Photo By: Susan Q Yin
Artificial intelligence is becoming part of everyday business operations, but its rapid adoption is creating new challenges around governance, compliance and accountability. Companies may know which AI projects they have formally approved, but they can have a harder time identifying every AI tool or agent being used across the organization. This lack of visibility can make it difficult to assess potential risks and ensure that all AI systems are being used responsibly and consistently with company policies.
That challenge will be discussed at a September 16 breakfast hosted by NewRocket at the Calgary Petroleum Club. The event will examine how organizations can inventory AI systems, establish ownership, manage risk and address compliance as AI becomes more deeply integrated into business processes.
The governance challenge is partly driven by how quickly AI tools can be adopted. Employees can access commercial AI assistants with little technical knowledge, while individual departments may develop their own applications or work with outside vendors. Some systems go through established security and procurement reviews, while others may be introduced without the same level of oversight.
This can create what is often called shadow AI. Organizations may have limited visibility into which tools are being used, what information they can access and how their outputs are being incorporated into business processes. That lack of visibility can make it difficult to apply consistent security, privacy and compliance controls.
AI agents add another layer of complexity. Traditional software generally performs tasks according to predefined rules, while AI agents can interpret information, make decisions and take actions with varying levels of autonomy. Greater autonomy means organizations need to understand what an agent can access, what it is permitted to do and who is accountable for its actions.
Gartner has identified the potential for AI agent sprawl as organizations deploy these systems across different functions. The research firm estimates that an average Fortune 500 company could have more than 150,000 AI agents in use by 2028. Gartner also reports that only 13% of organizations believe they currently have the right governance in place for AI agents.
Effective governance starts with visibility. Organizations need to know which AI systems exist, who owns them, what data they can access and which business processes they influence. A centralized inventory can provide a foundation for applying policies consistently and identifying systems that may require additional review.
Identity and access controls are another important consideration. PwC recommends giving AI agents verified identities, defined roles and task-specific permissions, along with records that can be audited. Human oversight can also become more important when agents have greater autonomy or are involved in decisions with significant consequences.
Compliance requirements can make the issue more complicated, particularly for organizations operating in regulated industries. Rules around data protection, access, record keeping and accountability may already apply to the business. AI systems can touch several of these areas at once, particularly when they process sensitive information or interact with other enterprise systems.
Governance also needs to continue after an AI system is deployed. An agent’s permissions, data sources or responsibilities may change over time, creating a need for ongoing monitoring and lifecycle management. A system that was considered low risk at launch may require a different level of oversight if its role expands. Regular reviews can help organizations identify these changes early and adjust controls before new risks become significant.
ServiceNow’s AI Control Tower is one example of an approach designed to provide greater visibility into an organization’s AI environment. The platform is intended to create a centralized inventory of AI assets and connect that information with governance, monitoring, risk management and value measurement.
NewRocket’s Calgary event will bring these issues together through a discussion focused on AI inventory, governance, compliance and accountability. The agenda includes examples involving commercial AI assistants, internally developed agents and other AI assets, with a focus on how organizations can track and manage them over time.
The broader governance challenge is likely to grow as AI moves from individual experiments into everyday business processes. Effective oversight will require more than approving an AI system before deployment. Organizations will need ongoing visibility into what their AI systems are doing, what they can access, who is responsible for them and whether they continue to meet business and compliance requirements. This will become especially important as organizations deploy multiple AI tools across different departments, creating a more complex environment in which systems may interact with one another and influence important decisions. Governance frameworks will therefore need to include regular monitoring, documentation, risk assessments and clear accountability structures. Employees should also understand how AI systems are intended to be used and when human review is necessary. As AI capabilities and regulations continue to evolve, organizations will need flexible governance processes that can adapt to new risks without preventing responsible innovation.
About NewRocket
NewRocket is the trusted AI partner helping enterprises build AI workflows customers trust. As a launch Select Partner in Anthropic’s Claude Partner Network, we help organizations unlock the value of AI through strategy, governance, adoption, and delivery. Combined with ServiceNow’s workflow platform and more than two decades of enterprise transformation expertise, we design, build, and scale AI solutions that create outcomes that last.
