Govern · Managed tier · Office of the CISO

GV-02Every AI system is inventoried and observable

Each AI system in use has an owner, models, data classes and guardrails on record, and its prompts and outputs can be observed.

Status

Gap

1 item contradicts the control.

Exposure

Critical

2 evidence items from 2 sources

CCSA · Govern

Established

This control blocks Managed for the whole domain.

What the evidence shows

The branch knowledge assistant calls a model provider directly, with no gateway in front of it, so its prompts and outputs are unobserved.

Remediation · Office of the CISO

Route the branch assistant through the Mesh gateway, or suspend it until it is.

Root cause: Unobserved AI. A branch assistant calls a model provider directly, outside the gateway.

Every item is read-only, dated, hashed and re-runnable. This is what an examiner can test.

ev-gv02-1

Model-provider traffic from a production segment bypasses the gateway

Palo Alto Networks Panorama · telemetry · collected 3 h ago (Oct 15, 2026 · 10:59 UTC) · limit 168 h

Contradicts

ev-gv02-2

AI register lists 8 systems; 7 route through the gateway

ServiceNow ITSM · export · collected 20 h ago (Oct 14, 2026 · 17:59 UTC) · limit 168 h

Partial