USX Cyber adds AI governance to GUARDIENT platform

USX Cyber on Nov. 10 unveiled GUARDIENT AI Governance, a new module for discovering AI tools, automating policies and tracking risk across managed endpoints. The company says the platform is meant to help organizations move from AI visibility to ongoing governance and evidence for audits and reviews.

Why it matters: - Organizations are using more AI tools inside daily business operations, which raises questions about what is deployed, what data those tools can reach, and how security teams can enforce rules without slowing adoption. - GUARDIENT AI Governance is designed to turn AI oversight into an ongoing operational process instead of a one-time policy exercise. - The platform is meant to help security, compliance and governance teams document decisions, show control coverage and produce evidence for reviews and audits.

What happened: - USX Cyber on Nov. 10 announced GUARDIENT AI Governance, a new addition to its GUARDIENT security and compliance platform. - The release says the platform brings AI discovery, risk assessment, policy development, technical controls, continuous monitoring and governance evidence into one system. - USX Cyber describes itself as a cybersecurity and compliance solutions provider.

The details: - GUARDIENT AI Governance identifies supported AI technologies on managed endpoints using endpoint telemetry, including installed applications and running processes. - The discovery layer covers supported local AI models, coding assistants, browser extensions, AI agents and Model Context Protocol servers. - Organizations can also record other AI services in a centralized inventory with their associated use cases. - The platform supports structured governance reviews for each AI technology, covering business purpose, ownership, vendor considerations and intended handling of sensitive information. - Organizations can set acceptable uses for personally identifiable information, protected health information, controlled unclassified information and proprietary source code. - Risk scoring, approval decisions, documented restrictions and time-limited exceptions support governance workflows. - GUARDIENT AI Governance integrates with GUARDIENT App Control Manager to connect governance decisions to application security policies on managed endpoints. - Organizations can set applications for monitoring, alerting or blocking, where supported, and track whether those controls were actually deployed and activated. - The platform generates organization-specific governance documentation based on program settings and decisions. - Generated documents can include AI governance policies, acceptable use requirements, risk management and third-party risk procedures, generative AI usage standards and incident response procedures. - The documents reference the NIST Artificial Intelligence Risk Management Framework 1.0 and the NIST AI 600-1 Generative AI Profile. - The platform also supports approval workflows, document versioning, workforce acknowledgements and updates when material governance decisions change. - GUARDIENT AI Governance provides a centralized view of governance posture, outstanding reviews, expiring exceptions and policy status. - Organizations can run recurring reviews, preserve historical snapshots and maintain records of decisions and approvals. - Exportable evidence packages consolidate governance registers, risk information, policies, approval histories and framework mappings for internal reviews, customer due diligence and audit preparation.

Between the lines: - The product targets a common gap in AI governance: many organizations can find AI tools, but fewer can prove that policy decisions are current, enforced and documented. - USX Cyber is positioning the platform as a way to connect governance with endpoint controls, which is more operational than policy-only programs. - The company is also signaling support for organizations at different maturity levels, from first-time AI governance programs to existing processes that need more structure.

What's next: - Organizations interested in the platform can use USX Cyber for AI readiness assessments or to develop a formal AI governance program. - The platform supports customer-managed, co-managed and managed operating models, so organizations can keep decision-making authority while USX Cyber helps administer and maintain the program. - The company says the goal is to help organizations adopt AI with confidence while maintaining visibility, accountability and security controls as usage evolves. - GUARDIENT AI Governance is designed to support practices informed by NIST AI RMF 1.0 and NIST AI 600-1, but it does not independently certify compliance with those frameworks. - The platform does not inspect AI prompts, monitor website or DNS activity, or guarantee prevention of sensitive data exposure. - Discovery and technical enforcement depend on supported technologies, available telemetry and deployed endpoint controls. - More information is available at the company's website.