Changed: As part of MRA Security Enhancements, Strengthened authorization validation within Multiple Record Association (MRA) workflows to improve security and ensure access checks are consistently enforced during record association operations
- New:
- Version 1.1.4 - August 2026 (Zurich)
- New:
- Product Owner Persona (Risk-based Tasks)AI product owners can now access and act on risk and compliance lifecycle tasks, such as impact assessments and control attestations, from the Task Inbox and Activity Center in AI Control Tower. The Activity Center surfaces AI asset tasks, issues, policy exceptions, and AI cases for this persona. On the asset record page, the Risk and Compliance tab now shows only the Governance widget for product owners; risk assessments and regulatory risk assessments are hidden from the Assessments section, matching the scope of tasks this persona is responsible for.
- Continuous Controls MonitoringContinuous Controls Monitoring automates and accelerate control verification, reducing manual testing burden and providing real-time visibility into control health. Configure indicators that run on a schedule to evaluate whether a control is compliant or non-compliant. When an indicator fails, an issue is created so that the product owner of the affected asset can remediate it.
- Changed: As part of MRA Security Enhancements, Strengthened authorization validation within Multiple Record Association (MRA) workflows to improve security and ensure access checks are consistently enforced during record association operations
- New:
- Version 1.3.1 - July 2026 (Australia)
- New:
- Create and document governance, risk, and compliance issues with guided assistance from the employee center.
- Generate concise summaries of complex GRC issues for faster review and decision-making.
- Create executive summaries of risk assessments to communicate findings to stakeholders.
- Generate responses to assessment questions based on past assessments and reference documentation.
- Identify related control objectives from your controls library to reduce duplication.
- New:
- Version 1.2.0 - June 2026 (Australia)
- New:
- Manage Smart Assessment templates with versioning support. Create, publish, and delete template versions to support consistent assessment governance.
- View the entity, risk, and control for each assessment directly in task and work queue lists, without opening individual records.
- Access authority documents, agency mappings, and citations for additional AI regulatory frameworks in the AI Risk and Compliance content pack.
- Changed: Added automated impact assessment flow whenever an AI Dataset is created.
- Fixed:
- Localization & Performance issues are fixed.
- Fixed issue w.r.t to retired controls. Retired controls are excluded from the control based widgets.
- Fixed issue related to synchronization of AI asset life cycle tasks between AI Risk and Compliance and AICT workspace.
- Fixed functional domain issue w.r.t indicators feature on AI asset record page.
- New:
- Version 1.1.0 - May 2026 (Australia)
- Fixed: Resolved an issue in the existing workflow automation for lifecycle tasks.
- Version 1.0.1 - April 2026
- This application packages AI Risk Management and AI Asset management features of AICT product.