---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Security \& Privacy tab in AI Control Tower

# Security \& Privacy tab in AI Control Tower {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 8 minutes to read  
Review AI security metrics such as access issues, dormant and privileged AI agents, and map the relationships of your ServiceNow agents, agentic workflows, and tools.

The Security \& Privacy tab of AI Control Tower offers a dashboard-based overview of your AI security metrics. The dashboard contains several visualizations detailing AI security metrics. In addition to tracking metrics the Security \& Privacy tab contains the access map, a tool that gives an node-graph visualization of the relationships between your ServiceNow agents, agentic workflows, and tools. You can use the map to investigate the relationships between your AI agents and workflows further.  
Note:  
You can drill down into the data on each widget by selecting the chart.

<br />

## ServiceNow AI Insights {#security-privacy-tab__section_nfl_yzc_lhc}

ServiceNow AI Insights require that the Now Assist AICT Security Posture Summarizer skill is enabled. For more details, see [Activate a Now Assist skill](https://www.servicenow.com/docs/uC7AfRsAmC0xL8RvJ7410w "Activate AI skills by configuring settings such as display locations. After the skills have been activated, they can be used across the ServiceNow AI Platform based on the availability and display settings you choose.").  
AI Control Tower AI insights summarize positives and potential issues to remediate to improve the overall security posture of your instance.

* Positives: Enabled settings and features that improve your security posture.
* Areas for Attention: Low- to medium-risk items to resolve.
* High Impact Observations: High-risk items to resolve.
* Actions: Suggested action items to address Areas for Attention and High-Impact Observations.
{#security-privacy-tab__ul_gmb_kqr_c3c}

## Access map {#security-privacy-tab__section_ay5_hnx_tfc}

The Access map displays a node map detailing the relationships of your ServiceNow® agents, agentic workflows, and tools. You can use the map to review these relationships, configure agent details, and resolve access issues. The map includes filters for both agents and agentic workflows. You can open the access map by either navigating to AllAI Security and PrivacyAccess Map, or selecting the link in the dashboard. See [Using the access map](https://www.servicenow.com/docs/4SC9HpwiMK36EUv1g~Bn7g "Learn how to use the Access map in AI Control Tower.") to learn how to use access map.  

If a warning icon appears on any agent, that agent has access issues. Select the warning icon to see details such as the workflow, agent, and tool associated with the access issue.  
In Access issues, the User ID is the ID of the user who ran the agent.   

## ServiceNow AI Asset Security Score {#security-privacy-tab__section_w3b_11d_lhc}

The ServiceNow AI asset security score is a measure of the health of your ServiceNow AI assets in terms of access issues, privileged AI agents, and dormant AI systems.  

AI assets impacting your score
:   To see more information about your score, select See details in the Security \& Privacy tab. A list view shows the ServiceNow AI assets that are included in your AI asset security score calculation. Your score is the average
    of all managed ServiceNow AI assets listed.
:   You can exclude an asset from your score by selecting a row and selecting Mute. For example, you can mute an AI asset if you determine that remediating the asset's issue would be a risky change. You can also configure the score to remove security categories from the score or change the weights of security categories. For more information, see [Data sharing, Data overflow processing, and Security \& privacy in AI Control Tower](https://www.servicenow.com/docs/U~C1dmzKlBnYlJYdJM~0KA "Explore the Data sharing, Data processing, and Security & privacy sections.").{#security-privacy-tab__simpletable_nqz_1sl_mhc__entry__2}

    | Column | Description |
    |-|-|
    | AI system | Name of the ServiceNow asset. |
    | Category | Type of issue, such as dormant AI system, privileged AI agent, or access issue. |
    | Provider | This value is always ServiceNow. |
    | Score impact | The percentage impact to your AI asset security score. |
    | Date | Date the issue occurred. |
    | AI Task | The AI security task to remediate the issue, if applicable. |
    [Table 1. AI asset details]

    {#security-privacy-tab__simpletable_nqz_1sl_mhc}

## Access {#security-privacy-tab__section_m2h_zfq_xfc}

Access issues

:   The Access issues chart displays the proportion of AI agents experiencing access-related issues and lists the top AI systems with access issues. AI agents with access issues may be unable to complete their workflows due to
    the access issue. Hover over a portion of the chart to see the exact proportion and count of agents.

    <br />

    <br />

    You can create AI security tasks directly from the list view by selecting Create AI task. See all active AI security tasks in AI assets in the AI Task
    section. Access to this section requires the sn_vsc.task_manager role.

    Resolved AI security tasks that are over 180 days old are archived. Archival days can be configured in system properties.

Privileged AI Agents

:   The area chart shows AI agents with elevated permissions such as an agent with admin or security admin permissions that can perform critical actions. Some workflows require AI agents have elevated permissions to complete.
    Hover over a portion of the chart to see the exact number of privileged agents on that day.

    To show AWS agent metrics, filter the metrics by selecting AWS Bedrock in the provider drop-down list. You must have an AWS account configured for your instance and the Now Assist AiSP AWS IAM Privileged Policy Checker skill enabled. For more details, see [AI connections](https://www.servicenow.com/docs/F8bc2zU4Xg3oivIOE6H~hw "Explore the AI connections page and its features.") and [Activate a Now Assist skill](https://www.servicenow.com/docs/uC7AfRsAmC0xL8RvJ7410w "Activate AI skills by configuring settings such as display locations. After the skills have been activated, they can be used across the ServiceNow AI Platform based on the availability and display settings you choose.").

