TL;DR: The NIST AI RMF, ISO/IEC 42001 and the EU AI Act each cover part of AI governance, but none were built for agentic systems that act, call tools and change state at runtime, according to Lumenova AI. The gap is no longer theoretical: governance now fails when policies cannot be mapped to live controls and evidence.
Editorial analysis by NHI Mgmt Group, based on content published by Lumenova AI: “AI Governance Frameworks Under Pressure: Comparing Global AI Governance Models Against the Demands of Agentic AI”.
Key questions
Q: How should organisations govern agentic AI when it makes judgment calls, not just automated actions?
A: Organisations should govern the decisions agentic AI is permitted to make, not only the data it can access.
Q: Why do existing AI governance frameworks struggle with agentic systems?
A: They mostly describe models, risk categories, or high-level oversight, while agentic systems also need identity, permissions, tool access, and execution controls.
Q: What breaks when AI governance is only a one-time review?
A: A one-time review breaks as soon as the agent gains a new tool, a new dataset, or a new workflow.
Practitioner guidance
- Implement runtime policy gates for consequential agent actions Block or route high-risk actions through enforcement points that evaluate action type, destination system and approval status before execution.
- Inventory agents separately from models and applications Create a governed registry for every agent, including owner, purpose, tool access, data access and expiry conditions.
- Replace broad delegation with scoped agent authority Grant the minimum credentials and permissions required for a specific workflow, then expire them automatically when the task completes or risk changes.
Bottom line: Agentic AI pushes governance past policy statements and into runtime control, because agents can act, call tools and change state without waiting for a human reviewer.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →