The AI Control Plane Handbook
Contents

Appendix B

Endnotes

Numbered in order of first citation. The companion deck uses the same numbering for endnotes 1–88, and endnotes 89 onward support the reference use cases in Sections 11 to 13. Links are provided where a public copy was located. Vendor-authored and sponsored sources are cited for product facts and framing, not as independent validation.

  1. Chris Thomas, Parth Patwari, Ram Ravi, Oniel Cross, Diana Kearns-Manolatos, and Iram Parveen, “The next tech infrastructure advantage is intelligence orchestration,” Deloitte Insights, August 21, 2026 (based on more than 30 expert interviews conducted March–May 2026). https://www.deloitte.com/us/en/insights/topics/technology-management/enterprise-ai-control-plane.htmlCited in Executive summary, Section 1, Section 2, Section 3, Section 4, Section 5, Section 6, Section 8, Appendix A
  2. Salesforce, “Multi-agent adoption to surge 67% by 2027 as enterprises race toward agentic transformation — unified architecture key to success,” February 5, 2026 (2026 Connectivity Benchmark; survey of 1,050 IT leaders, October–November 2025). https://www.salesforce.com/news/stories/connectivity-report-announcement-2026/Cited in Executive summary, Section 1, Section 3, Section 6
  3. Harsha Kotikela, “Agentic AI at scale can break your infrastructure before it transforms your business,” Forbes (Nutanix BrandVoice), July 1, 2026. https://www.forbes.com/sites/nutanix/2026/07/01/agentic-ai-at-scale-can-break-your-infrastructure-before-it-transforms-your-business/Cited in Section 1
  4. Sayantani Mazumder, China Widener, Gillian Crossan, Girija Krishnamurthy, Baris Sarer, and Diana Kearns-Manolatos, “Unlocking exponential value with AI agent orchestration,” Deloitte Insights (Technology, Media & Telecommunications Predictions 2026), November 18, 2025. https://www.deloitte.com/us/en/insights/industry/technology/technology-media-and-telecom-predictions/2026/ai-agent-orchestration.htmlCited in Section 1
  5. Ryan Yeager, “Agentic transformation reaches new heights: 2026 Connectivity Benchmark Report insights,” MuleSoft Blog, February 5, 2026. https://blogs.mulesoft.com/agentic-perspectives/connectivity-benchmark-report/Cited in Section 1, Section 4, Section 6
  6. Gartner, “Gartner predicts over 40% of agentic AI projects will be canceled by end of 2027,” press release, June 25, 2025. https://www.gartner.com/en/newsroom/press-releases/2025-06-25-gartner-predicts-over-40-percent-of-agentic-ai-projects-will-be-canceled-by-end-of-2027Cited in Section 1, Section 6, Section 8
  7. Deloitte, “From ambition to activation: Organizations stand at the untapped edge of AI’s potential, reveals Deloitte survey,” press release, January 21, 2026 (State of AI in the Enterprise 2026; survey of 3,235 business and IT leaders in 24 countries, August–September 2025). https://www.deloitte.com/us/en/about/press-room/state-of-ai-report-2026.htmlCited in Section 1
  8. KPMG, “Investment and AI agent deployment surge as execution becomes the differentiator,” March 31, 2026 (AI Quarterly Pulse Survey, Q1 2026; 237 US leaders); “AI investment and agent deployment hold steady amid growing focus on pragmatism,” June 24, 2026 (Q2 2026; 204 US leaders); and “AI’s value story sharpens as organizations gain confidence in governance, accountability and workforce adoption,” September 24, 2026 (Q3 2026; 314 US leaders, July–August 2026). https://kpmg.com/us/en/media/news/q1-ai-pulse2026.html https://kpmg.com/us/en/media/news/q2-ai-pulse-2026.html https://kpmg.com/us/en/media/news/q3-ai-pulse-2026.htmlCited in Section 1, Section 4, Section 5
  9. Vasu Jakkal, “80% of Fortune 500 use active AI agents: Observability, governance, and security shape the new frontier,” Microsoft Security Blog, February 10, 2026 (Cyber Pulse, issue 1; Microsoft telemetry for November 2025 and a Microsoft-commissioned survey of more than 1,700 data security professionals, July 2025). https://www.microsoft.com/en-us/security/blog/2026/02/10/80-of-fortune-500-use-active-ai-agents-observability-governance-and-security-shape-the-new-frontier/Cited in Section 1
