Exploring Risk and Compliance

---
title: Exploring Risk and Compliance
description: Risk and Compliance in AI Control Tower provides a summary of regulatory classification, compliance, and risk across your AI portfolio and individual AI assets.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/intelligent-experiences/gov-airc-exploring.html
release: brazil
topic_type: concept
last_updated: "2026-09-30"
reading_time_minutes: 4
keywords: [explore]
breadcrumb: [Managing risk and compliance, Govern AI assets, AI Control Tower, Establishing AI governance, Enable AI Experiences]
---

# Exploring Risk and Compliance

Risk and Compliance in AI Control Tower provides a summary of regulatory classification, compliance, and risk across your AI portfolio and individual AI assets.

## Risk and Compliance overview

Risk and Compliance in AI Control Tower provides governance visibility for AI systems at the portfolio level and the individual AI system level.

The Risk and Compliance page shows summarized signals across AI assets, including recommendations, regulatory risk classification, compliance posture, compliance score, aggregated risk scores, and risk heat maps. The summaries help stakeholders identify trends, prioritize attention, and focus on higher-risk areas of the AI portfolio.

When you access a record from your AI asset inventory, the **Risk & Compliance** tab provides detailed governance information for that AI asset. Details include its regulatory risk classification, compliance score, aggregated risk score, compliance posture for priority frameworks, risk heat map, and related governance records.

AI Control Tower displays these outcomes for oversight. Risk assessments, control execution, remediation, and other governance activities are managed through related governance solutions and supporting workflows.

## Risk and Compliance users

|User|Description|
|----|-----------|
|AI governance stakeholder|Uses portfolio-level summaries to assess overall governance posture, identify priority recommendations, and monitor how AI assets are classified and governed across the organization.|
|AI steward or asset stakeholder|Uses the asset-level Risk and Compliance view to review the governance posture of an individual AI system, including its assessment status, compliance score, aggregated risk score, and related governance records.|
|Governance reviewer|Uses framework-specific and risk-specific views to identify which areas require follow-up, such as unresolved issues, incomplete assessments, ineffective controls, or missing governance data.|

## Risk and Compliance benefits

|Feature|Benefit|Users|
|-------|-------|-----|
|Top recommendations|Identify high-priority governance work that requires immediate attention.|AI governance stakeholder, governance reviewer|
|Regulatory risk classification|Review how AI assets are grouped by regulatory risk level and identify assets that require closer review.|AI governance stakeholder, governance reviewer|
|Compliance score and compliance posture for priority frameworks|Review compliance posture for the configured frameworks and see where issues affect governance coverage.|AI governance stakeholder, AI steward or asset stakeholder|
|Aggregated risk score and risk heat map|Learn how inherent risk and control effectiveness influence residual risk for an AI system.|AI steward or asset stakeholder, governance reviewer|
|Assessments, risks, controls, issues, and policy exceptions|Review governance records associated with a specific AI system without leaving the AI system context.|AI steward or asset stakeholder|

## What to explore next

For more information about Risk and Compliance in AI Control Tower, see:

-   [Classifying AI assets by regulatory risk](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-regulatory-classification.md)
-   [Regulatory risk classification reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-ref-regulatory-classification.md)
-   [Risk rating calculation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-risk-score-calculation.md)
-   [AI risk score calculation reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-ref-risk-score-calculation.md)
-   [Compliance score calculation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-compliance-score-calculation.md)
-   [AI system compliance score calculation reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-ref-compliance-score.md)
-   [Configuring Risk and Compliance in AI Control Tower](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-configuring.md)
-   [Reviewing AI governance posture and compliance status](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-using.md)
-   [Reviewing regulatory classification and compliance status](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-regulatory-status.md)
-   [Reviewing AI risk posture](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-risk-posture.md)
-   [Risk score and compliance score dashboard errors](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-ref-troubleshooting.md)
-   [Detecting governance insights](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-insight-detection.md)
-   [Governance insight detection reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-ref-insight-detection.md)
-   [Act on AI asset governance insight recommendations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-resolve-ai-asset-insight-recommendations.md)
-   [Risk and Compliance reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/intelligent-experiences/gov-airc-reference.md)