Skip to content
Use › AI Risk and Compliance › Governance › Risk › and Compliance
Release: Australia · Updated: 2026-05-20 · Official documentation · View source

Perform impact assessment on an AI use case

Perform an impact assessment of an AI use case to identify risks like copyright issues, bias, privacy breaches, misinformation, or surveillance, enabling improved oversight and risk management.

Before you begin

Role required: sn_ai_asset_mgmt.ai_asset_owner or sn_grc_ai_gov.ai_risk_and_compliance_business_user

About this task

The impact assessment template includes Use and purpose questions that evaluate the AI system’s intended outcomes, affected populations, level of autonomy, and data usage. When Use and purpose information is captured during AI system intake, those responses are carried forward into the relevant impact assessment questions. Review the populated answers before submitting the assessment and update them if the information has changed.

Procedure

  1. Navigate to All > AI Control Tower.

  2. On the AI Control Tower dashboard, navigate to the Tasks section and select the assigned impact assessment task.

  3. Select Take assessment.

  4. To reassign the impact assessment to another user, select Reassign and do the following:

    1. In the Reassign task dialog box, fill in the fields as appropriate.

      FieldDescription
      AssigneeName of the user to whom you want to reassign the task.
      Additional commentsAdditional information stating the reason for reassignment.

    2. Select Reassign.

  5. To initiate a sidebar discussion, select the more icon

Image omitted: more-options.png
, and select **Discuss**.
1.  In the Start a Sidebar discussion dialog box, fill in the fields as appropriate.
FieldDescription
SubjectOption to provide a title for the sidebar discussion.
Add participantsOptions to add participants for the sidebar discussion.Note: You can include any users with access to this record in this discussion.
Include a brief message for participantsBrief summary about the feedback to be discussed in the sidebar discussion.
2.  Select **Start discussion**.

  1. To initiate the assessment, select Start.

  2. Review any instructions or reference information.

    You can see additional question guidance text for your review as you complete the questions.

  3. Answer all relevant questions in the questionnaire.

    Your responses are automatically saved, and based on them, relevant risk statements and control objectives are associated with the assessment. After the AI Risk and Compliance analyst marks the assessment state as Closed complete, risks and controls are generated from these risk statements and control objectives respectively and are mapped to the AI asset.

    Note: The system automatically maps risks and controls only when you use the default assessment questionnaire.

  4. Select Submit.

What to do next

An AI Risk and Compliance Analyst evaluates the completed assessment along with the suggested list of risks and controls derived from the submitted information.

Proceed to Initiate risk assessment on AI asset.

Parent Topic:Using AI Risk and Compliance