  10. Jessica Apotheker et al., “Are you generating value from AI? The widening gap,” Boston Consulting Group, September 30, 2025. https://www.bcg.com/publications/2025/are-you-generating-value-from-ai-the-widening-gapCited in Section 1
  11. Andy Packham, “Control planes: A strategic lens for enterprise platform decisions,” HCLTech, April 21, 2026. https://www.hcltech.com/blogs/enterprise-control-planes-platform-strategyCited in Section 2, Section 6
  12. Microsoft, “Introducing the First Frontier Suite built on Intelligence + Trust,” Official Microsoft Blog, March 9, 2026; see also Microsoft, “What’s new in Microsoft Entra Agent ID,” Microsoft Learn, updated May 1, 2026, and Microsoft, “Microsoft Agent Framework overview,” Microsoft Learn, updated August 25, 2026. https://blogs.microsoft.com/blog/2026/03/09/introducing-the-first-frontier-suite-built-on-intelligence-trust/ https://learn.microsoft.com/en-us/entra/agent-id/whats-new-agent-id https://learn.microsoft.com/en-us/agent-framework/overview/Cited in Section 2, Section 5, Section 7
  13. Jim Rowan, Nitin Mittal, Parth Patwari, and Ed Burns, “The agentic reality check: Preparing for a silicon-based workforce,” Deloitte Insights (Tech Trends 2026), December 10, 2025. https://www.deloitte.com/us/en/insights/topics/technology-management/tech-trends/2026/agentic-ai-strategy.htmlCited in Section 2
  14. Microsoft, “Govern and secure AI agents across the organization,” Cloud Adoption Framework for Azure, Microsoft Learn, updated June 26, 2026. https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ai-agents/governance-security-across-organizationCited in Section 2, Section 4, Section 6, Section 7
  15. Ram Ravi and Jagjeet Gill, “Horizon architecture: Enterprise architecture strategy,” Deloitte, July 1, 2026. https://www.deloitte.com/us/en/services/consulting/articles/enterprise-business-strategy-architecture.htmlCited in Section 3, Section 6
  16. Salesforce, “Get Started,” Hosted MCP Servers, Salesforce Developers documentation, accessed October 2026. https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/hosted-mcp-servers-overview.htmlCited in Section 3
  17. Siva Muthu, Anantha Ramadas, Jayanta Ghosh, and Harshad Deshpande, “Preparing digital channels for agentic AI evolution,” Deloitte, May 5, 2026. https://www.deloitte.com/us/en/services/consulting/articles/executive-framework-for-ai-capability-assessment.htmlCited in Section 3
  18. Tom Martin, Daniel Sack, Djon Kleine, Niels Degrande, and Nicolas de Bellefonds, “Put AI agents to work faster using MCP,” Boston Consulting Group, August 1, 2025. https://web-assets.bcg.com/pdf-src/prod-live/put-ai-to-work-faster-using-model-context-protocol.pdfCited in Section 3, Section 5
  19. Ram Ravi et al., “Architecting the agentic enterprise,” Deloitte, 2026 (no public copy; cited in the source at endnote 1).Cited in Section 3
  20. Bain & Company, “How to architect for agentic AI,” May 29, 2026; see also Eric Sheng, Roger Zhu, Brendan O’Rourke, Dale Pedzinski, and Kevin Zhang, “From roadmap to reality: Phasing agentic AI into production,” Bain & Company, April 14, 2026. https://www.bain.com/insights/how-to-architect-for-agentic-ai https://www.bain.com/insights/from-roadmap-to-reality-phasing-agentic-ai-into-production/Cited in Section 3, Section 6, Section 8, Appendix A
  21. MuleSoft, “Agent Fabric,” product page, accessed October 2026; see also the MuleSoft documentation pages “Agent Fabric release notes,” “Agent Scanners,” “Adding an MCP Bridge Instance,” “Creating and Managing Model Proxies” and “Detect and Contain Rogue Agents,” and MuleSoft, “AI Cost Management,” accessed October 2026. https://www.mulesoft.com/ai/agent-fabric https://docs.mulesoft.com/general/agent-fabric-release-notes https://docs.mulesoft.com/exchange/agent-scanners https://docs.mulesoft.com/api-manager/latest/create-instance-task-mcp-bridge https://docs.mulesoft.com/general/model-proxy https://docs.mulesoft.com/general/exp-detect-and-contain-rogue-agents https://www.mulesoft.com/ai/agent-fabric/cost-managementCited in Section 3, Section 4, Section 5, Section 7, Section 11, Section 12, Section 13
  22. Hans Schabert and Prasanta Roy, “Economics for agentic AI on AWS,” AWS Prescriptive Guidance, accessed September 2026. https://docs.aws.amazon.com/prescriptive-guidance/latest/agentic-ai-economics/introduction.htmlCited in Section 4
  23. FinOps Foundation, “FinOps for AI,” FinOps Framework, accessed September 2026. https://www.finops.org/framework/technology-categories/ai/Cited in Section 4
  24. Pedro Lopez, “What is AI agent context management?” Airbyte, March 10, 2026. https://airbyte.com/agentic-data/agent-context-managementCited in Section 4
  25. MCP Mesh contributors, “mcp-mesh: Build distributed AI agents with auto-discovery, dependency injection, and LLM integration,” PyPI, accessed August 14, 2026. https://pypi.org/project/mcp-mesh/Cited in Section 4
  26. Model Context Protocol, specification (revision 2026-07-28), including “Authorization” for MCP servers and “Key changes” for that revision, Agentic AI Foundation (Linux Foundation). https://modelcontextprotocol.io/specification https://modelcontextprotocol.io/specification/2026-07-28/changelogCited in Section 4, Section 7, Section 11, Section 12, Section 13
  27. Agent2Agent (A2A) Protocol, specification and project repository, Agentic AI Foundation (Linux Foundation); version 1.0, March 2026; see also Agentic AI Foundation, “A2A joins AAIF’s open agentic stack,” August 17, 2026. https://github.com/a2aproject/A2A https://aaif.io/blog/a2a-joins-aaifCited in Section 4, Section 7, Section 11, Section 12, Section 13
  28. FIDO Alliance, “FIDO Alliance to develop standards for trusted AI agent interactions,” April 28, 2026. https://fidoalliance.org/fido-alliance-to-develop-standards-for-trusted-ai-agent-interactions/Cited in Section 4, Section 7
  29. Chirag Agrawal, “AI governance strategy: A 12-month plan to build responsible, trusted AI autonomy,” CDO Magazine, May 14, 2026. https://www.cdomagazine.tech/opinion-analysis/ai-governance-strategy-a-12-month-plan-to-build-responsible-trusted-ai-autonomyCited in Section 4, Section 8, Section 9
  30. Ben Green, “The flaws of policies requiring human oversight of government algorithms,” Computer Law & Security Review 45 (2022). https://arxiv.org/abs/2109.05067Cited in Section 4
  31. Sarah Sterz, Kevin Baum, Sebastian Biewer, Holger Hermanns, Anne Lauber-Rönsberg, Philip Meinel, and Markus Langer, “On the quest for effectiveness in human oversight: Interdisciplinary perspectives,” ACM Conference on Fairness, Accountability, and Transparency (FAccT ’24), June 2024. https://arxiv.org/abs/2404.04059Cited in Section 4
  32. Regulation (EU) 2024/1689 (Artificial Intelligence Act), including Articles 9–15, 25–27 and 73 and Annex III, as amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI), under which the high-risk obligations apply from December 2, 2027 (Annex III systems) and August 2, 2028 (Annex I); see also Lewis Silkin, “The Digital Omnibus on AI enters into force today,” July 27, 2026. https://eur-lex.europa.eu/eli/reg/2024/1689/oj https://www.lewissilkin.com/insights/2026/07/27/the-digital-omnibus-on-ai-enters-into-force-today-102nedoCited in Section 4, Section 5, Section 7, Appendix C
  33. Aaron Brown and Matt Saner, “The agentic AI security scoping matrix: A framework for securing autonomous AI systems,” AWS Security Blog, November 21, 2025; see also Mark Ryland, Riggs Goodman III, and Todd MacDermid, “Four security principles for agentic AI systems,” AWS Security Blog, April 2, 2026. https://aws.amazon.com/blogs/security/the-agentic-ai-security-scoping-matrix-a-framework-for-securing-autonomous-ai-systems/ https://aws.amazon.com/blogs/security/four-security-principles-for-agentic-ai-systems/Cited in Section 4
  34. Mark Abraham and Neveen Awad, “The agentic leadership playbook: A scaling strategy for CTOs and CIOs,” Boston Consulting Group, July 8, 2026. https://web-assets.bcg.com/pdf-src/prod-live/agentic-ai-strategy-cio-cto.pdfCited in Section 4
