Perform risk assessments on AI systems

task australia Updated Sep 10, 2026 2 min read perform-risk-assessments-on-ai-systems.md
Raw file servicenow.com

Perform risk assessments on AI systems to evaluate the likelihood and impact of potential risks using the AI Risk and Compliance application.

Before you begin

The Advanced Risk application must be installed to perform risk assessment on the AI systems.

Role required: sn_grc_ai_gov.ai_risk_and_compliance_analyst

About this task

To confirm risk-based assessments on AI assets and risk roll-up function correctly, the Migrate to Advanced Risk Assessments property must be enabled. If the property is set to No, risk score roll-up does not occur. For more information, see Set up Advanced Risk assessments properties.

Procedure

  1. Navigate to All > AI Risk and Compliance > AI Risk and Compliance Workspace.

  2. Select the list icon [Omitted image "list-icon-airc-ws.png"] Alt text:.

  3. From the Lists, open the AI systems for which you want to perform risk assessments.

  4. Navigate to Assessments > Risk assessments.

  5. Open the risk assessment.

  6. To reassign the assessment, select Reassign and do the following:

    1. Select the reason for reassignment.

    2. Select the new assessor.

    3. Enter additional details for the reassignment in the Additional Comments field.

    4. Select Reassign.

  7. To initiate the assessment, select Start assessment.

  8. Respond to all the risk assessment questions or factors.

    Your responses are automatically saved, and the overall risk score is calculated.

  9. To change the computed risk score, do the following:

    1. Select the I would like to change the computed score option.

    2. From the Override regulatory risk classification field, select the appropriate value.

    3. Enter comments that explain the reasons for the change in the computed score.

  10. Select Submit.

    The assessment is sent for review and approval if it meets the criteria, or published directly if no approvals are required.

Result

The risk assessment is submitted. If approval is required, the assessment enters the approver's queue. After approval, the risk scores are finalized and applied to the AI asset.

What to do next

After submitting the risk assessment, next steps vary depending on your role.

AI Risk and Compliance Analyst [sn_grc_ai_gov.ai_risk_and_compliance_analyst]: Your task is complete. The assessment is sent to the designated approver for review. You may be contacted if the approver needs additional information.

AI Risk and Compliance Manager [sn_grc_ai_gov.ai_risk_and_compliance_manager]: Review and approve the submitted risk assessment. After approval, risk scores are finalized and applied to the AI asset.

For more information, see Create control attestations for an AI asset.

Parent Topic:Using AI Risk and Compliance

Related topics

Initiate risk assessment on AI asset

Create control attestations for an AI asset

Risk assessment methodologies

Keywords risk assessmentAI systemsrisk scoreAdvanced Riskrisk assessment methodologyperform risk assessmentAI Risk and Compliance
Search documentation
Search document titles and file paths on the australia branch