❌

Normal view

  • ✇AI News
  • Deloitte: Scale ‘autonomous intelligence’ for real growth Ryan Daws
    Enterprise leaders must progress past generative applications and scale “autonomous intelligence” to capture real growth. Generating text or summarising internal communications offers localised productivity improvements, yet these abilities rarely alter the core cost or revenue structure of a large organisation. Enterprises are now focused on deploying systems capable of independent execution. Leaders are demanding applications that can traverse internal networks, execute multi-step logic, an
     

Deloitte: Scale ‘autonomous intelligence’ for real growth

15 May 2026 at 23:02

Enterprise leaders must progress past generative applications and scale “autonomous intelligence” to capture real growth.

Generating text or summarising internal communications offers localised productivity improvements, yet these abilities rarely alter the core cost or revenue structure of a large organisation. Enterprises are now focused on deploying systems capable of independent execution. Leaders are demanding applications that can traverse internal networks, execute multi-step logic, and finalise transactions without constant human prompting.

Prakul Sharma, principal and AI & Insights Practice Leader at Deloitte Consulting LLP, said: “At Deloitte, we view this as the third stage on an intelligence maturity curve, from ‘assisted intelligence,’ in which AI and analytics help people interpret information, through ‘artificial intelligence,’ with machine learning augmenting human decisions, to ‘autonomous intelligence,’ where AI decides and executes in defined boundaries.

“Today’s GenAI-era abilities – like chatbots and conversational AI – sit in the middle of that curve. Agentic AI acts as the bridge into autonomy, and it is where the centre of gravity is changing now. The difference we are seeing is agency: GenAI produces an answer, while autonomous intelligence pursues an outcome by reasoning over a goal, invoking tools and data, and adapting as conditions change, with humans setting guardrails not driving every step.

“We’re seeing this show up in industries, and in every case, the unlock isn’t the agent itself, but the surrounding governance architecture of identity and human-in-the-loop checkpoints, making autonomy safe to scale.”

Forensic audits for targeted margin improvement

To extract actual economic value, these autonomous systems must integrate directly into revenue-generating or cost-heavy workflows.

Consider a scenario in enterprise procurement: an agentic application continuously cross-references supply chain inventory against live vendor pricing in an enterprise resource planning system. It can then independently authorise purchase orders in predefined financial parameters, halting only for human approval when deviations occur.

The same system must also carry a verifiable identity in the ERP, read pricing data that is current enough to be contractually binding, and operate in approval thresholds that legal and compliance have formally endorsed. Any one of those dependencies, left unresolved, collapses the case for autonomous execution entirely. Achieving this level of automation therefore requires a forensic examination of existing operations before allocating any compute resources.

Sharma outlines the method Deloitte uses to initiate this operational overhaul and locate areas where autonomy can generate tangible revenue:

“The first step we advise is starting with a decision audit and the process. We ask leaders to pick one or two value chains where outcomes are bottlenecked by decisions not by tasks in that process, and to map how those decisions get made today. We ask questions like who has the data, who has the authority, where the handoffs break, what actions are needed, and where judgement is being applied.

“Asking these questions surfaces the process workflows where autonomy will create real economic value, while simultaneously exposing any data and governance gaps that may have derailed a pilot. From there, we help leaders sequence the rewire: stand up the foundational layers with AI and agentic fabric, data, evals, agent identity, and human-in-the-loop patterns against that first value chain, prove it works, and then use it as the template to scale.”

Integrating the right data infrastructure and upstream architecture

Once the operational target is isolated, the technological execution frequently stalls owing to upstream friction. The underlying foundation models from major providers have advanced quickly enough to handle complex reasoning tasks, becoming largely interchangeable commodities. The friction point lies in connecting these reasoning engines to legacy data architectures.

Sharma observes that the true technical barriers emerge long before the prompt reaches the large language model:

“Based on what we are seeing, the model is rarely the bottleneck, since frontier ability is now rapidly becoming a commodity. Where enterprises trip up in the design phase is upstream of the model. They select a use case before mapping the underlying workflow, resulting in the agent automating a process that was already broken or poorly instrumented.