  35. Bryan McGowan, Aisha Tahirkheli, Kartik Gupta, Kareem Sadek, Nana Amonoo Neizer, and Brad Wrobleski, “AI governance for the agentic AI era,” KPMG, 2025. https://kpmg.com/us/en/articles/2025/ai-governance-for-the-agentic-ai-era.htmlCited in Section 4
  36. Nenad Tomasev and Reshu Yadav, “How agents can delegate better,” Google Cloud Blog, August 21, 2026; see also Nenad Tomasev, Matija Franklin, and Simon Osindero, “Intelligent AI delegation,” arXiv:2602.11865, February 2026. https://cloud.google.com/blog/products/ai-machine-learning/how-agents-can-delegate-better https://arxiv.org/abs/2602.11865Cited in Section 4
  37. Microsoft AI Red Team, “Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us,” Microsoft Security Blog, June 4, 2026. https://www.microsoft.com/en-us/security/blog/2026/06/04/updating-taxonomy-failure-modes-agentic-ai-systems-year-red-teaming-taught-us/Cited in Section 4, Section 5
  38. Deloitte, “The Global Future of Cyber Survey, 5th edition: 5 paradoxes shaping the future of cyber,” April 2026 (1,058 leaders in 43 countries, surveyed in late 2025). https://www.deloitte.com/global/en/services/consulting-risk/research/global-future-of-cyber.html https://www.deloitte.com/content/dam/assets-shared/docs/services/consulting/2026/future-of-cyber-survey-report-5th-edition.pdfCited in Section 5
  39. Kieran Norton, Tim Li, Tim Davis, Emily Mossburg, Diana Kearns-Manolatos, and Saurabh Bansode, “How can tech leaders manage emerging generative AI risks today while keeping the future in mind?” Deloitte Insights, February 20, 2025. https://www.deloitte.com/us/en/insights/topics/digital-transformation/four-emerging-categories-of-gen-ai-risks.htmlCited in Section 5
  40. World Economic Forum with Accenture, “Global Cybersecurity Outlook 2026,” January 12, 2026. https://www.weforum.org/publications/global-cybersecurity-outlook-2026/Cited in Section 5, Appendix A
  41. Abhishek A. Hemrajani, “What’s new in IAM: Security, governance, and runtime defense,” Google Cloud, May 6, 2026. https://cloud.google.com/blog/products/identity-security/whats-new-in-iam-security-governance-and-runtime-defenseCited in Section 5
  42. Shuva Jyoti Kar, “The temporal identity paradox: Architecting zero-trust for long-running data agents on ephemeral compute,” Google Cloud – Community (Medium), June 26, 2026. https://medium.com/google-cloud/zero-trust-iam-agentic-ai-architecture-3f30aa94c281Cited in Section 5
  43. T. Devon Artis, “AI agent identity is being solved backwards and the window to fix it is now,” Cloud Security Alliance, May 8, 2026. https://cloudsecurityalliance.org/blog/2026/05/08/ai-agent-identity-is-being-solved-backwards-and-the-window-to-fix-it-is-nowCited in Section 5, Appendix A
  44. Microsoft, “Microsoft Digital Defense Report 2025,” October 2025. https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/Microsoft-Digital-Defense-Report-2025.pdfCited in Section 5
  45. National Cybersecurity Center of Excellence, “Accelerating the adoption of software and artificial intelligence agent identity and authorization,” concept paper, National Institute of Standards and Technology, February 5, 2026. https://www.nist.gov/news-events/news/2026/02/new-concept-paper-identity-and-authority-software-agentsCited in Section 5
  46. Pieter Kasselman, Jeff Lombardo, Yaroslav Rosomakho, Brian Campbell, Nick Steele, and Aaron Parecki, “AI Identity Management System,” IETF Internet-Draft draft-ietf-wimse-aims-00, September 15, 2026 (work in progress). https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/Cited in Section 5
  47. Kanchana Patlolla and Greg Brosman, “20 questions for the agentic enterprise (and how Agent Platform can help),” Google Cloud Blog, July 7, 2026. https://cloud.google.com/blog/products/ai-machine-learning/20-questions-for-the-agentic-enterpriseCited in Section 5, Section 6, Section 7
  48. OWASP GenAI Security Project, “OWASP Top 10 for Agentic Applications: The benchmark for agentic security in the age of autonomous AI,” December 9, 2025. https://genai.owasp.org/2025/12/09/owasp-top-10-for-agentic-applications-the-benchmark-for-agentic-security-in-the-age-of-autonomous-ai/Cited in Section 5
