---
title: Assess controls, risks, issues, and remediation tasks
description: Within the NIST RMF application, the Assess section involves performing security control attestations, evaluating the control effectiveness, managing associated risks and issues, and performing remediation tasks.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-common-functions/rmf-assess.html
release: australia
product: GRC Common Functions
classification: grc-common-functions
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Process overview, NIST RMF Use Case Accelerator, GRC use case accelerators, Common GRC features, Governance, Risk, and Compliance]
---

# Assess controls, risks, issues, and remediation tasks

Within the NIST RMF application, the **Assess** section involves performing security control attestations, evaluating the control effectiveness, managing associated risks and issues, and performing remediation tasks.

**Note:** Starting with version 10.1.0, the NIST RMF Use Case Accelerator will be supported only for customers who currently use the product. New and existing customers should consider using the GRC: Continuous Authorization Monitoring application. For details, [Continuous Authorization and Monitoring](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/continuous-risk-monitoring/grc-cam-landing-page.md).

Broadly, assessment also involves managing the controls, risks, issues, and remediation tasks that stem from the implementation of the security controls.

**Note:** The NIST RMF application provides read-only access to the content. Update the content following the standard GRC procedures, as outlined in the Policy and Compliance Management, Risk Management, and/or Audit Management applications.

Users can:

-   review and perform control attestations currently in the system relating to NIST RMF security attestations
-   view all control tests, highlighting the control and current effectiveness of each control test in place
-   manage and address any risks stemming from risk statements having a content source of NIST 800-53.r4
-   identify risks and perform their assessments
-   view a list of issues and remediation tasks stemming from the implementation of security controls and related risks having a content source of NIST 800-53 r4

-   **[Review and perform control attestations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/rmf-perform-control-attestations.md)**  
Review and perform control attestations relating to NIST RMF security attestations.
-   **[Review and evaluate control effectiveness](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/rmf-evaluate-control-effectiveness.md)**  
Review and evaluate the effectiveness of the controls through the execution of control tests related to NIST-800.53.r4.
-   **[Manage and address risks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/rmf-manage-address-risks.md)**  
Review and manage all risks stemming from risk statements having the content source of NIST 800-53.r4.
-   **[Review and perform risk assessments](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/rmf-perform-risk-assessment.md)**  
Review and execute the risk assessments relating to NIST RMF security assessments.
-   **[Manage and address issues](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/manage-address-issues.md)**  
Review all issues stemming from controls and risks with NIST 800-53.r4 as the source and address them.
-   **[Manage and address remediation tasks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/manage-address-remediation-tasks.md)**  
Review all remediation tasks stemming from controls and risks with NIST 800-53.r4 as the source and address them.
-   **[Monitor the NIST RMF Assess dashboard](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/monitor-rmf-assess-dashboard.md)**  
The NIST RMF assess dashboard provides insights into the overall status of the target.

**Parent Topic:**[NIST RMF process overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/nist-rmf-process.md)