--- sourceDocument: Australia Security Management sourceDocumentLink: https://www.servicenow.com/docs/r/australia/security-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # Wiz AI Security Exposure Management integration # Wiz AI Security Exposure Management integration {#ariaid-title1} Release version: Australia Updated October 22, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Wiz AI Security Exposure Management integration The Wiz AI Security Exposure Management (AI-SEM) integration enables ServiceNow customers to import and manage two key categories of AI-related security findings: cloud configuration issues in AI assets and vulnerabilities or configuration problems in AI models, agents, and MCP servers running on cloud compute instances like EC2 or containers. These findings are brought into AI Security Exposure Management to support remediation workflows and visibility for AI security teams. Show full answer Show less ## Key Features * **Two categories of AI security findings:** * Cloud configuration findings specific to AI assets (e.g., AWS bedrock agents missing guardrails). * Vulnerabilities and configuration issues in AI models, agents, and servers deployed in cloud compute environments. * **Wiz Test Results Integration for Configuration Compliance:** An enhanced integration that routes relevant AI posture cloud configuration findings to AI Security Exposure Management's AI posture findings table instead of Configuration Compliance test results. This requires enabling the option "Send AI security findings to AI security exposure management". * **Wiz AI Security Findings Integration:** A new integration importing open-source model vulnerabilities classified as Model Risk findings, and AI posture findings identified as Agent Risk or related to MCP servers. It links impacted AI assets with their hosting compute instances for improved context. * **Data mapping:** Wiz resource types, severities, statuses, and posture finding fields are mapped to corresponding AI Security Exposure Management values, ensuring accurate classification and routing of findings. ## Practical Application for ServiceNow Customers * This integration allows AI security teams, vulnerability managers, and analysts to centrally view, track, and remediate AI-related security risks within ServiceNow's AI Security Exposure Management. * By correctly classifying and routing findings to AI-specific tables, the integration supports governance and security workflows tailored to AI assets, enhancing visibility in AI Control Tower environments. * Customers must enable the routing option on the Wiz Vulnerability Integration configuration to leverage the advanced AI posture findings import capabilities. ## Key Outcomes * Improved visibility into AI-specific security posture and risks by importing targeted Wiz findings directly into AI Security Exposure Management. * Better alignment of AI security findings with configuration management database (CMDB) assets for accurate tracking and remediation. * Streamlined workflows for AI security exposure management, enabling proactive governance and vulnerability management for AI infrastructure and models. Import two categories of security findings related to AI security with the Wiz AI Security Exposure Management (AI-SEM) integration. ## Application scope {#wiz-ai-sem-integration__section_v22_3tz_hkc} {#wiz-ai-sem-integration__table_tfh_ktz_hkc__entry__4} | Supporting core application | Benefit | Wiz integration | Users | |-|-|-|-| | [AI Security Exposure Management](https://www.servicenow.com/docs/bLpXjCstnGn06kIxPnEKnQ "AI Security Exposure Management is a part of the Unified Security Exposure Management product suite of applications. AI Security Exposure Management integrates with third-party AI security products to help you manage various types of potential AI exposure across your environment.") | Import and route AI posture and AI security scan findings from Wiz into test results in the Configuration Compliance application and AI Security Exposure Management for remediation workflows. | Wiz Test Results Integration | AI security teams, vulnerability managers, and vulnerability analysts | [Table 1. Application and benefits] {#wiz-ai-sem-integration__table_tfh_ktz_hkc} The Wiz AI Security Exposure Management integration supports two categories of security findings related to AI security: * Cloud configuration findings in AI assets that include issues such as an AWS bedrock agent not configured with guardrails. * Vulnerabilities and configuration issues that are found in AI models, agents, and MCP servers that are deployed in cloud compute instances such as EC2 or containers. {#wiz-ai-sem-integration__ul_d1v_ldt_vkc} Both finding categories are imported into tables in AI Security Exposure Management. ## Integration overview {#wiz-ai-sem-integration__wiz-ai-sem-integration-overview} AI Security Exposure Management imports these two types of AI security findings with the following integrations. Wiz Test Results Integration for Configuration Compliance : This integration has been enhanced to send a sub-set of cloud configuration findings relevant to AI security to the AI posture findings table in AI Security Exposure Management, rather than creating them as test results in Configuration Compliance. To send these findings to AI Security Exposure Management, you must first enable this integration by selecting Send AI security findings to AI security exposure management on the [Test Results Configuration tab](https://www.servicenow.com/docs/D~qMeOMGg1Jzzds9h~kSDw "Set the filtering values to import the cloud test results data that you want.") for the Wiz Vulnerability Integration. This step is required for the following reasons: * The AI asset configuration findings require lookup logic that identifies the correct AI assets in the CMDB instead of mapping all findings to a cloud resource configuration item (CI). * Any findings related to AI security must be created in the correct tables so they are visible to AI CoE teams in the AI Control Tower and trigger the relevant governance and security workflows. {#wiz-ai-sem-integration__ul_bkk_vgt_vkc} Wiz AI Security Findings Integration : This is a new integration for Wiz that imports the following data: * Open-source model vulnerabilities that are identified by Wiz as Model Risk findings. * AI posture findings (configuration findings) that are identified by Wiz as Agent Risk, or MCP servers that are deployed or hosted in cloud compute instances, such as EC2 or containers. For these types of findings, both the AI asset that is impacted and the compute instance that is hosting the AI asset are made available in the AI posture findings through the discovered AI asset. {#wiz-ai-sem-integration__ul_apr_x2t_vkc} * **[Configure the Wiz AI Security Exposure Management integration](https://www.servicenow.com/docs/de8zKElzP2T3I14A6OGvAg)** Configure the integration to send a sub-set of cloud configuration findings relevant to AI security to the AI posture findings table in AI Security Exposure Management. * **[Wiz AI Security Exposure Management Integration data mapping](https://www.servicenow.com/docs/zNfznfxkrVf9lAFm~XywFQ)** Wiz resource types, severities, statuses, and posture finding fields map to AI Security values when AI Security Exposure Management routing is enabled.