CN Clifton Nexus Consulting SAP practice →
Agent Governance

Microsoft shipped the controls.
It didn't ship the rules.

Agent 365 gives you a registry, lifecycle management, approval flows and shadow-agent detection. It does not decide who approves a finance agent versus an HR one, at which risk tier, on what evidence, or how often that decision is revisited.

That part is an operating model. It has to be designed.

Two things happened this year

The gap is not a technology problem. The platform arrived faster than the rules. Almost nobody built the governance before the agents — which is normal, and is exactly why the operating model now has to catch up.

Start with thirteen questions

A two-page checklist covering ownership, inventory, scope, authorisation and lifecycle. Score one point per question you can answer with evidence rather than intention.

Most organisations answer four to six. If you score twelve or thirteen you are ahead of almost every organisation of your size, and you should ignore the rest of this page.

Free. No form, no email required — it is more useful to you if you can forward it round your team without anyone filling anything in.

Or work through it with me

A structured 60-minute review of your agent estate against all thirteen points, scored live on the call. You will not get a sales pitch and you will not get a flattering score.

Agent Governance Readiness Review

€200
  • 60 minutes, scored against all thirteen points
  • A written three-page findings note within 48 hours
  • Your three highest-risk gaps, named specifically
  • What closing each one actually involves

If you do not think it was worth it, say so and I will refund it. No discussion.

Is this for you?

Probably yes

  • 200–2,000 employees
  • Microsoft 365 Copilot deployed
  • Agents being built in Copilot Studio, including by business users
  • EU or UK, so Article 50 applies to you
  • Nobody owns agent governance yet, or one person owns it alongside three other jobs

Probably not

  • You have a named AI governance lead already in post
  • You have not yet deployed agents — come back when you have
  • You want someone to build agents for you. I design the rules, not the agents
  • You want a compliance certificate. This is an operating model, not an attestation

Why me

Agents are new. Governing complex, multi-party technology estates is not, and that is the discipline this actually requires: risk tiering, approval authority, review cadence, accountability that survives someone leaving.

Clifton Nexus has spent thirteen years doing exactly that on enterprise programmes — establishing governance frameworks, running independent quality assurance, and giving client leadership the standing to challenge and steer delivery partners.

Relevant credentials include SAP's Designing Agentic Systems with a Human-Centered Approach and Provisioning and Implementing Joule, SAP Certified Associate – Project Manager (SAP Activate), and Google Cloud Generative AI Leader.

Full case studies and certifications →