AI Strategy
Microsoft Agent Governance and Independent Control Planes
Microsoft's agent governance stack — the open-source Agent Governance Toolkit, Entra Agent ID, Purview — and where an independent control plane fits.
Blog
Insights & updates — page 9
AI agent security, identity, governance, cost, and the engineering behind the control plane.
AI Governance & Compliance
Insurance AI Agents: Colorado AI Act, EU AI Act and NAIC
What insurers deploying AI agents in underwriting and claims must meet: the Colorado AI Act, EU AI Act high-risk rules and the NAIC model bulletin.
AI Governance & Compliance
AI Agent Governance for the Legal Industry
How law firms and legal departments govern AI agents: privilege protection, matter-level access, ethical walls, and audit-ready evidence.
Platform & Operations
Evaluating AI Agent Observability Tooling
A practical guide to what AI agent observability must cover — cost, behavior, and policy compliance — and the key criteria for choosing the right tooling.
AI FinOps
AI Agent Cost Benchmarks and Cost per Completed Task
Calculate AI agent cost per completed task, including failed attempts and retries. Use a reproducible example and a checklist for a defensible benchmark.
AI Governance & Compliance
EU AI Act Rules for Public-Sector AI Agents
What public bodies deploying AI agents must meet under the EU AI Act and administrative law: high-risk uses, transparency, registration and human review.
AI FinOps
How to Set Budgets for AI Agents
Set enforceable AI agent budgets with reservation-based enforcement, graduated thresholds, and clear attribution — before overruns reach your invoice.
AI Agent Security
OWASP LLM Top 10 vs Agentic Top 10 for AI Agents
The OWASP LLM Top 10 read through an agent lens, how it differs from the Top 10 for Agentic Applications, and the controls that address each risk.
AI Governance & Compliance
AI Guardrails vs LLM Firewall: Terms and Trade-offs
AI guardrails and LLM firewalls both inspect content but solve different problems. Learn the distinctions, evaluation approaches, and fail-mode trade-offs.
AI Governance & Compliance
Data Residency and Sovereignty for AI Agents
How to keep AI agent data within jurisdictional boundaries, satisfy GDPR and cross-border transfer rules, and produce the evidence regulators expect.
AI Agent Security
SSRF Risks in Agent Tool Calls
Any agent with a fetch tool is an SSRF primitive with a natural-language interface. The attack paths, why allow-lists beat denylists, and how to bound egress.
Identity & Access
How to Authenticate AI Agents
How to give each AI agent its own identity and authenticate it with scoped, short-lived credentials — so every action is attributable and revocable.
AI Strategy
AI Agent Governance: Build vs Buy
An honest framework for deciding whether to build AI agent governance in-house or buy a platform, weighed by risk, team capacity, and time-to-value.
AI Agent Security
An AI Agent Incident Readiness Checklist
A practical checklist for AI agent incident readiness: inventory, instant revocation, tamper-evident audit trails, runbooks, and communication templates.
AI Strategy
AI Control Plane vs API Gateway: What's the Difference?
An API gateway manages traffic; an AI control plane governs agents. Learn the five critical gaps gateways leave open and what a control plane adds.
AI FinOps
Threat Model: Runaway Agent Spend
Loop-and-burn failures drain AI budgets fast. Learn the blast radius, five root conditions, and the layered controls that stop runaway spend before the invoice.
AI Strategy
Best AI Agent Governance Platforms (2026): How to Choose
Criteria for evaluating AI agent governance platforms, then a disclosed list of platforms as of October 2026, grouped by approach and what each is best for.
AI Agent Security
Securing the AI Agent Supply Chain
Provenance, attestation, and runtime verification protect AI deployments from compromised third-party agents and tools — and how supply chain security works.
AI Governance & Compliance
ISO/IEC 42001 for AI Management Systems
ISO/IEC 42001 sets requirements for AI management systems. See what the standard expects and how agent governance controls map directly to its Annex A clauses.
AI Governance & Compliance
Agent Lifecycle Management: Draft to Production
Most agents reach production with no promotion gate. The lifecycle stages worth defining, what each gate should check, and how to keep promotion fast.
AI Governance & Compliance
An AI Agent Compliance Checklist for 2026
A practical AI agent compliance checklist covering identity, tamper-evident audit trails, GDPR erasure, EU AI Act risk tiers, and vendor due diligence.
AI Agent Security
Threat Model: Indirect Prompt Injection
Indirect prompt injection hijacks tool-using AI agents through poisoned external content. Learn the attack vectors and layered controls that contain them.
AI Governance & Compliance
Policy as Code: Versioning Guardrails and Agent Config
Guardrails and agent configuration are security controls and need their change discipline: version policy, review changes, prove which version was in force.
AI Governance & Compliance
Applying the NIST AI RMF to AI Agents
Apply the NIST AI RMF to AI agents: map GOVERN, MAP, MEASURE, and MANAGE to controls like agent inventories, threat models, audit trails, and revocation.