{"resourceId":"cisco-ai-defense-servicenow-control-tower-alliance-20261028","versions":[{"version":"external-dd3e2f57743a7c5293dc44ad0ba1713212c517dac7355db6a4353eadc1c23a90","resource":{"id":"cisco-ai-defense-servicenow-control-tower-alliance-20261028","title":"Cisco AI Defense joins ServiceNow’s Control Tower Alliance as a founding member, feeding AI asset discovery and security detections into ServiceNow governance","organization":"Cisco","sector":"AI governance and security for organizations using ServiceNow (state agencies, universities and local governments that run ServiceNow)","geography":"Global / United States","publishedAt":"October 28, 2026","publicationDate":"2026-10-28","eventDate":null,"sourceName":"Cisco Blogs","sourceLabel":"Vendor announcement (Cisco)","sourceUrl":"https://blogs.cisco.com/ai/cisco-ai-defense-joins-servicenows-control-tower-alliance","evidenceClass":"vendor-claim","outcomeClass":"emerging","topics":["data-security","governance-procurement","developers-agents"],"finding":"Cisco says AI Defense is a founding member of the ServiceNow Control Tower Alliance. AI Defense discovers models, agents, datasets and MCP servers across clouds, scans models and MCP servers for supply-chain risks, runs automated AI red teaming before and after launch, and applies runtime guardrails. Two existing integrations on the ServiceNow Store send discovered assets to Control Tower inventory and route detections to ServiceNow AI Security Exposure Management for ownership and remediation. Alliance solutions are said to pass ServiceNow qualification and integration testing.","sledRelevance":"Many state agencies and universities run ServiceNow for IT service management and are standing up AI inventories required by state AI policies; this offers a path to tie AI security findings to owners and fixes. Relevance depends on a customer having both platforms.","evidence":"Vendor announcement only. No customer deployments, detection rates, red-team results or independent test data are given.","architectureImplications":"Two-system pattern: AI Defense as the detection source, ServiceNow as the system of action. Requires connectors, entitlements and release compatibility checks (the post says to confirm these with account teams).","governanceImplications":"Could support AI inventory and risk-remediation tracking that state AI governance frameworks ask for, but the inventory is only as complete as AI Defense discovery across the customer’s clouds.","securityPrivacyImplications":"Concentrating AI asset inventories and exposure data in one governance hub raises its sensitivity; Lumen separately reports ServiceNow among technologies targeted by Volt Typhoon.","caveats":"Vendor marketing; “works today” claims are unverified; alliance qualification criteria are not published in the post. On-premises AI and non-cloud assets are not addressed.","streamIds":["cisco"],"roles":{"sales":"Open with the governance gap: agencies building AI inventories under state policy often lack a way to connect security findings to accountable owners. Cisco positions AI Defense as the detection engine and ServiceNow as the remediation workflow, with integrations already listed on the ServiceNow Store. This is a vendor claim with no published deployment data, so the right offer is a scoped pilot on a few AI applications, not a platform-wide commitment or promised risk reduction.","engineering":"Fit depends on the customer running both ServiceNow and cloud-hosted AI. Validate what AI Defense actually discovers across the agency’s cloud tenants versus a known inventory, test supply-chain scanning on a sample of models and MCP servers, and confirm detections create correctly-owned records in ServiceNow. Check entitlements and release compatibility first, as the post advises. Constraints: on-premises and non-cloud AI coverage is not described, and alliance qualification criteria are not public.","delivery":"Deliver a pilot that connects AI Defense discovery and detections to the ServiceNow AI inventory for a defined set of applications, with the agency AI governance lead owning outcomes. Dependencies include both licenses, cloud read access and named service owners. Proposed acceptance criteria are measurable inventory match and routed-detection rates. Risks include incomplete discovery creating false confidence and alert volumes exceeding the small team’s capacity to remediate."},"roleDetails":{"sales":{"customerProblem":"Agencies must inventory and secure AI systems under state policy but have no link between AI security findings and accountable owners.","stakeholders":["State or agency CIO","AI governance or responsible-AI officer","CISO","ServiceNow platform owner"],"discoveryQuestions":["Do you maintain an AI inventory in ServiceNow today?","Which clouds host your AI models, agents or MCP servers?","How are AI security findings assigned and tracked now?","Are AI Defense and ServiceNow modules on existing contracts?"],"valueHypothesis":"Interpretation: linking AI security detections to ServiceNow ownership could shorten time to assign and track remediation for a bounded set of AI apps.","potentialEngagement":"A pilot connecting AI Defense discovery and detections to the ServiceNow AI inventory for 3–5 AI applications.","unsupportedClaims":["Complete AI asset discovery","Measured detection or red-team efficacy","Compliance with any specific state AI law","Cost savings"]},"engineering":{"fit":"Customers running ServiceNow plus cloud-hosted AI workloads.","architectureIntegration":"Install the two ServiceNow Store integrations; map AI Defense assets to CMDB/AI inventory records and detections to Exposure Management.","prerequisites":["AI Defense and ServiceNow entitlements","Cloud read access for discovery","Compatible ServiceNow release"],"constraints":["On-premises AI coverage not described","Alliance qualification criteria not published","Vendor claims not independently tested"],"security":"Governance hub will hold sensitive AI exposure data; restrict access and monitor the integration accounts.","proofOfValue":["Compare discovered assets with a known AI inventory","Inject a test risky model or MCP server and confirm detection and routing","Measure time from detection to assigned owner"]},"delivery":{"work":"Configure integrations, map ownership, run pilot detections and report results.","dependencies":["Licenses for both platforms","Named AI asset owners","Cloud access approvals"],"ownership":"Agency AI governance lead with CISO and ServiceNow platform owner.","skillsAdoption":"Train service owners to triage AI security findings in ServiceNow.","governanceCheckpoints":["Data-sharing approval between tools","Pilot scope approval","Results review before expansion"],"acceptanceCriteria":["Proposed: ≥90% of known pilot AI assets discovered","Proposed: all test detections routed to a named owner","Proposed: documented median time to assignment"],"risks":["False confidence from incomplete discovery","Alert overload","License cost escalation"]}},"retrievedAt":"2026-10-31T03:06:25Z","enrichedAt":"2026-10-31T03:12:07Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Can reduce manual tracking work for small AI governance teams, if staff are trained to triage findings.","procurementImplications":"Requires licensing of both AI Defense and ServiceNow modules; check cooperative contracts and entitlements.","operatingModelImplications":"Defines a handoff from security detection to service-owner remediation, which needs named owners for each AI asset.","sourceVerification":{"openedUrl":"https://blogs.cisco.com/ai/cisco-ai-defense-joins-servicenows-control-tower-alliance","referenceExcerpt":"Cisco AI Defense remains the source of AI security insight and protection, and ServiceNow serves as the system of action for governance and remediation.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}