---
sourceDocument: Australia Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Field mapping

# Palo Alto Prisma AIRS to ServiceNow data mapping {#ariaid-title1}

Release version: Australia  
Updated September 15, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Prisma AIRS API fields map to ServiceNow fields for AI models, vulnerability scans, red teaming scans, and compliance data.

## View imported data {#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-view-data}

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-view-data-table__entry__3}

| Data | Table name | Where to view |
|-|-|-|
| AI models | cmdb_ai_model_product_model | AI Discovery and AI Control Tower asset inventory |
| Vulnerability scans | sn_ai_prsmair_disc_sg_vulnerability_scans | Filter navigatorTable name |
| Vulnerability scan violations | sn_ai_prsmair_disc_sg_vulnerability_scans_violations | Filter navigatorTable name |
| Red teaming scans | sn_ai_prsmair_disc_sg_red_teaming_scan | Filter navigatorTable name |
| Red teaming attacks | sn_ai_prsmair_disc_sg_red_teaming_attack | Filter navigatorTable name |
| Red teaming compliance | sn_ai_prsmair_disc_sg_red_teaming_compliance | Filter navigatorTable name |
[Table 1. Imported data locations]

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-view-data-table}

Summarized vulnerability and red teaming metrics also appear on the AI Security Operations dashboard.{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-view-data-1}

## AI models {#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-ai-models}

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-ai-models-table__entry__2}

| Prisma AIRS field | Target field |
|-|-|
| uuid | uuid |
| name | name |
| latest_version_revision | version |
| (constant: Prisma AIRS) | manufacturer |
| latest_version_outcome | latest_version_outcome |
| latest_version_source_types | latest_version_source_types |
| latest_version_formats | latest_version_formats |
| latest_version_scan_time | latest_version_scan_time |
| tsg_id | tsg_id |
[Table 2. AI models field mapping]

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-ai-models-table}

Each imported AI model also creates a linked digital asset (ALM) record for application lifecycle management tracking, keyed by the model's unique
identifier.{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-ai-models-digital-asset}

## Vulnerability scans {#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-vulnerability-scans}

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-vulnerability-scans-table__entry__2}

| Prisma AIRS field | Target field |
|-|-|
| uuid | scan_uuid |
| tsg_id | tsg_id |
| model_uri | model_uri |
| owner | owner |
| scan_origin | scan_origin |
| security_group_uuid | security_group_uuid |
| security_group_name | security_group_name |
| model_version_uuid | model_version_uuid |
| scanner_version | scanner_version |
| sdk_version | sdk_version |
| eval_outcome | eval_outcome |
[Table 3. Vulnerability scans field mapping]

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-vulnerability-scans-table}

## Vulnerability scan violations {#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-vulnerability-violations}

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-vulnerability-violations-table__entry__2}

| Prisma AIRS field | Target field |
|-|-|
| uuid | violation_uuid |
| scan_uuid (parent) | scan_uuid |
| tsg_id | tsg_id |
| description | description |
| threat | threat |
| operator | operator |
| module | module |
| rule_instance_uuid | rule_instance_uuid |
| rule_name | rule_name |
| rule_description | rule_description |
| rule_instance_state | rule_instance_state |
[Table 4. Vulnerability scan violations field mapping]

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-vulnerability-violations-table}

## Red teaming scans {#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-scans}

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-scans-table__entry__2}

| Prisma AIRS field | Target field |
|-|-|
| uuid | scan_id |
| target_id | target_id |
| target.name | target_name |
| status | status |
| job_type | job_type |
| asr | attack_success_rate |
| score | score |
[Table 5. Red teaming scans field mapping]

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-scans-table}

## Red teaming attacks {#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-attacks}

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-attacks-table__entry__2}

| Prisma AIRS field | Target field |
|-|-|
| attack_id | attack_id |
| scan_id (parent) | scan_id |
| target_id | target_id |
| category | category |
| category_display_name | category_display_name |
| sub_category | sub_category |
| severity | severity |
| attack_type | attack_type |
[Table 6. Red teaming attacks field mapping]

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-attacks-table}

## Red teaming compliance {#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-compliance}

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-compliance-table__entry__2}

| Prisma AIRS field | Target field |
|-|-|
| (resolved attack reference) | attack |
| compliance_frameworks.id | compliance_framework_id |
| compliance_frameworks.techniques.id | technique_id |
| compliance_frameworks.techniques.description | technique_description |
[Table 7. Red teaming compliance field mapping]

{#palo-alto-prisma-airs-ai-sgc-mapping__palo-alto-prisma-airs-ai-sgc-mapping-red-teaming-compliance-table}

*[\>]: and then