“The second pattern is data: clients may underestimate that autonomous systems need decision-grade data, not reporting-grade data, meaning lineage and access controls that most enterprise data estates were not built to support.”

The distinction matters because most enterprise data estates were built for human analysts, not autonomous systems. Reporting-grade data – aggregated on a nightly or weekly batch cycle, structured for dashboard consumption, and stripped of the lineage that records how a value was derived – is adequate when a person applies judgement before acting on it. An autonomous agent has no such backstop. When it retrieves a contract price or a stock level to execute a transaction, that figure must carry a timestamp current enough to be binding, a traceable provenance, and access controls that confirm the agent is authorised to read and act on it.

Providing this decision-grade data involves integrating autonomous agents with right event stores and databases designed to manage both structured and unstructured enterprise information. When an agent retrieves data to execute a task, the enterprise must guarantee its freshness. Relying on stale batch-processed data introduces extreme risk, potentially causing the system to act on obsolete pricing tiers or outdated compliance frameworks.

The financial model for scaling these systems also requires forecasting variable compute expenses. Because agentic workflows involve multiple interactions with large language models to reason through a single goal, API costs can escalate unpredictably. Mitigating hallucination risks through retrieval-augmented generation processes also increases the necessary compute overhead, requiring strict financial controls before enterprise-deployment.

Reconciling governance debt and enterprise ecosystems

Transitioning from controlled testing environments to live enterprise deployment is a very different proposition. A small-scale test might perform perfectly using carefully selected data sets, but deploying that ability in thousands of employees and interconnected software platforms exposes vulnerabilities.

Navigating modern enterprise security environments means integrating the agentic architecture deeply with existing identity providers and cloud-native security controls across hybrid cloud ecosystems.

Sharma identifies this integration failure and the resulting governance debt that halts progress:

“The main roadblock we see is what we call the production gap. A pilot can succeed with a clever prompt, a curated dataset, and a champion team running it manually, but enterprise deployment requires continuous evaluations, identity and authorisation that work in systems the pilot never touched, change management for the users, and a financial model that can absorb use-based costs at scale.

“Tied to that is governance debt: the controls, audit trails, and risk frameworks waived to accelerate a pilot often become the gating items once legal and compliance evaluate a production rollout. The clients that break through are ones that don’t treat pilots as experiments but instead treat them as the first production instance of a reusable platform – with the same evals, identity model, and governance. Instead of starting over, this allows the second and third use cases to build on the first.”

Compliance frameworks applied during initial testing are often completely insufficient for live deployment. Teams eager to prove a concept frequently bypass standard corporate security protocols, creating the very gating items that prevent future scaling.

What unites all three failure modes – the production gap, governance debt, and upstream data friction – is that each one is invisible during a well-run pilot. A champion team with a curated dataset and management cover can paper over missing identity controls, stale data, and deferred compliance reviews for long enough to produce a convincing demonstration. It is only when the system must operate in the full enterprise, with real users, live data, and legal scrutiny, that the gaps become structural blockers not known workarounds.

Building a reusable platform from the outset – with identity verification, continuous model evaluations, and financial monitoring treated as first-class requirements not post-launch additions – is what allows organisations to avoid rebuilding those foundations for every subsequent deployment.

Prakul Sharma’s interview was conducted ahead of the AI & Big Data Expo North America, where Deloitte is a important sponsor. Be sure to swing by Deloitte’s booth at stand #272 to hear more directly from the organisation’s experts. Prakul Sharma will be sharing more of his insights during a panel session on day one and day two of the industry-leading event.

 

(Image source: Pixabay, under licence.)

 

Want to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events including the Cyber Security & Cloud Expo. Click here for more information.

AI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.

The post Deloitte: Scale ‘autonomous intelligence’ for real growth appeared first on AI News.

