--- sourceDocument: Australia Enable AI sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences Release : - australia ft:locale : - en-US ft:publication_title : - Australia Enable AI ft:clusterId : - platai bundleId : - platai workflow : - Platform --- # Governing AI asset security # Governing AI asset security {#ariaid-title1} Release version: Australia Updated June 23, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Governing AI asset security This feature provides ServiceNow customers with a comprehensive view of their AI assets' security posture, enabling better governance and risk management. It offers a Security tab within each AI asset record that displays critical metrics such as the AI asset security score, access issues, security events, and access posture. Additionally, the AI agent map visually represents the relationships between AI assets, workflows, providers, and tools across the enterprise. Show full answer Show less ## Key Features * **AI Asset Security Score:** Reflects the overall health of the AI asset by evaluating access issues, privileged status, dormancy, output deviations, PII detection, and other security criteria. Customers should actively monitor this score but not rely on it exclusively. * **Access Issues:** Tracks the number of access problems encountered by the AI asset within the last 24 hours, such as inability to access certain database fields. These issues may hinder workflow completion and could indicate misconfiguration or malicious activity. * **Security Events:** Counts potential security threats related to the AI asset in the last 24 hours, including PII exposure or malicious prompt injections. Each event is assigned a specific threat type for targeted response. * **Access Posture:** Highlights whether the AI asset has elevated privileges (e.g., admin rights) or has been dormant for over 90 days, both of which require review to mitigate risks. * **AI Agent Containment:** Provides immediate actions when security events are detected, such as displaying containment banners and enabling deactivation of compromised AI agents using a kill switch protocol. Customers can also reinstate agents once issues are resolved. * **AI Agent Map:** An interactive visualization tool that depicts relationships among AI agents, workflows, and tools, allowing customers to explore and filter their AI network for better asset management. ## Key Outcomes * Gain a clear and actionable snapshot of AI asset security status to proactively manage risks. * Identify and address access issues and security events promptly to maintain workflow integrity and protect sensitive data. * Control privileged AI agents and review dormant assets to reduce exposure to potential threats. * Utilize containment features to quickly isolate and remediate compromised AI agents, ensuring enterprise security. * Leverage the AI agent map to visualize and understand complex AI relationships within the organization, supporting informed decision-making. Get a snapshot of your AI asset's security posture and visualize how your asset relates to other agentic assets in your enterprise in the AI agent map. When you open an AI asset record, the Security tab shows the AI asset security score, access issues, security events, and its access posture, based on whether the asset was given elevated privileges or has been dormant (inactive) for over 90 days. It also shows the AI agent map which illustrates how the AI asset relates to other managed AI agents, agentic workflows, providers, and tools across your enterprise. For AI models, the Security tab shows the AI asset security score, security events, and the AI agent map only. Get details for each metric area by selecting the arrow in the upper-right corner of each metric. If there's no data available for the asset, metrics don't show on the page. ## AI asset security score {#gov-sec-ai-asset__score} The AI asset security score is a measure of the health of your AI asset in terms of access issues, privileged AI agents, dormant AI systems, output deviation, PII detection, and other criteria. Users should actively manage and review their agent assets and not rely solely on this AI asset security score. For more information, see [Configure the AI asset security score](https://www.servicenow.com/docs/Q_SvC0cLHma9bu2Go~vOxw "Customize the AI asset security score to align with your enterprise's security practices. You can omit large language model (LLM) guardrail categories from the score or change the weights of categories."). ## Access issues {#gov-sec-ai-asset__accessissues} The number of access issues encountered by this AI asset for the last 24 hours, by default. For example, the AI agent couldn't access a database field. AI agents with access issues may be unable to complete their workflows due to the access issue. Access issues can also be due to misconfiguration or potentially malicious acts by an agent. ## Security events {#gov-sec-ai-asset__events} The number of security events associated with the AI asset for the last 24 hours, by default. An AI asset security event is an occurrence that involves a potential threat to your environment's security. For example, if a credit card number is detected in LLM output (output PII violation), or if a user replaces an LLM prompt with a malicious prompt designed to obtain a user's password (prompt injection). Each AI asset security event has a threat type assigned. For more information, see [Managing AI asset security reference](https://www.servicenow.com/docs/_XbSLdm587hj1Xqn24_tPA "Reference topics provide additional details about the charts and metrics that you use to assess your AI asset security posture in AI Control Tower."). ## Access posture {#gov-sec-ai-asset__status} Whether the asset was given elevated privileges or has been dormant for the time period shown. Privileged : The AI agent has elevated permissions, such as an agent with admin or security admin permissions that can perform critical actions. Some workflows require that AI agents have elevated permissions to complete. An external AI agent is privileged if it has write, modify, or delete access to systems or data. For example, access to cloud infrastructure, IAM configurations, secrets managers, key management services, production databases, or security configurations. Dormant : The AI agent has been inactive for 90 days or longer. Review dormant AI agent permissions to reduce security risk. ## AI agent containment {#gov-sec-ai-asset__containment} If a security event of any severity (Critical, High, Medium, or Low) is detected for an AI agent in the Agentic AI category, a banner appears on both the asset's Overview tab and its Security tab, letting you take action directly from the asset record. Select View containment options on the banner to open a side panel showing recent critical events for the asset and a Deactivate action. Deactivating the asset triggers AI agent containment using kill switch protocol; you can track progress from the banner and retry the operation if it fails or partially completes. After the underlying issue is resolved, you can reinstate the asset. For details, see [Contain AI agents manually using kill switch protocol](https://www.servicenow.com/docs/ydFgncmKX~gV64E4iWARPQ "Deactivate or reinstate AI agents using kill switch protocol to eliminate malicious activity and improve your security posture."). An AI agent can also be contained automatically when a Threat Response policy detects a matching threat. For details, see [Threat Response policies](https://www.servicenow.com/docs/NYH5bipB9WQBKDso32c~CA "Automatically contain an AI agent the moment it crosses a risk threshold you define, instead of waiting for someone to notice and act."). ## AI agent map {#gov-sec-ai-asset__map} The agent map is an interactive node map showing the relationships of your AI agents, agentic workflows, and tools across your enterprise. You can use the map to review these relationships and AI asset details. When you expand the map, you can filter by agents and agentic workflows. For more information, see [Discover your agent network with the map](https://www.servicenow.com/docs/fQVOuNdC4jG16crwEycYEg "Use the agent map to visualize your entire agentic ecosystem, including ServiceNow and third-party AI assets.").