> ## Documentation Index > Fetch the complete documentation index at: https://syteca.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # How to manage and mitigate AI-related risks > Monitor AI-related activities across endpoints, investigate detected AI usage, and implement appropriate technical, administrative, or user-awareness controls to reduce AI-related risks. ## Understanding AI-Related Risk Factors Most risk factors in the **Syteca AI Usage** policy are event-based rather than state-based. Unlike configuration-related risks that result from a specific setting, AI-related risks are typically triggered by user actions, such as: * Accessing AI platforms through web browsers * Running AI-powered applications * Using AI assistants within development environments (IDEs) * Interacting with generative AI tools using corporate devices Because these risks are driven by user behavior, they require continuous monitoring and periodic review rather than one-time configuration changes. ## Procedure 1. Open the [Policies page](/docs/espm/policies/viewing-policies). 2. Select the **Syteca** **AI Usage Policy**. 3. Click **View Details** to open the [Policy details](/docs/espm/policies/policy-details) page. 4. Open the **Endpoint Groups** tab. 5. Verify that the policy is assigned to the **All Clients** endpoint group. Assigning the policy to this group helps ensure that all managed endpoints are automatically evaluated for AI-related activities. 6. Monitor the policy regularly. AI-related risk factors are generally event-based and become active when users interact with AI tools or services. 7. Open the [Dashboard](/docs/espm/dashboards-page) page. 8. Use the **Risk Factors Summary** widget to monitor the current state of the AI Usage Policy. 9. When new AI-related risk factors are detected, identify the affected endpoints. 10. Open the [Endpoint details](/docs/espm/endpoints/endpoint-details) page for an affected endpoint. 11. In the **Risk Factors** grid, locate the AI-related risk factor and review its details. 12. Analyze the available information to understand: * Which AI service or tool was used * How it was accessed * Which user was involved (where available) * Whether the usage aligns with organizational policies and approved business purposes 13. Based on the information provided, determine the appropriate remediation action. ## Remediation Options The appropriate response depends on the type of AI activity and your organization's AI governance requirements. Possible actions include: * Educating users about approved AI usage practices * Restricting access to unauthorized AI services * Removing unapproved AI browser extensions * Uninstalling unauthorized AI applications * Updating organizational AI usage policies * Implementing technical controls to limit access to prohibited AI services * Providing alternative approved AI solutions ## Key Considerations * AI-related risks are often caused by user behavior rather than endpoint misconfiguration. * Eliminating the risk factor may require a combination of technical controls, process changes, and user education. * Not all detected AI usage is necessarily inappropriate or non-compliant. Investigate the context before taking corrective action. * User awareness is a critical component of AI governance. Ensuring that employees understand approved AI usage practices can significantly reduce recurring AI-related risks. * Regular monitoring is recommended because new AI tools, services, and browser extensions are introduced frequently and may be adopted by users without prior approval. ## Related Monitor and govern employee use of AI tools across browsers, extensions, applications, and development environments to support secure, compliant, and responsible AI adoption. Investigate risk factors affecting an endpoint, review available technical details, and understand the underlying conditions or activities that caused a risk to be detected.