Field brief · CIO, CTO, CDAO, risk and audit

Governance at machine speed

Replace periodic approval with controls that travel with agent identity, context and action.

Traditional governance often assumes a human-paced change cycle: a proposal is reviewed, a system is approved, and periodic assurance checks whether the design still holds.

Agentic systems challenge that rhythm. They may operate continuously, call changing tools, encounter novel context and coordinate with other agents. Governance that exists only before deployment becomes a snapshot of a system that no longer exists.

Make the operating envelope executable

A policy becomes an operating control when the environment can enforce it. For each material agent, the control plane should establish:

  • a verifiable identity;
  • least-privileged access to tools and information;
  • allowed actions and prohibited actions;
  • runtime, cost, transaction and cumulative exposure limits;
  • required approvals for irreversible or high-consequence actions;
  • monitoring tied to outcomes and boundary conditions;
  • escalation, isolation and tested rollback;
  • an evidence record usable by operations and assurance.

This is how governance becomes the path of least resistance rather than a document teams route around.

Separate instructions from context

Agents consume documents, messages, websites and tool outputs that may contain untrusted content. The system must distinguish enterprise instructions and permissions from material the agent is asked to process.

That distinction belongs in architecture, not prompt wording alone. Trusted policy, tool schemas and authorization should be controlled by the platform. Retrieved content should enter as data with provenance and permitted-use rules.

Govern the portfolio, not only each agent

An individually acceptable agent can still create unacceptable enterprise exposure when hundreds of agents share dependencies, identities, tools or failure modes.

Portfolio governance should reveal:

  • all active agents and accountable owners;
  • delegated authority by process and consequence;
  • shared model, data and tool dependencies;
  • concentration of privileges and failure exposure;
  • control exceptions and intervention performance;
  • material changes awaiting reauthorization;
  • systems that should be constrained or retired.

The object of governance is the enterprise system, not a collection of disconnected model assessments.

Measure what management can act on

Prompt volume and user adoption may help operate a service. They do not tell leaders whether delegated authority is producing acceptable outcomes.

Management reporting should emphasize changed authority, outcome quality, exceptions, losses avoided or incurred, control failures, unresolved exposure, time to intervention, recovery performance and lessons incorporated.

Source notes