T-shirt size
L
Governance / Policy enforcement / L3
Policy-as-code
LL3 detail
Current metadata
Recommended C-suite owner
CISO (with CCO)
Recommended operational owner
GRC Engineering Lead / Policy-as-Code Product Owner
Parent Level 2
Policy enforcement
Related Sub-Threads
4
Related Sub-Threads
DevSecOps and control gates
Controls embedded in CI/CD
Build-and-release controls for agent bundles so changes are tested, approved, and traceable before production
Open Sub-Thread detail
Privacy and data protection
Data minimisation and purpose limitation
Ensuring agents access only necessary data for an approved purpose
Open Sub-Thread detail
Identity and access
Authorisation (RBAC / ABAC)
Fine-grained, context-aware authorisation for agent tasks and action classes
Open Sub-Thread detail
Auditability and evidencing
Traceability from policy to enforcement
The link between written policy, machine-enforced rules, and proof of enforcement
Open Sub-Thread detail
Related Threads
Thread
DevSecOps and control gates
Embed agentic AI assurance, approvals, and policy enforcement into the software delivery pipeline so changes to agent bundles are tested, governed, and safely deployed
Open thread detail
Thread
Identity and access
Define and enforce precisely what agents can access and do across systems, data, and tools so autonomy is safe, least-privilege, and controllable at scale
Open thread detail
Thread
Auditability and evidencing
Capture end-to-end evidence of agent decisions and actions and automate reporting so the organisation can prove control effectiveness and investigate incidents
Open thread detail
Thread
Privacy and data protection
Apply privacy-by-design across retrieval, memory, tool calls, and third parties so agents minimise data use and comply with purpose, retention, and consent requirements
Open thread detail
Return
Back to the interactive map
Back to Explore
Cross-cutting lens
Review related threads
Open Threads