  • ✇AI News
  • IBM: How robust AI governance protects enterprise margins Ryan Daws
    To protect enterprise margins, business leaders must invest in robust AI governance to securely manage AI infrastructure. When evaluating enterprise software adoption, a recurring pattern dictates how technology matures across industries. As Rob Thomas, SVP and CCO at IBM, recently outlined, software typically graduates from a standalone product to a platform, and then from a platform to foundational infrastructure, altering the governing rules entirely. At the initial product stage, exert
     

IBM: How robust AI governance protects enterprise margins

10 April 2026 at 21:57

To protect enterprise margins, business leaders must invest in robust AI governance to securely manage AI infrastructure.

When evaluating enterprise software adoption, a recurring pattern dictates how technology matures across industries. As Rob Thomas, SVP and CCO at IBM, recently outlined, software typically graduates from a standalone product to a platform, and then from a platform to foundational infrastructure, altering the governing rules entirely.

At the initial product stage, exerting tight corporate control often feels highly advantageous. Closed development environments iterate quickly and tightly manage the end-user experience. They capture and concentrate financial value within a single corporate entity, an approach that functions adequately during early product development cycles.

However, IBM’s analysis highlights that expectations change entirely when a technology solidifies into a foundational layer. Once other institutional frameworks, external markets, and broad operational systems rely on the software, the prevailing standards adapt to a new reality. At infrastructure scale, embracing openness ceases to be an ideological stance and becomes a highly practical necessity.

AI is currently crossing this threshold within the enterprise architecture stack. Models are increasingly embedded directly into the ways organisations secure their networks, author source code, execute automated decisions, and generate commercial value. AI functions less as an experimental utility and more as core operational infrastructure.

The recent limited preview of Anthropic’s Claude Mythos model brings this reality into sharper focus for enterprise executives managing risk. Anthropic reports that this specific model can discover and exploit software vulnerabilities at a level matching few human experts.

In response to this power, Anthropic launched Project Glasswing, a gated initiative designed to place these advanced capabilities directly into the hands of network defenders first. From IBM’s perspective, this development forces technology officers to confront immediate structural vulnerabilities. If autonomous models possess the capability to write exploits and shape the overall security environment, Thomas notes that concentrating the understanding of these systems within a small number of technology vendors invites severe operational exposure.

With models achieving infrastructure status, IBM argues the primary issue is no longer exclusively what these machine learning applications can execute. The priority becomes how these systems are constructed, governed, inspected, and actively improved over extended periods.

As underlying frameworks grow in complexity and corporate importance, maintaining closed development pipelines becomes exceedingly difficult to defend. No single vendor can successfully anticipate every operational requirement, adversarial attack vector, or system failure mode.

Implementing opaque AI structures introduces heavy friction across existing network architecture. Connecting closed proprietary models with established enterprise vector databases or highly sensitive internal data lakes frequently creates massive troubleshooting bottlenecks. When anomalous outputs occur or hallucination rates spike, teams lack the internal visibility required to diagnose whether the error originated in the retrieval-augmented generation pipeline or the base model weights.

Integrating legacy on-premises architecture with highly gated cloud models also introduces severe latency into daily operations. When enterprise data governance protocols strictly prohibit sending sensitive customer information to external servers, technology teams are left attempting to strip and anonymise datasets before processing. This constant data sanitisation creates enormous operational drag. 

Furthermore, the spiralling compute costs associated with continuous API calls to locked models erode the exact profit margins these autonomous systems are supposed to enhance. The opacity prevents network engineers from accurately sizing hardware deployments, forcing companies into expensive over-provisioning agreements to maintain baseline functionality.

Why open-source AI is essential for operational resilience

Restricting access to powerful applications is an understandable human instinct that closely resembles caution. Yet, as Thomas points out, at massive infrastructure scale, security typically improves through rigorous external scrutiny rather than through strict concealment.

This represents the enduring lesson of open-source software development. Open-source code does not eliminate enterprise risk. Instead, IBM maintains it actively changes how organisations manage that risk. An open foundation allows a wider base of researchers, corporate developers, and security defenders to examine the architecture, surface underlying weaknesses, test foundational assumptions, and harden the software under real-world conditions.

Within cybersecurity operations, broad visibility is rarely the enemy of operational resilience. In fact, visibility frequently serves as a strict prerequisite for achieving that resilience. Technologies deemed highly important tend to remain safer when larger populations can challenge them, inspect their logic, and contribute to their continuous improvement.

