---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Threat types

# Threat types {#ariaid-title1}

Release version: Australia  
Updated August 27, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Threat types available in a Threat Response policy.
{#gov-pol-threat-categories__table_pol_threat_categories__entry__2}

| Threat type | Description |
|-|-|
| Agentic Goal Deviation | An agent's actions diverge from the objective it was given. |
| Data and Model Poisoning | Training data or a model's behavior has been tampered with. |
| Excessive Agency | An agent takes actions or accesses systems and data beyond what its task requires. |
| Improper Output Handling | A model's output is used downstream in a way that introduces risk, such as executing unvalidated content. |
| Prompt Injection | Untrusted input manipulates a model into ignoring its original instructions. |
| Sensitive Information Disclosure | A model exposes confidential, personal, or restricted data in its output. |
| System Prompt Leakage | A model reveals its own underlying instructions or configuration. |
[ ]

{#gov-pol-threat-categories__table_pol_threat_categories}