  49. MITRE, ATLAS data release notes (CHANGELOG), versions 5.2.0 (December 24, 2025) to 2026.06 (June 30, 2026). https://github.com/mitre-atlas/atlas-data/blob/main/CHANGELOG.mdCited in Section 5
  50. Russell T. Vought, “Execution of the Migration to Post-Quantum Cryptography,” Office of Management and Budget Memorandum M-26-15, June 24, 2026. https://www.whitehouse.gov/wp-content/uploads/2026/06/M-26-15-Execution-of-the-Migration-to-Post-Quantum-Cryptography.pdfCited in Section 5
  51. The White House, “Securing the Nation Against Advanced Cryptographic Attacks,” Executive Order 14412 of June 22, 2026, 91 Fed. Reg. 38483 (June 25, 2026); see also Olivia Radin, Ana B. Daily, and Ryan Jones, “Defend and advance: New executive orders mobilize a two-front federal quantum strategy,” King & Spalding, June 23, 2026. https://www.federalregister.gov/documents/2026/06/25/2026-12909/securing-the-nation-against-advanced-cryptographic-attacks https://www.whitehouse.gov/presidential-actions/2026/06/securing-the-nation-against-advanced-cryptographic-attacks/ https://www.kslaw.com/insights/articles/defend-and-advance-new-executive-orders-mobilize-a-two-front-federal-quantum-strategyCited in Section 5, Section 7
  52. Sharon Goldberg and Vincent Voci, “The White House’s post-quantum executive order is an important milestone. It’s time to get to work,” Cloudflare, June 23, 2026. https://blog.cloudflare.com/post-quantum-eo-2026Cited in Section 5
  53. SecureW2, “The post-quantum cryptography executive order: What this new deadline actually requires,” June 24, 2026. https://securew2.com/signal/the-post-quantum-cryptography-executive-order-what-this-new-deadline-actually-requiresCited in Section 5
  54. Dustin Volz, “Anthropic AI model finds flaws in tough-to-crack encryption algorithms,” The New York Times, July 28, 2026. https://www.nytimes.com/2026/07/28/us/politics/anthropic-ai-encryption-security-aes.htmlCited in Section 5
  55. Anthropic, “Discovering cryptographic weaknesses with Claude,” July 28, 2026; see also Matt Swayne, “AI finds new weaknesses in cryptographic algorithms, Anthropic says,” The Quantum Insider, July 29, 2026. https://www.anthropic.com/research/discovering-cryptographic-weaknesses https://thequantuminsider.com/2026/07/29/ai-finds-new-weaknesses-in-cryptographic-algorithms-anthropic-says/Cited in Section 5
  56. Patrick Lee and Aaron Kemp, “Prepare now for quantum cyber risk,” Directorship (online exclusive), National Association of Corporate Directors, April 17, 2026. https://www.nacdonline.org/all-governance/governance-resources/directorship-magazine/online-exclusives/2026/q2-2026/quantum-cyber-risk/Cited in Section 5
  57. Gregory Touhill and Larry Clinton, “Board discussion guide on quantum computing,” Director’s Handbook on Cyber-Risk Oversight, National Association of Corporate Directors and Internet Security Alliance, 2026. https://isalliance.org/wp-content/uploads/2026/06/2026_Directors-Handbook-Cyber-Risk_QuantumComputing.pdfCited in Section 5
  58. James Delbridge, Val Srinivas, and Shivalik Srivastav, “How AI-native banking products could reshape institutional banking,” Deloitte Insights, May 20, 2026. https://www.deloitte.com/us/en/insights/industry/financial-services/financial-services-industry-predictions/2026/ai-native-products-institutional-banking.htmlCited in Section 5
  59. Shaina Raza, Ranjan Sapkota, Manoj Karkee, and Christos Emmanouilidis, “TRiSM for agentic AI: A review of trust, risk, and security management in LLM-based agentic multi-agent systems,” AI Open 7 (2026): 71–95, published online March 2, 2026. https://doi.org/10.1016/j.aiopen.2026.02.006Cited in Section 5
  60. Benazir Fateh and Amy Liu, “The KPIs that actually matter for production AI agents,” Google Cloud, February 26, 2026. https://cloud.google.com/transform/the-kpis-that-actually-matter-for-production-ai-agentsCited in Section 5, Section 9
