--- sourceDocument: Australia Enable AI sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences Release : - australia ft:locale : - en-US ft:publication_title : - Australia Enable AI ft:clusterId : - platai bundleId : - platai workflow : - Platform --- # Basic concepts # Basic concepts for AI asset security {#ariaid-title1} Release version: Australia Updated May 2, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Basic concepts for AI asset security This content introduces foundational elements of AI asset security within the ServiceNow platform, focusing on how to monitor, assess, and manage the security health of AI assets such as AI agents, models, and workflows. It explains critical concepts like AI asset security events, the AI asset security score, the agent map, and distinctions between internal and external AI agents. Show full answer Show less ## AI asset security events AI asset security events represent potential security threats detected within your AI environment. Examples include detection of sensitive data (e.g., credit card numbers) appearing in large language model (LLM) outputs, or malicious prompt injections aimed at extracting credentials. Each event is categorized by threat type to prioritize remediation efforts. The Post-runtime tab provides a heat map view organized by threat categories, enabling you to quickly identify and drill down into specific events for detailed investigation. ## AI asset security score The AI asset security score offers a consolidated measure of your AI assets' security posture, evaluating criteria such as access control issues, privileged agents, dormant systems, output anomalies, and personally identifiable information (PII) detection. The score is calculated as an average of all managed AI assets. Users should actively review and manage AI assets rather than rely solely on this score. You have the flexibility to mute specific AI assets from the score calculation, for instance, when remediation poses risk, and to customize the score by adjusting category weights or excluding certain security categories. ## Agent map The agent map is an interactive visualization tool that illustrates relationships among AI providers, AI models, Managed Cloud Platform (MCP) servers, AI agents, agentic workflows, and tools across your enterprise. It supports filtering by agents and workflows, helping you understand asset interconnections and details for better management and security oversight. ## Internal and external agents Internal agents are AI agents provided by ServiceNow, while external agents come from third-party providers such as Google or Amazon Web Services. The platform allows filtering by these categories on Runtime and Post-runtime tabs, enabling comparison of security postures between ServiceNow's native agents and those sourced externally. Learn more about the AI asset security score, agent map, AI asset security events, and internal and external agents. ## AI asset security events {#gov-sec-basic-concepts__events} An AI asset security event is an occurrence that involves a potential threat to your environment's security. For example, if a credit card number is detected in LLM output (output PII violation). Or, if a user replaces an LLM prompt with a malicious prompt designed to obtain a user's password (prompt injection). Each AI asset security event has a threat type assigned. For more information, see [Managing AI asset security reference](https://www.servicenow.com/docs/_XbSLdm587hj1Xqn24_tPA "Reference topics provide additional details about the charts and metrics that you use to assess your AI asset security posture in AI Control Tower.") and [Monitor AI asset security events and recommendations](https://www.servicenow.com/docs/iEEQO~6I~TV0mQpDiaXKmw "Triage and resolve AI recommendations and AI asset security events to optimize AI asset security."). On the Post-runtime tab, the top AI asset security events are organized by threat category to help you prioritize areas to focus on and address. Selecting a cell in the heat map shows a corresponding list of AI asset security events below it. ## AI asset security score {#gov-sec-basic-concepts__security_score} The AI asset security score reflects the health of your AI assets in terms of access issues, privileged AI agents, dormant AI systems, output deviation, PII detection, and other criteria. When you view score details, a list view shows the AI assets that are included in your AI asset security score calculation. Your score is the average of all managed AI assets listed. Users should actively manage and review their agent assets and not rely solely on this AI asset security score. You can exclude an AI asset from your score by muting it. For example, you can mute an AI asset if you determine that remediating the asset's issue would be a risky change. For more information, see [Managing AI asset security reference](https://www.servicenow.com/docs/_XbSLdm587hj1Xqn24_tPA "Reference topics provide additional details about the charts and metrics that you use to assess your AI asset security posture in AI Control Tower."). You can also configure the score to remove security categories from the score calculation or change the weights of categories. For more information, see [Configure the AI asset security score](https://www.servicenow.com/docs/Q_SvC0cLHma9bu2Go~vOxw "Customize the AI asset security score to align with your enterprise's security practices. You can omit large language model (LLM) guardrail categories from the score or change the weights of categories."). ## Agent map {#gov-sec-basic-concepts__map} The agent map is an interactive map showing the relationships of your AI providers, AI models, MCP servers, AI agents, agentic workflows, and tools across your enterprise. You can use the map to review these relationships and AI asset details. The map includes filters for both agents and agentic workflows. ## Internal and external agents {#gov-sec-basic-concepts__agents} Internal agents are agents that are provided by ServiceNow. External agents are those provided by third parties, such as Google or Amazon Web Services. On the Runtime and Post-runtime tabs, filter on internal or external agents to compare the security postures of your ServiceNow and third-party agents.