Thomas addresses one of the oldest misconceptions regarding open-source technology: the belief that it inevitably commoditises corporate innovation. In practical application, open infrastructure typically pushes market competition higher up the technology stack. Open systems transfer financial value rather than destroying it.

As common digital foundations mature, the commercial value relocates toward complex implementation, system orchestration, continuous reliability, trust mechanics, and specific domain expertise. IBM’s position asserts that the long-term commercial winners are not those who own the base technological layer, but rather the organisations that understand how to apply it most effectively.

We have witnessed this identical pattern play out across previous generations of enterprise tooling, cloud infrastructure, and operating systems. Open foundations historically expanded developer participation, accelerated iterative improvement, and birthed entirely new, larger markets built on top of those base layers. Enterprise leaders increasingly view open-source as highly important for infrastructure modernisation and emerging AI capabilities. IBM predicts that AI is highly likely to follow this exact historical trajectory.

Looking across the broader vendor ecosystem, leading hyperscalers are adjusting their business postures to accommodate this reality. Rather than engaging in a pure arms race to build the largest proprietary black boxes, highly profitable integrators are focusing heavily on orchestration tooling that allows enterprises to swap out underlying open-source models based on specific workload demands. Highlighting its ongoing leadership in this space, IBM is a key sponsor of this year’s AI & Big Data Expo North America, where these evolving strategies for open enterprise infrastructure will be a primary focus.

This approach completely sidesteps restrictive vendor lock-in and allows companies to route less demanding internal queries to smaller and highly efficient open models, preserving expensive compute resources for complex customer-facing autonomous logic. By decoupling the application layer from the specific foundation model, technology officers can maintain operational agility and protect their bottom line.

The future of enterprise AI demands transparent governance

Another pragmatic reason for embracing open models revolves around product development influence. IBM emphasises that narrow access to underlying code naturally leads to narrow operational perspectives. In contrast, who gets to participate directly shapes what applications are eventually built. 

Providing broad access enables governments, diverse institutions, startups, and varied researchers to actively influence how the technology evolves and where it is commercially applied. This inclusive approach drives functional innovation while simultaneously building structural adaptability and necessary public legitimacy.

As Thomas argues, once autonomous AI assumes the role of core enterprise infrastructure, relying on opacity can no longer serve as the organising principle for system safety. The most reliable blueprint for secure software has paired open foundations with broad external scrutiny, active code maintenance, and serious internal governance.

As AI permanently enters its infrastructure phase, IBM contends that identical logic increasingly applies directly to the foundation models themselves. The stronger the corporate reliance on a technology, the stronger the corresponding case for demanding openness.

If these autonomous workflows are truly becoming foundational to global commerce, then transparency ceases to be a subject of casual debate. According to IBM, it is an absolute, non-negotiable design requirement for any modern enterprise architecture.

See also: Why companies like Apple are building AI agents with limits

Banner for AI & Big Data Expo by TechEx events.

Want to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events including the Cyber Security & Cloud Expo. Click here for more information.

AI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.

The post IBM: How robust AI governance protects enterprise margins appeared first on AI News.

  • ✇AI News
  • Microsoft open-source toolkit secures AI agents at runtime Ryan Daws
    A new open-source toolkit from Microsoft focuses on runtime security to force strict governance onto enterprise AI agents. The release tackles a growing anxiety: autonomous language models are now executing code and hitting corporate networks way faster than traditional policy controls can keep up. AI integration used to mean conversational interfaces and advisory copilots. Those systems had read-only access to specific datasets, keeping humans strictly in the execution loop. Organisations ar
     

Microsoft open-source toolkit secures AI agents at runtime

8 April 2026 at 18:23

A new open-source toolkit from Microsoft focuses on runtime security to force strict governance onto enterprise AI agents. The release tackles a growing anxiety: autonomous language models are now executing code and hitting corporate networks way faster than traditional policy controls can keep up.

AI integration used to mean conversational interfaces and advisory copilots. Those systems had read-only access to specific datasets, keeping humans strictly in the execution loop. Organisations are currently deploying agentic frameworks that take independent action, wiring these models directly into internal application programming interfaces, cloud storage repositories, and continuous integration pipelines.

