TL;DR: Generative AI is moving enterprise systems from supporting decisions to shaping them, which shortens the path from data to value while making trust probabilistic, human validation non-negotiable in sensitive identity, payment, and cybersecurity workflows, according to Idemia. The governance problem is no longer speed alone; it is deciding how much of the decision chain a system can credibly own.
Editorial analysis by NHI Mgmt Group, based on content published by Idemia: “Generative AI Is not a wave; it’s a decision shift”.
Key questions
Q: How should security teams govern generative AI once it becomes part of daily operations?
A: Treat generative AI as an access-bearing workflow, not a standalone tool.
Q: Generative AI In Identity Governance
A: The use of generative AI to support identity governance tasks such as role recommendations, policy enforcement, and workflow handling.
Q: What breaks when AI-assisted review replaces human checks in critical flows?
A: The control breaks when the workflow no longer preserves enough evidence, context, or independent judgment to prove the decision was sound.
Practitioner guidance
- Define decision boundaries for GenAI use Classify which workflows are advisory, decision-shaping, or decision-making, and prohibit silent movement between those states.
- Require human validation for critical outputs Set explicit checkpoints where a person must verify context, grounding, and policy fit before the output can trigger action.
- Preserve traceability across the decision chain Log the prompt, retrieved context, model response, and downstream action so auditors can reconstruct why the system influenced the decision.
Bottom line: Generative AI changes the governance problem by influencing decisions, not only executing tasks.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Decision-shaping systems create a governance boundary that classic automation never had: once generative AI starts influencing the answer, the control problem shifts from execution oversight to decision integrity. That changes how identity, payment, and security programmes should think about validation, because the system is no longer only doing work. Practitioners need to govern the point where output becomes action.
A few things that frame the scale:
- According to Gartner, worldwide spending on generative AI is set to reach $644 billion in 2025, a nearly 77% year-over-year increase.
A question worth separating out:
Q: What is the difference between automation and decision support in GenAI programmes?
A: Automation executes a defined step, while decision support influences a choice that a person or process still owns. With GenAI, the line gets blurry because the system can shape what seems plausible. Teams should treat any output that changes judgment, not just action, as a governance concern.
👉 Read our full editorial: Generative AI changes decision-making, not just automation