---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Basic concepts

# Basic concepts for AI asset security {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Learn more about the AI asset security score, agent map, AI asset security events, and internal and external agents.

## AI asset security events {#gov-sec-basic-concepts__events}

An AI asset security event is an occurrence that involves a potential threat to your environment's security. For example, if a credit card number is detected in LLM output (output PII violation). Or, if a user replaces an LLM prompt
with a malicious prompt designed to obtain a user's password (prompt injection). Each AI asset security event has a threat type assigned. For more information, see [Managing AI asset security reference](https://www.servicenow.com/docs/SD7VolQZ9Kry0LOzotYbFA "Reference topics provide additional details about the charts and metrics that you use to assess your AI asset security posture in AI Control Tower.") and [Monitor AI asset security events and recommendations](https://www.servicenow.com/docs/u8JCrqF7S4ZzI6kelc2fzw "Triage and resolve AI recommendations and AI asset security events to optimize AI asset security.").

On the Post-runtime tab, the top AI asset security events are organized by threat category to help you prioritize areas to focus on and address. Selecting a cell in the heat map shows a corresponding list of AI asset security events
below it.

## AI asset security score {#gov-sec-basic-concepts__security_score}

The AI asset security score reflects the health of your AI assets in terms of access issues, privileged AI agents, dormant AI systems, output deviation, PII detection, and other criteria. When you view score details, a list view shows
the AI assets that are included in your AI asset security score calculation. Your score is the average of all managed AI assets listed. Users should actively manage and review their agent assets and not rely solely on this AI asset
security score.

You can exclude an AI asset from your score by muting it. For example, you can mute an AI asset if you determine that remediating the asset's issue would be a risky change. For more information, see [Managing AI asset security reference](https://www.servicenow.com/docs/SD7VolQZ9Kry0LOzotYbFA "Reference topics provide additional details about the charts and metrics that you use to assess your AI asset security posture in AI Control Tower.").

You can also configure the score to remove security categories from the score calculation or change the weights of categories. For more information, see [Configure the AI asset security score](https://www.servicenow.com/docs/9Rvs~tI_4BBTLETuu88YxA "Customize the AI asset security score to align with your enterprise's security practices. You can omit large language model (LLM) guardrail categories from the score or change the weights of categories.").

## Agent map {#gov-sec-basic-concepts__map}

The agent map is an interactive map showing the relationships of your AI providers, AI models, MCP servers, AI agents, agentic workflows, and tools across your enterprise. You can use the map to review these relationships and AI asset
details. The map includes filters for both agents and agentic workflows.

## Internal and external agents {#gov-sec-basic-concepts__agents}

Internal agents are agents that are provided by ServiceNow. External agents are those provided by third parties, such as Google or Amazon Web Services. On the Runtime and Post-runtime tabs, filter on internal or external agents to
compare the security postures of your ServiceNow and third-party agents.