Skip to content
01A field guide for enterprise conversations · August 2026

What does it actually take to govern AI across an enterprise?

Not a policy binder, and not a product list. Seven layers of decisions and controls — from who is accountable, to what the AI may know, to what an agent may do on its own — each enforced in the platform, not just written in documents. This guide gives every audience the same mental model, at the depth they need.

The gap, in four numbers
28%
of organizations report CEO-level oversight of AI governance
McKinsey State of AI, 2025
72%
of enterprise GenAI use flows through personal accounts
Netskope Cloud & Threat Report, 2025
97%
of organizations with AI-related breaches lacked AI access controls
IBM Cost of a Data Breach, 2025
2.3 / 4
average AI trust maturity — agentic controls score lowest
McKinsey State of AI Trust, 2026

Adoption has outrun governance everywhere. The enterprises that scale AI safely are not the ones with the thickest policies — they are the ones whose policies compile into the platform.

The framework in 30 seconds

Seven layers. One question each.

Everything in AI governance hangs off seven layers. An executive can hold the questions in mind; a practitioner can own the controls; an architect can build the enforcement. Select a layer to preview it — every layer goes three levels deep.

1Enterprise

You cannot govern what you have not inventoried, and you have not governed what nobody owns.

The operating model above every AI system: named accountability, an inventory of everything AI in the enterprise, risk-tiered intake, policy that maps to regulation, and the councils and escalation paths that make decisions stick. Every framework — NIST AI RMF, ISO/IEC 42001, the EU AI Act — starts here, because none of the other layers can work if nobody owns them.

Risks concentrated here
Shadow AIRegulatory non-complianceRunaway cost
The point of view

Policy must compile.

Every public AI failure — the invented refund policy, the leaked source code, the agent that deleted a production database — happened at a company that had a policy against it. What was missing was enforcement in the request path. Across all seven layers, the same loop applies:

aSet policy

Decide risk appetite, acceptable use, and tiering — write rules that name their enforcement point.

bGate the lifecycle

Intake, impact assessment, evaluation gates, and release control before anything ships.

cEnforce at runtime

Allowlists, screening floors, identity, quotas — controls that run on every request, bypassable by no one.

dProve it

Logs, traces, and evidence generated continuously — audit posture as a by-product, not a fire drill.

This maps directly onto the frameworks your customers already know — NIST's Govern–Map–Measure–Manage, ISO/IEC 42001's management system, Gartner's AI TRiSM — but it says the quiet part out loud: the differentiating layer is runtime enforcement plus evidence, and that is a platform property.

How to use this in a customer meeting

Open with the stack

Put the seven layers on screen and ask: “which of these keeps you up at night?” The answer picks the page for the next ten minutes.

Go one level deep, not three

Every layer page has an executive view first. The practitioner and technical depths are there when the CISO or architect leans in — not before.

End with discovery

Each page carries “questions to ask your organization.” Leave those with the customer — or run the readiness diagnostic together in five minutes.

Objectivity note: the market treatment comes first on every topic; the “How Google Cloud approaches this” band is clearly marked, and the framework stands on sources a customer can check.