Introduction
See where your AI adoption changes your control posture, then calibrate your NIST CSF and CIS profiles to it in about 30 seconds.
Bob Vescio, Chief Innovation Officer of X-Analytics, walks through an agent in the X-Analytics AI Toolbox: the Effects of AI Adoption agent.
What it does
The Effects of AI Adoption agent is an AI agent in the X-Analytics AI Toolbox that shows you where adopting AI changes your NIST CSF and CIS control posture, then updates your profile to match.
You are adopting AI across the business: in finance and accounting, as a sales agent, for the complex analysis behind your decisions. Each use case sits on top of the controls you already run. With AI governance and AI countermeasures wrapped around that use case, your posture holds. The agent shows you what your control effectiveness looks like until that wrapper is in place.
Find it in AI Tools in the left navigation, alongside every other agent in the X-Analytics AI Toolbox.
How it works
- Open AI Tools in the left navigation and start the Effects of AI Adoption agent.
- The agent reads the frameworks you have populated. With CIS in place, you receive CIS guidance. With NIST CSF in place, you receive NIST CSF guidance. With both, you receive both.
- Review the subcontrols and subcategories your AI use case reaches. On the CIS side, that includes software inventory, data protection, access control management, log management, malware defenses, network monitoring and defense, security awareness training, service provider management, and application software security.
- On the NIST CSF side, see recommendations land across the govern, identify, protect, detect, and respond functions.
- See the recommended downward adjustment for each item, scaled to the data already in your profile, ranging from a single point to double digits.
- Select yes to submit the AI-affected values to CIS, NIST CSF, or both. Your profiles update automatically in about 30 seconds.
- Hold the adjusted scores until you can prove due diligence and due care around the AI use case through an AI governance structure, then revisit them.
What you walk away with
- A clear read on the specific controls your AI adoption reaches.
- Recommended control adjustments, each one scaled to your own profile data.
- Calibrated NIST CSF and CIS profiles that reflect the AI running in your environment.
- A defined target for your AI governance program: the exact controls to restore, and the points riding on them.
Frequently asked questions
What is the X-Analytics Effects of AI Adoption agent?
It is an AI agent in the X-Analytics AI Toolbox that recommends where your NIST CSF and CIS control scores should be adjusted to account for the AI use cases running in your organization, then submits those values to your profile.
Which frameworks does the agent work with?
NIST CSF and CIS. The agent follows what you have populated, so a CIS-only profile receives CIS guidance, a NIST CSF-only profile receives NIST CSF guidance, and a profile with both receives both.
Why does adopting AI lower my control scores?
An AI use case introduces exposure that your existing controls were scoped without. Until AI governance and AI countermeasures cover that use case, the affected subcontrols and subcategories perform below their recorded level, and the agent adjusts them to reflect it.
Do the adjustments stay in my profile permanently?
They hold until you prove due diligence and due care around the AI use case through an AI governance structure. Once your governance program covers it, you revisit those scores.
Watch the full walkthrough
The video above runs the agent against a profile with both CIS and NIST CSF populated, walks the affected subcontrols and functions, and submits the AI-affected values to update both profiles.
No model to build. No data to wrangle. X-Analytics handles it.
Questions about the agent? Reach out to your X-Analytics customer success team at customersuccess@x-analytics.com.
© 2026 X-Analytics. All rights reserved.