    <br />

    You can create AI security tasks directly from the list view by selecting Create AI task. See all active AI security tasks in AI assets in the AI Task
    section. (Role required: sn_vsc.task_manager.)

    Resolved AI security tasks that are over 180 days old are archived. Archival days can be configured in system properties.

Dormant AI systems

:   The area chart shows AI agents that have not been active for over 90 days. Review dormant AI agent permissions to reduce security risk. Hover over a portion of the chart to see the exact number of dormant AI systems for that
    day.

    To show AWS agent metrics, filter the metrics by selecting AWS Bedrock in the provider drop-down list. You must have an AWS account configured for your instance. For more details, see [AI connections](https://www.servicenow.com/docs/F8bc2zU4Xg3oivIOE6H~hw "Explore the AI connections page and its features.").

    <br />

    When an AI agent becomes dormant, an AI security task is created automatically to streamline your workflow, and quickly resolve issues. The AI security task is assigned to the agent's owner. See all
    active AI security tasks in AI assets in the AI Task section.

    Resolved AI security tasks that are over 180 days old are archived. Archival days can be configured in system properties.

## ServiceNow instance access to MCP servers {#security-privacy-tab__section_bvt_mwx_l3c}

MCP server access metrics include all MCP client-server interactions routed through this instance's AI Gateway. Interactions that bypass the AI Gateway or are routed through another instance's AI Gateway aren't included.

Clients connecting to MCP servers
:   The Clients connecting to MCP servers chart shows the top 10 clients (ServiceNow AI agents or registered third-party MCP clients) connecting to MCP servers through this instance's AI Gateway. MCP server access metrics are captured for all client-server interactions routed through the AI Gateway.
    To see more clients, select the chart to drill down into the data.

Authorized access attempts to MCP servers
:   The Authorized access attempts to MCP servers chart shows successful access attempts from MCP clients to MCP servers through this instance's AI Gateway. Clients include ServiceNow AI agents and registered third-party MCP clients.
    To see more attempts, select the chart to drill down into the data.

Failed access attempts to MCP servers
:   The Failed access attempts to MCP servers chart shows unsuccessful access attempts from MCP clients to MCP servers through this instance's AI Gateway. Clients include ServiceNow AI agents and registered third-party MCP clients.
    To see more data, select the chart to drill down into the data.

## Guardrails

Prompt injection
:   These charts show prompt injection data provided by AI Guardian. To see data, enable AI Guardian for your instance. For more details, see [AI Guardian analytics](https://www.servicenow.com/docs/UgzOVMxNUi22NcwgSgyCVQ "Monitor the performance of guardrails enabled through AI Guardian.").

Offensive content
:   These charts show offensive content data provided by AI Guardian. To see data, enable AI Guardian for your instance. For more details, see [AI Guardian analytics](https://www.servicenow.com/docs/UgzOVMxNUi22NcwgSgyCVQ "Monitor the performance of guardrails enabled through AI Guardian.").

Sensitive data

:   The Sensitive data detected chart shows sensitive data that was identified in user responses to Now Assist prompts. Exposure of sensitive data is limited to the LLM in your instance.

    The Sensitive data anonymized chart shows prompt data that met configured data patterns. This data was anonymized based on the configuration for the pattern in Configuration Data Patterns in Data
    Privacy.

Security policy violations
:   The Security policy violations chart shows violations of ServiceNow security policies detected in LLM output. The data is collected by scanning generative AI logs to detect policy violations in LLM responses. ServiceNow security policies are based on industry best practices and can't be modified. For example, one policy prohibits linking to executable files or malware, directing users to run unverified
    downloads or macros, or asking users to disable their antivirus protection. For more information about policies and how to configure data for this chart, see [Data sharing, Data overflow processing, and Security \& privacy in AI Control Tower](https://www.servicenow.com/docs/U~C1dmzKlBnYlJYdJM~0KA "Explore the Data sharing, Data processing, and Security & privacy sections.").

Agent goal hijack
:   The Agent goal hijack chart shows
    when AI agents deviate from their intended role or objective. For example, unauthorized actions or prompt injection attempts. The data is collected by scanning and analyzing agent execution history. For information on how to
    configure data for this chart, see [Data sharing, Data overflow processing, and Security \& privacy in AI Control Tower](https://www.servicenow.com/docs/U~C1dmzKlBnYlJYdJM~0KA "Explore the Data sharing, Data processing, and Security & privacy sections.").

AI agent output with PII detected
:   The AI agent output with PII detected chart shows when agents' LLM output contains personally identifiable information (PII). The data is collected by scanning LLM output for default PII sensitive data patterns specified in Data Privacy and additional PII patterns. For example, U.S. phone number, credit card number, or U.S. passport ID. For information on how to configure data for this chart, see [Data sharing, Data overflow processing, and Security \& privacy in AI Control Tower](https://www.servicenow.com/docs/U~C1dmzKlBnYlJYdJM~0KA "Explore the Data sharing, Data processing, and Security & privacy sections.").

High-risk AI agent output
:   The High-risk AI agent output chart shows when agents' LLM output contains security-vulnerable patterns. The data is collected by scanning LLM output for known vulnerable patterns and potential corresponding attack vectors.
    For example, HTML tags shouldn't have scripts associated with them for cross-site script attacks (XSS), or no stacked SQL queries that could result in SQL injection attacks. For information on how to configure data for this
    chart, see [Data sharing, Data overflow processing, and Security \& privacy in AI Control Tower](https://www.servicenow.com/docs/U~C1dmzKlBnYlJYdJM~0KA "Explore the Data sharing, Data processing, and Security & privacy sections.").

*[\>]: and then