Notifications
Clear all
Topic starter
24/06/2026 8:56 pm
TL;DR: After evaluating 10 vendors across 19 criteria, Forrester named Collibra a Leader in Data Governance and a Strong Performer in AI Governance, highlighting how enterprises are merging data control, policy management, and AI oversight under one governance model. The bigger issue is that governance stacks are converging faster than most operating models can absorb.
NHIMG editorial — based on content published by Collibra: Collibra receives dual recognition in Forrester Waves in data governance and AI governance
By the numbers:
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security.
- 69% of security leaders agree identity management must fundamentally shift to address agentic AI systems.
Questions worth separating out
Q: How should teams govern AI assets and data together without creating duplicate controls?
A: Build a single governance inventory that links datasets, models, policies, and approvals, then reuse governance artefacts only when ownership, versioning, and review evidence remain intact.
Q: Why does AI governance fail when identity controls sit outside the governance model?
A: Because governance stops at description if it cannot show who accessed what, under which entitlement, and with what accountability.
Q: What should security teams measure in a unified data and AI governance programme?
A: Measure whether approvals, lineage, policy application, and audit evidence remain linked across systems and teams.
Practitioner guidance
- Map shared governance artefacts across data and AI Inventory which approvals, policies, lineage records, and audit artefacts can be reused across data governance and AI governance without creating ownership gaps.
- Tie identity controls into the governance plane Confirm that access approvals, entitlement reviews, and privileged access records are linked to AI asset oversight and not managed in a separate toolchain.
- Test whether audit evidence proves enforcement Require evidence that policy was applied during real usage, including monitoring and compliance checks, rather than accepting policy documents as proof.
What's in the full article
Collibra's full blog post covers the award context and report excerpts this analysis intentionally leaves at the source:
- The exact Forrester scoring areas across current offering and strategy that shaped the market view.
- The quoted analyst commentary and reference customer feedback that explain why the vendor's positioning resonated.
- The full list of AI governance criteria, including observability, policy workflows, and compliance audit.
- The separate report links for readers who want the underlying analyst methodology rather than this governance interpretation.
👉 Read Collibra's analysis of its Forrester recognition in data and AI governance →
AI governance and data governance convergence: what teams need now?
Explore further
25/06/2026 5:50 am
Unified governance is becoming the default enterprise pattern, but only if the control model can span data, AI, and identity together. The market signal here is not merely category expansion. It is that governance buyers now expect a shared inventory, shared policy language, and shared audit evidence across more than one asset class. For IAM and NHI teams, that means governance maturity will increasingly be judged by integration, not by isolated point controls.
A few things that frame the scale:
- 69% of security leaders agree identity management must fundamentally shift to address agentic AI systems, according to The 2026 Infrastructure Identity Survey.
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security.
A question worth separating out:
Q: Who should own governance when AI, data, and identity controls overlap?
A: Ownership should be explicit at the control level, not assumed by team function. Data, AI, and identity teams may all participate, but a named control owner must remain accountable for policy, evidence, and recertification. That clarity prevents gaps when responsibilities cross organisational boundaries.
👉 Read our full editorial: Forrester’s dual recognition of Collibra and what it signals
