Topic starter
19/08/2026 3:59 pm
TL;DR: India’s AI Governance Guidelines (2025) position trust, accountability, and human-centric design as the operating model for AI adoption, according to Appknox, while the policy also pushes enterprises toward lifecycle traceability, explainability, and human-in-the-loop oversight. The practical issue is that governance now has to align with security controls that can prove how AI systems behave, not just what they were built to do.
Editorial analysis by NHI Mgmt Group, based on content published by Appknox: “AI for India, built on trust: what the new AI governance guidelines mean for the future”.
Key questions
Q: How can security teams keep AI from obscuring accountability?
A: Require the same accountability chain for AI-assisted work that you would for any privileged action.
Q: Why is traceability so important in AI governance?
A: Because AI decisions are difficult to defend without evidence of what data was used, what system acted, and who approved the workflow.
Q: What breaks when an AI agent is deployed without formal ownership?
A: When an AI agent has no formal owner, review, offboarding, and incident response all become slower and less reliable.
Practitioner guidance
- Define AI governance evidence requirements Specify what logs, approvals, model documentation, and review records must exist before an AI system can go live or change materially.
- Assign lifecycle owners for each AI model Map a named business and security owner to every model, retraining event, and high-impact decision path so accountability does not diffuse across teams.
- Embed human review in high-impact workflows Require human validation before AI outputs can trigger customer-facing, financial, or regulated decisions, and record the reviewer’s decision outcome.
Bottom line: India’s AI governance guidelines move trust, accountability, and explainability from policy language into security-relevant operating controls.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
19/08/2026 4:36 pm
Trust-centric AI governance is becoming a control architecture, not a values statement. The article treats trust, accountability, and explainability as operating requirements for AI adoption, which is the right direction for security teams. Once those principles are translated into traceability, oversight, and auditability, they become controls that can be assessed and enforced. The practitioner conclusion is straightforward: AI governance has to be measurable before it can be credible.
A few things that frame the scale:
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: Should AI governance sit with security, IAM or the business?
A: It should be shared, with security setting control requirements, IAM managing identities and permissions, and the business owning approved use cases and risk acceptance. AI governance fails when it is treated as a side project because the controls span multiple teams. Clear ownership, access review and change control are the minimum coordination points.
👉 Read our full editorial: India’s AI governance guidelines frame trust as a security control