Review AI governance posture and compliance status

The Risk & Compliance tab under Govern displays regulatory classification, risk posture, and governance readiness for AI assets.

Overview of Govern

Use the Govern tab in AI Control Tower to monitor and understand the governance status of AI assets. Learn how AI systems are classified, what risks they present, what governance work is required, and whether governance information is sufficiently complete to support review and decision-making.

With the Govern tab, you can:

• Review regulatory classification
• Review AI risk posture
• Track compliance posture
• Monitor cases, issues, and governance actions

The page is divided into the following components:

• Compliance posture — Monitor compliance of implemented controls and regulatory risk across the AI portfolio.
• Risk posture — Monitor inherent and residual risk across the AI portfolio.

Compliance posture

The widgets under compliance posture display the top action items to execute and track the risk classification and compliance score of AI systems and controls. Each widget reflects the active filter state. View details for each metric area by selecting the arrow for each metric. Select an individual component on the widget to view underlying assets.

Table 1. Compliance posture widgets

Widget	What it displays	Status breakdown	Roles required
Top 5 action items	Recommended action items along with other assigned and unassigned action items. Select See all Recommendations in Activity Center to view more details. Select the arrow to open Lifecycle tasks that require action. For more information, see Reviewing regulatory classification and compliance status	1-Critical 2-High 3-Medium 4-Low	sn_ai_governance.ai_steward
Regulatory risk classification	Regulatory risk classification of assets in the portfolio. Use the drop-down selector to filter the assets into AI System, AI Model, and Dataset. The assets are categorized based on their status. Select each status to drill down further. For more information, see Reviewing regulatory classification and compliance status	Low Medium High Unacceptable Critical To be determined	sn_ai_governance.ai_steward
Compliance score	Compliance scores for AI assets compared to adopted frameworks and policies. Compliance status for top regulatory frameworks. The progress indicator shows compliant and non-compliant controls and displays an alert badge for high priority issues. Toggle between Authority documents and Policies to view detailed information. For more information, see Reviewing regulatory classification and compliance status	Compliant Non-compliant To be determined	sn_ai_governance.ai_steward

Risk posture

The widgets under risk posture provide an at-a-glance view of the inherent and residual risk across the AI portfolio. Use the drop-down selector to filter the assets into AI System, AI Model, and Dataset. To get an in-depth look at the risk and compliance posture, select Take me there. This takes you to the AI Risk and Compliance Workspace

Table 2. Risk posture widgets

Widget	What it displays	Status breakdown	Roles required
AI system by aggregated risk score	AI system risk landscape, categorized by aggregated risk score. Use the drop-down selector to filter between Inherent and Residual risk. For more information, see AI risk posture	1-Critical 2-High 3-Medium 4-Low
Risk heat map	Assessed AI risks displayed in a color-coded matrix to help identify concentrations of higher-risk AI assets and compare current and intended risk posture. Use the drop-down selector to filter between Inherent and Residual risk. Select Open heatmap workbench to open the heatmap in the AI Risk and Compliance Workspace. For more information, see AI risk posture.	High Medium Low