---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Create control attestations for an AI asset

# Create control attestations for an AI asset {#ariaid-title1}

* Release version: Australia
* 
* Updated May 20, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Create control attestations for AI assets to document the existence, implementation, and effectiveness of controls that govern behavior, data usage, performance, and risk posture. Attestations serve as formal evidence that
the AI asset meets regulatory, ethical, security, and operational standards.

## Before you begin

Role required: sn_grc_ai_gov.ai_risk_and_compliance_analyst

## Procedure

1. Navigate to AllAI Risk and ComplianceAI Risk and Compliance Workspace.
2. Select the list icon ![]().
3. From the Lists, open the AI asset for which you want to create control attestations.
4. Navigate to Applies toControls.
5. Select the controls from the list.
6. Select Attest.  
   Important:  
   You can create attestations only for controls in the Draft or Monitor state.

## What to do next

* [Attest a control](https://servicenow-prod.fluidtopics.net/uj3KfmGRyYO2C6czLDroXQ "Attestations are surveys that gather evidence to prove that a control is implemented. If the control attestation and respondents fields are selected, when the control moves from the Draft state to the Attest state, a notification is sent to the attestation respondents.")
* [Group control attestations using the Same Response feature](https://servicenow-prod.fluidtopics.net/O2Q6tIJL5sZ7BL7XYnhYMA#group-controls "Policy and Compliance Management and Risk Management offer two methods for consolidating attestations and risk assessments into groups that help eliminate the task of providing repetitive responses for similar assessments. You can provide the same evidence to the grouped assessments or respond to individual assessments in the same user interface.")
* [Group control attestations using the Different Response feature](https://servicenow-prod.fluidtopics.net/O2Q6tIJL5sZ7BL7XYnhYMA#group-controls-diff-resp "Policy and Compliance Management and Risk Management offer two methods for consolidating attestations and risk assessments into groups that help eliminate the task of providing repetitive responses for similar assessments. You can provide the same evidence to the grouped assessments or respond to individual assessments in the same user interface.")
{#attest-controls-for-ai-systems__ul_e3x_3mt_bgc}

*[\>]: and then