Skip to main content
Most risk factors in the Syteca AI Usage policy are event-based rather than state-based. Unlike configuration-related risks that result from a specific setting, AI-related risks are typically triggered by user actions, such as:
  • Accessing AI platforms through web browsers
  • Running AI-powered applications
  • Using AI assistants within development environments (IDEs)
  • Interacting with generative AI tools using corporate devices
Because these risks are driven by user behavior, they require continuous monitoring and periodic review rather than one-time configuration changes.

​
Procedure

  1. Open the Policies page.
  2. Select the Syteca AI Usage Policy.
  3. Click View Details to open the Policy details page.
  4. Open the Endpoint Groups tab.
  5. Verify that the policy is assigned to the All Clients endpoint group. Assigning the policy to this group helps ensure that all managed endpoints are automatically evaluated for AI-related activities.
  6. Monitor the policy regularly. AI-related risk factors are generally event-based and become active when users interact with AI tools or services.
  7. Open the Dashboard page.
  8. Use the Risk Factors Summary widget to monitor the current state of the AI Usage Policy.
  9. When new AI-related risk factors are detected, identify the affected endpoints.
  10. Open the Endpoint details page for an affected endpoint.
  11. In the Risk Factors grid, locate the AI-related risk factor and review its details.
  12. Analyze the available information to understand:
    • Which AI service or tool was used
    • How it was accessed
    • Which user was involved (where available)
    • Whether the usage aligns with organizational policies and approved business purposes
  13. Based on the information provided, determine the appropriate remediation action.

​
Remediation Options

The appropriate response depends on the type of AI activity and your organization’s AI governance requirements. Possible actions include:
  • Educating users about approved AI usage practices
  • Restricting access to unauthorized AI services
  • Removing unapproved AI browser extensions
  • Uninstalling unauthorized AI applications
  • Updating organizational AI usage policies
  • Implementing technical controls to limit access to prohibited AI services
  • Providing alternative approved AI solutions

​
Key Considerations

  • AI-related risks are often caused by user behavior rather than endpoint misconfiguration.
  • Eliminating the risk factor may require a combination of technical controls, process changes, and user education.
  • Not all detected AI usage is necessarily inappropriate or non-compliant. Investigate the context before taking corrective action.
  • User awareness is a critical component of AI governance. Ensuring that employees understand approved AI usage practices can significantly reduce recurring AI-related risks.
  • Regular monitoring is recommended because new AI tools, services, and browser extensions are introduced frequently and may be adopted by users without prior approval.

Syteca AI Usage policy

Monitor and govern employee use of AI tools across browsers, extensions, applications, and development environments to support secure, compliant, and responsible AI adoption.

How to investigate risk factors

Investigate risk factors affecting an endpoint, review available technical details, and understand the underlying conditions or activities that caused a risk to be detected.