Notifications
Clear all
Topic starter
12/06/2026 12:38 am
TL;DR: Governance gaps often stall AI projects before production as organisations scale agents, and Collibra says its Azure AI Foundry integration is designed to bring reliability, traceability and compliance into AI development workflows. The real issue is not faster build cycles, but whether enterprise controls can keep pace with agent behaviour, data use and accountability.
NHIMG editorial — based on content published by Collibra: AI Governance integration with Azure AI Foundry for agentic AI
By the numbers:
- Gartner predicts that by 2027, over 40% of agentic AI projects will be canceled for exactly these reasons.
- While 71% of IT teams have been advised on AI agent data access, only 47% of compliance teams, 39% of legal teams, and 34% of executives have the same visibility.
Questions worth separating out
Q: How should security teams govern AI agents that access enterprise data and tools?
A: Security teams should govern AI agents the same way they govern other high-impact identities: assign ownership, define allowed data and tool access, record lineage, and require change control.
Q: Why do AI agent programmes need traceability before they reach production?
A: Traceability is what lets teams explain what an agent was built to do, what data it used, and who approved it.
Q: What breaks when privacy controls sit outside the AI development workflow?
A: When privacy controls are separate from development, teams create undocumented exceptions, delayed approvals and weak evidence for compliance.
Practitioner guidance
- Register every agent as a governed actor Capture agent type, ownership, underlying model linkage and operational instructions at creation time so governance evidence exists before deployment, not after an incident review.
- Embed policy checks into build workflows Require approved data sets, classification rules and privacy guardrails to be evaluated inside the development pipeline so exceptions do not accumulate outside review.
- Tie traceability to change control Make every model or agent update produce a visible record of input changes, ownership changes and downstream dependencies so reviewers can assess impact quickly.
What's in the full article
Collibra's full analysis covers the operational detail this post intentionally leaves for the source:
- How the Azure AI Foundry integration registers agent metadata, including type, instructions and ownership, for governance use.
- The specific workflow points where policy, privacy and approval controls are applied during AI development.
- Examples of how lineage and dependency records support later investigation of model or agent issues.
- The financial services, supply chain and healthcare scenarios used to illustrate governance and compliance handling.
👉 Read Collibra's analysis of AI agent governance in Azure AI Foundry →
AI agent governance: are reliability and traceability keeping up?
Explore further
12/06/2026 10:02 am
AI agent governance is becoming an identity control problem, not just a model quality problem. Collibra’s framing is useful because it shifts the conversation from whether an agent is accurate to whether its access, data use and ownership can be governed end to end. That matters because enterprise risk appears when the agent is allowed to act across tools and datasets without a durable governance record. Practitioners should read this as a call to treat agents as governed identities inside the development lifecycle.
A few things that frame the scale:
- 98% of companies plan to deploy even more AI agents within the next 12 months, despite documented rogue behaviour in 80% of current deployments, according to AI Agents: The New Attack Surface report.
- Only 52% of companies can track and audit the data their AI agents access, leaving 48% with a complete blind spot for compliance and breach investigation, according to the same AI Agents: The New Attack Surface report.
A question worth separating out:
Q: Who should own accountability for deployed AI agents?
A: Accountability should sit with the business or governance owner who can approve scope, review changes and retire the agent when it is no longer needed. Shared ownership without clear decision rights usually turns into no ownership, which is how agents become difficult to audit and even harder to decommission.
👉 Read our full editorial: AI agent governance needs traceability before scale, not after
