AWS re:Invent 2025 - Maximizing AI Governance and Speed—Only with ServiceNow + AWS (ARC337)

Maximizing AI Governance and Speed with ServiceNow + AWS

Overview

• The presentation discusses how ServiceNow is enabling organizations to effectively govern and scale their AI initiatives through the ServiceNow platform and its AI Control Tower solution.
• Key topics covered include the challenges of operationalizing AI at scale, the need for holistic AI governance, and how ServiceNow's integrated approach can help enterprises unlock the full potential of AI while mitigating risks.

The Changing Landscape and the Rise of AI

• The presenters highlight how AI is poised to have a transformative impact on enterprises, similar to the revolution brought about by virtualization and cloud computing.
• They emphasize that every industry workflow will be reimagined with AI in the coming years, making it a critical capability for organizations to remain competitive.
• However, the presenters also acknowledge the significant challenges that come with scaling AI, including issues around bias, transparency, security, and data privacy.

The Need for Holistic AI Governance

• The presenters discuss the tension between business users who want to move quickly to prove AI value, and risk/compliance teams who are focused on mitigating the new threats introduced by AI.
• Many organizations are struggling to transition from AI proofs-of-concept to enterprise-wide deployment, often due to a lack of the right governance processes and tools.
• The presenters highlight the emergence of AI Centers of Excellence (CoEs) as a response, but note that these alone are not enough - what's needed is a seamless collaboration platform that brings together all stakeholders.

ServiceNow's AI Control Tower

• The AI Control Tower is ServiceNow's integrated solution for managing the full AI lifecycle, from strategy and execution to governance and value realization.
• Key capabilities of the AI Control Tower include:

  Underlying Data Model

  • AI assets are treated like any other technology asset, with discovery, tracking, and governance capabilities built on top of ServiceNow's Configuration Management Database (CMDB).

  AI Strategy Alignment

  • Integration with ServiceNow's strategic portfolio management to ensure AI initiatives are tightly aligned with business objectives.

  AI Lifecycle Management

  • Packaged workflows and playbooks to streamline the end-to-end AI lifecycle, from onboarding to change management to retirement.

  Risk and Compliance

  • Integration with ServiceNow's Integrated Risk Management (IRM) solution to track risk exposure and ensure compliance with regulations like the EU AI Act.

  Value Realization

  • Flexible value frameworks to measure the business impact of AI initiatives across different use cases.

Securing AI with ServiceNow

• The presenters highlight the new security challenges introduced by the rise of AI, including concerns around identity and access management, data security, and model/agent security.
• ServiceNow's approach to securing AI includes:

  Identity and Access Controls

  • Treating AI agents as a new type of identity, with the principle of least privilege access.
  • Leveraging ServiceNow's acquisition of Vasa to enhance identity security capabilities.

  Data Security and Privacy

  • Providing visibility into sensitive data accessed by AI agents and the ability to apply data protection measures like anonymization and encryption.

  Guardrails and Monitoring

  • Leveraging ServiceNow's "Now Assist Guardian" to monitor for offensive content, prompt injections, and PII leaks.
  • Providing comprehensive audit trails and observability into AI agent activities.

Securing AI on the ServiceNow Platform

• The presenters emphasize the importance of running AI on a secure and trusted platform, highlighting ServiceNow's investments in platform security features like ServiceNow Vault.
• ServiceNow Vault provides capabilities for data classification, anonymization, encryption, and zero-trust access controls to ensure the security and privacy of sensitive data used for AI.
• The presenters demonstrate how ServiceNow's AI-powered capabilities, such as automated data pattern detection, can further enhance the platform's data security features.

Key Takeaways

• AI is a transformative technology that will reshape every industry, but scaling AI at the enterprise level comes with significant challenges around governance, security, and risk management.
• ServiceNow's AI Control Tower provides a comprehensive, integrated platform to help organizations manage the full AI lifecycle, from strategy to execution to value realization, while maintaining the necessary controls and guardrails.
• ServiceNow's approach to securing AI, both within the AI Control Tower and on the broader ServiceNow platform, addresses the evolving security threats introduced by the rise of AI, including identity, data, and model/agent security.
• By combining AI governance, security, and platform capabilities, ServiceNow aims to enable organizations to unlock the full potential of AI while mitigating risks and maintaining compliance.