Session Description

Organizations are coming to terms with the fact that governance expressed through paper policy and verified through periodic adherence audits is too slow and too late to keep up with the speed of risk.

Policies are helpful for directing human behaviour. But machines and systems require policies to be operationalized within their design. For software-defined processes, this is called Policy-as-Code — digital automation that implements internal controls and accountability architectures to support decision rights. In RACI terms, accountability still happens at the speed of humans, but responsibility increasingly happens at the speed of machines.

Up until now, governance frameworks have been designed to govern people — moral autonomous agents. We ensured that accountability remains with humans, and when machines were involved, they were built to specifications aligned with corporate intent.

That paradigm is changing.

Autonomous AI agents are now being deployed at scale behind the firewall — with…