---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Reviewing enforcement activities

# Reviewing policy enforcement activities in AI Control Tower {#ariaid-title1}

Release version: Australia  
Updated August 27, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Review policy activities and execution results.

## Key benefits {#gov-pol-reviewing-enforcement-activity__section_bgs_cqr_jkc}

* Confirm a policy actually reached every point it applied to.
* Tell a real failure apart from a policy that simply didn't apply anywhere it could.
* Look up a specific person or asset, without checking policies one at a time.

{#gov-pol-reviewing-enforcement-activity__ul_ocj_dqr_jkc}

View policy enforcement as an audit trail in the Enforcement activity tab. Each entry represents enforcement against one asset and shows its outcome. When a policy triggered the entry, the entry also shows
which policy. A policy that enforces through more than one connector produces a separate entry for each connector.

For AI agent containment specifically, the Enforcement activity tab shows all agents that were contained automatically through a Threat Response policy, and those contained manually using kill switch
protocol. Those contained manually show Kill Switch Manual Trigger in the Source column.

An outcome other than success has a specific meaning, not just pass or fail:

* **Error** means something actually went wrong at a connector, and the record includes why.
* **Skipped** means no connector applied to that context, either because there was nothing to enforce against, or because the connector for that point was never configured. If you expected enforcement at a given point and see Skipped, confirm that point is configured and active on the Control enforcement points tab; otherwise, a real coverage gap can look like a clean run. See [Configuring security connections](https://www.servicenow.com/docs/OTIhAUlCUSO44UMjFtqZpQ "Connect AI Control Tower to the platforms where your AI agents run and to your identity provider so that policies and AI agent containment using kill switch protocol can act on agents wherever they're hosted.").
* **Timeout** means a connector didn't respond within its window.
{#gov-pol-reviewing-enforcement-activity__ul_pol_enforcement_outcomes}

## Use cases {#gov-pol-reviewing-enforcement-activity__section_g1k_xzr_jkc}

* Confirm whether a particular person was blocked from a particular model, and which connector enforced it.
* Check an entry to determine whether a policy needs to be fixed. An outcome other than success can mean the policy simply didn't apply rather than failed.
* When a user reports they've lost access, or a security review needs to know whether a specific asset has been affected by any policy, filter the activity by that person or asset.
{#gov-pol-reviewing-enforcement-activity__ul_fjz_xzr_jkc} To create or change a policy, see [Managing policies in AI Control Tower](https://www.servicenow.com/docs/924ksIL1dlJiNkmAhWaDTw "Create, change, or remove the policies that respond to detected threats or block AI usage.").