Configuring AI Risk and Compliance

concept brazil Updated Sep 10, 2026 4 min read configuring-ai-risk-and-compliance.md
Raw file servicenow.com

To use the AI Risk and Compliance application, you download and activate the application and then you must publish the assessment templates and set up the assessments and their automation logic to ensure accurate risk assessment scores.

Configuration overview

Verify that required applications, reference data, life cycle integrations, workspaces, governance artifacts, and access controls are in place so AI Risk and Compliance can be used end-to-end.

Important:

If you are upgrading AI Risk and Compliance, AI Control Tower Core, or Enterprise Architecture for AICT plugins together, review the upgrade order and dependencies in Enterprise Architecture for AICT plugin installation and upgrade considerations to avoid configuration issues.

  1. Install AI Risk and Compliance
  2. AI Risk and Compliance Content Pack
  3. Install AI Risk and Compliance content
  4. Configure AI Risk and Compliance Workspace
  5. Set up AI Risk and Compliance properties
  6. Set up Advanced Risk assessments properties
  7. Configure email-based intake for AI Risk and Compliance

For more information on assessments and publishing assessments, see Assessment templates.

Note:

Some AI capabilities are available only when the required plugins are installed.

  • AI Risk and Asset Management capabilities in AI Control Tower with Now Assist require the AI Risk and Asset Management for Now Assist plugin (sn_aict_irm_aiam), which depends on:

    • AI Risk and Compliance Integration with Control Tower (sn_grc_ai_irm_intg)
    • AI Asset Management (sn_ai_asset_mgmt)
  • AI Control Tower supports governance of both enterprise AI assets and ServiceNow AI assets, while AI Control Tower with Now Assist supports governance of ServiceNow AI assets only.

  • When AI Control Tower Core (sn_ai_governance) is used with AI Risk and Compliance in a new IRM deployment, the IRM Standard (sn_irm_std) plugin is required to make AI intake request forms available. These intake forms are used to submit requests through the Employee Portal for registering AI systems, AI models, and datasets for governance and risk evaluation.

    This requirement applies only to AI intake request forms and does not apply to AI cases, inquiries, or the Anonymous Reporting Center. For more information on applicable requests, see Request an AI use case, Request an AI model, and Request a dataset.

For information about AI Control Tower setup and plugin dependencies, see Activation and installation of AI Control Tower.

If your deployment also includes the Enterprise Architecture for AICT plugin (com.sn_ea_aict), review the upgrade-order guidance for AI Risk and Compliance, EA Workspace, and AI Control Tower Core before upgrading any of these applications out of sync. For more information, see Enterprise Architecture for AICT plugin installation and upgrade considerations.

Related topics

Install AI Risk and Compliance

Install AI Risk and Compliance content

Set up AI Risk and Compliance properties

Configure AI Risk and Compliance Workspace

Roles and responsibilities

Enterprise Architecture for AICT plugin installation and upgrade considerations

Search documentation
Search document titles and file paths on the brazil branch