Governance & Risk Programmes
Agent Management and Controls
A hands-on governance cohort that closes the agent control gap — from registry to kill switch to incident response. Built on the agent-control framework that now runs inside the Governance and Risk modules of DecisionOS, and tied to 2026 regulatory expectations. Participants leave with a working agent governance checklist, a tested mental model for incident response, and a control-readiness baseline for their organisation.
Programme outline
- 01
The agent governance gap
Why so many organisations cannot shut down a rogue agent — and what the 2026 regulatory and liability environment means for governance teams who haven't yet closed this gap.
- 02
Building your Agent Registry
What to track, who owns it, how to maintain it under fast-changing agent deployment cycles, and the minimum viable registry that satisfies both operations and audit.
- 03
Permission Boundaries: minimum-necessary access for agents
How to design, implement and review agent permissions — scope creep patterns, the risks of defaulting to broad access, and how MCP and A2A architectures change the access control model.
- 04
Kill Switch Readiness: designing, testing and maintaining shutdown capability
How to build a kill switch that works under real incident conditions — not a theoretical policy — and what testing looks like for agent shutdown in production environments.
- 05
Audit Trails for agents: what regulators and incident reviews actually need
The difference between a log and an audit trail, what structured agent logging enables versus informal logging, and how to design audit evidence that holds up under regulatory review.
- 06
Incident Response for agent events
The first hour of an agent incident — who gets notified, what gets stopped, what gets preserved. A structured response framework built for the speed and opacity of agent failures.
- 07
Workshop: agent control readiness
Cohort participants work through the five control dimensions together, map the results to their organisational reality, and build a 90-day priority list for their governance programme.
Where this is measured
The control framework this cohort teaches is the same one the Governance and Risk modules of DecisionOS run against your organisation — registry, permission boundaries, stop mechanism, evidence trail and incident response. The course builds the capability; the modules keep the record. Neither replaces the other.
The Governance module