When an autonomous agent can read an email, decide to write a script, and push that script to a server, stricter governance is vital. Static code analysis and pre-deployment vulnerability scanning just can’t handle the non-deterministic nature of large language models. One prompt injection attack (or even a basic hallucination) could send an agent to overwrite a database or pull out customer records.

Microsoft’s new toolkit looks at runtime security instead, providing a way to monitor, evaluate, and block actions at the moment the model tries to execute them. It beats relying on prior training or static parameter checks.

Intercepting the tool-calling layer in real time

Looking at the mechanics of agentic tool calling shows how this works. When an enterprise AI agent has to step outside its core neural network to do something like query an inventory system, it generates a command to hit an external tool.

Microsoft’s framework drops a policy enforcement engine right between the language model and the broader corporate network. Every time the agent tries to trigger an outside function, the toolkit grabs the request and checks the intended action against a central set of governance rules. If the action breaks policy (e.g. an agent authorised only to read inventory data tries to fire off a purchase order) the toolkit blocks the API call and logs the event so a human can review it.

Security teams get a verifiable, auditable trail of every single autonomous decision. Developers also win here; they can build complex multi-agent systems without having to hardcode security protocols into every individual model prompt. Security policies get decoupled from the core application logic entirely and are managed at the infrastructure level.

Most legacy systems were never built to talk to non-deterministic software. An old mainframe database or a customised enterprise resource planning suite doesn’t have native defenses against a machine learning model shooting over malformed requests. Microsoft’s toolkit steps in as a protective translation layer. Even if an underlying language model gets compromised by external inputs; the system’s perimeter holds.

Security leaders might wonder why Microsoft decided to release this runtime toolkit under an open-source license. It comes down to how modern software supply chains actually work.

Developers are currently rushing to build autonomous workflows using a massive mix of open-source libraries, frameworks, and third-party models. If Microsoft locked this runtime security feature to its proprietary platforms, development teams would probably just bypass it for faster, unvetted workarounds to hit their deadlines.

Pushing the toolkit out openly means security and governance controls can fit into any technology stack. It doesn’t matter if an organisation runs local open-weight models, leans on competitors like Anthropic, or deploys hybrid architectures.

Setting up an open standard for AI agent security also lets the wider cybersecurity community chip in. Security vendors can stack commercial dashboards and incident response integrations on top of this open foundation, which speeds up the maturity of the whole ecosystem. For businesses, they avoid vendor lock-in but still get a universally scrutinised security baseline.

The next phase of enterprise AI governance

Enterprise governance doesn’t just stop at security; it hits financial and operational oversight too. Autonomous agents run in a continuous loop of reasoning and execution, burning API tokens at every step. Startups and enterprises are already seeing token costs explode when they deploy agentic systems.

Without runtime governance, an agent tasked with looking up a market trend might decide to hit an expensive proprietary database thousands of times before it finishes. Left alone, a badly configured agent caught in a recursive loop can rack up massive cloud computing bills in a few hours.

The runtime toolkit gives teams a way to slap hard limits on token consumption and API call frequency. By setting boundaries on exactly how many actions an agent can take within a specific timeframe, forecasting computing costs gets much easier. It also stops runaway processes from eating up system resources.

A runtime governance layer hands over the quantitative metrics and control mechanisms needed to meet compliance mandates. The days of just trusting model providers to filter out bad outputs are ending. System safety now falls on the infrastructure that actually executes the models’ decisions

Getting a mature governance program off the ground is going to demand tight collaboration between development operations, legal, and security teams. Language models are only scaling up in capability, and the organisations putting strict runtime controls in place today are the only ones who will be equipped to handle the autonomous workflows of tomorrow.

See also: As AI agents take on more tasks, governance becomes a priority

Banner for AI & Big Data Expo by TechEx events.

Want to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events including the Cyber Security & Cloud Expo. Click here for more information.

AI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.

The post Microsoft open-source toolkit secures AI agents at runtime appeared first on AI News.

❌