{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":16242,"path":"governance-risk-compliance/ai-risk-management/airc-accept-ai-recco-risk-stmt.md","title":"Accept or dismiss AI-recommended risk statements","bundle":null,"doc_type":null,"release":"australia","body":"\n# Accept or dismiss AI-recommended risk statements\n\nGenerate AI-assisted recommendations to quickly identify and associate relevant risk statements with an AI Assessment from the AI risk and compliance library.\n\n## Before you begin\n\nThe assessment task must be in Review state.\n\nRole required: sn\\_grc\\_ai\\_gov.ai\\_risk\\_and\\_compliance\\_analyst, sn\\_airc\\_gen\\_ai.airc\\_ai\\_user\n\n**Note:** Without the sn\\_airc\\_gen\\_ai.airc\\_ai\\_user role, the risk and compliance analyst reviewing the assessment can't generate AI recommendations.\n\n## About this task\n\nAfter a business user submits an AI Assessment, the assessment task moves to the Review state. As the assigned analyst on the assessment task, generate AI recommendations to quickly surface relevant control objectives and risk statements based on the assessment responses. Accepting a recommendation automatically scopes that record to the AI Asset, and maps corresponding risks and controls to it.\n\n**Note:** Review all AI-generated recommendations for accuracy.\n\nThe Risk Statement Recommender skill generates the risk statement recommendations. Each risk statement recommendation displays related control objectives that serve as mitigating controls for the identified risks.\n\nFor more information about the skill, see [AI reviewer assist for risk assessments](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/ai-risk-management/ai-based-reviewer-assistant-for-assessments.md).\n\n## Procedure\n\n1. Navigate to **Workspaces** > **AI Risk and Compliance Workspace**.\n\n2. Select the Tasks icon \\[Omitted image \"icon-tprm-ws-tasks.png\"\\] Alt text:.\n\n3. In the My pending tasks tab, select **Risk assessments**.\n\n4. Open the privacy assessment to be reviewed.\n\n5. On the Overview tab, select **Recommend**.\n\n The Recommendations tab opens. It organizes the AI recommendations into two tabs, Control objectives and Risk statements. If there’s no relevant data available, the recommendations page indicates that the request was completed and there are no recommendations currently available.\n\n6. To review the risk statement recommendations, select the Risk statements tab.\n\n **Note:** A risk statement that is already in scope through manual addition or automation rules, isn't recommended.\n\n7. Select a risk statement recommendation card to review.\n\n Each card displays:\n\n\n
\n\nField\n\n\n\nDescription\n\n
\n\nName\n\n\n\nName of the risk statement.\n\n
\n\nCategory\n\n\n\nBusiness or technical domain for the risk statement.\n\n
\n\nClassification\n\n\n\nRisk classification based on use and purpose\n\n
\n\nAI suggestion guide\n\n\n\nReason for recommending the risk statement. It references the specific assessment responses and record context that contributed to the recommendation.**Note:** Review AI-generated content for accuracy.\n\n
\n\nDescription\n\n\n\nDescription and summary of the risk statement.\n\n
\n\nReview and accept mitigating controls\n\n\n\nRelated control objectives that mitigate the risk.**Note:** Only the control objectives that are also recommended for the same assessment appear here. For example, a risk statement might have five mitigating control objectives mapped to it in the library. If only one of those was recommended for this assessment, only that control objective is listed.\n\n
8. View the risk statement in the privacy library or refresh your recommendations.\n\n |Option|Description|\n |------|-----------|\n |**Select the details icon \\[Omitted image \"details-icon.jpg\"\\] Alt text:.**|View details of the record in the privacy library.|\n |**Select the refresh icon \\[Omitted image \"refresh-icon.jpg\"\\] Alt text:.**|Refresh the recommendations to reflect the latest data.|\n\n9. To scope related control objectives along with the recommended risk statement, select each record from the Control objective sub-tab within Review and accept mitigating controls.\n\n The State column shows Accepted for a control objective that is already in Applicable scope, and New for those that haven't been acted on yet.\n\n10. Accept or dismiss the recommendation.\n\n - If the recommendation is relevant, select **Accept**, then select **Accept and add** to confirm.\n - If the recommendation isn't relevant, select **Dismiss**, then select **Confirm**.\n An accepted risk statement, and any related control objectives you selected with it, are automatically added to the Applicable scope tab of the assessment task. A dismissed risk statement results in any related control objectives you selected to be dismissed with it.\n\n11. To change your decision on an accepted or dismissed recommendation, select the card, then select **Revert**.\n\n\n## Result\n\nAll accepted AI recommendations are scoped to the asset and appear in the Applicable scope tab of the assessment task. The applicable scope also includes other control objectives and risk statements added manually and through smart assessment automation rules. Filter by AI-assisted in the Mode column to confirm if the accepted control objective recommendations appear in the list correctly. If you must add more records, you can manually add those to the tab.\n\n## What to do next\n\nReview the control objective recommendations. For steps, see [Accept or dismiss AI-recommended control objectives](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/ai-risk-management/airc-accept-ai-recco-co.md). When done, mark the assessment as complete.\n\n**Parent Topic:**[Using AI Risk and Compliance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/ai-risk-management/using-ai-risk-and-compliance.md)\n\n"}}