  61. Center for AI Standards and Innovation, “Insights into AI agent security from a large-scale red-teaming competition,” CAISI Research Blog, National Institute of Standards and Technology, March 23, 2026. https://www.nist.gov/blogs/caissi-research-blog/insights-ai-agent-security-large-scale-red-teaming-competitionCited in Section 5
  62. Amazon Web Services, “What is Amazon Bedrock AgentCore?” and “Evaluate agent performance with Amazon Bedrock AgentCore Evaluations,” Amazon Bedrock AgentCore Developer Guide, accessed October 2026. https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/what-is-bedrock-agentcore.html https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/evaluations.htmlCited in Section 5, Section 7
  63. Microsoft, “Responsible AI Transparency Report 2026,” covering July 2025 to June 2026. https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/Responsible-AI-Transparency-Report-2026.pdfCited in Section 5
  64. Anne Kleppe, Steven Mills, Noah Broestl, Grigor Acenov, Kirill Katsov, and Ning Yang, “What happens when AI stops asking permission?” Boston Consulting Group, December 2025. https://web-assets.bcg.com/34/47/519794794f2ba5d095088ccd36dd/what-happens-when-ai-stops-asking-permission-hybrid-dec-2025.pdfCited in Section 5
  65. University of Melbourne and KPMG, “Trust, attitudes and use of artificial intelligence: A global study 2025,” April 2025 (survey of more than 48,000 people in 47 countries). https://kpmg.com/sg/en/insights/ai-and-innovation/trust-attitudes-and-use-of-ai.htmlCited in Section 5
  66. International Electrotechnical Commission, IEC 61511-1:2016+AMD1:2017, “Functional safety – Safety instrumented systems for the process industry sector – Part 1: Framework, definitions, system, hardware and application programming requirements,” August 2017. https://webstore.iec.ch/en/publication/61289Cited in Section 5, Section 13
  67. Cybersecurity and Infrastructure Security Agency, Australian Signals Directorate’s Australian Cyber Security Centre and partner agencies, “Principles for the secure integration of artificial intelligence in operational technology,” joint guidance, December 2025. https://www.cyber.gov.au/sites/default/files/2025-12/principles-for-the-secure-integration-of-artificial-intelligence-in-operational-technology.pdfCited in Section 5, Section 13
  68. International Society of Automation and International Electrotechnical Commission, ISA/IEC 62443 series of standards for the security of industrial automation and control systems. https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standardsCited in Section 5, Section 13
  69. Keith Stouffer, Michael Pease, CheeYee Tang, Timothy Zimmerman, Victoria Pillitteri, Suzanne Lightman, Adam Hahn, Stephanie Saravia, Aslam Sherule, and Michael Thompson, “Guide to Operational Technology (OT) Security,” NIST Special Publication 800-82 Rev. 3, September 2023. https://csrc.nist.gov/pubs/sp/800/82/r3/finalCited in Section 5, Section 13
  70. Amy Chang and Vineeth Sai Narajala, “Personal AI agents like OpenClaw are a security nightmare,” Cisco Blogs, January 28, 2026; see also Maria Korolov, “What CISOs need to know about the OpenClaw security nightmare,” CSO Online, February 12, 2026. https://blogs.cisco.com/ai/personal-ai-agents-like-openclaw-are-a-security-nightmare https://www.csoonline.com/article/4129867/what-cisos-need-to-know-about-clawdbot-i-mean-moltbot-i-mean-openclaw.htmlCited in Section 5
  71. Sergey Malenkovich, “OpenClaw proved high-agency AI works. Now enterprises need a security strategy, not a ban,” Adversa AI, March 20, 2026. https://adversa.ai/blog/openclaw-enterprise-security-strategy/Cited in Section 5
  72. ISO/IEC 42001:2023, “Information technology — Artificial intelligence — Management system,” December 2023; and ISO/IEC 42005:2025, “Information technology — Artificial intelligence (AI) — AI system impact assessment,” May 2025. https://www.iso.org/standard/42005Cited in Section 5, Appendix C
  73. National Institute of Standards and Technology, “Artificial Intelligence Risk Management Framework (AI RMF 1.0),” NIST AI 100-1, January 26, 2023; see also “Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile,” NIST AI 600-1, July 26, 2024. https://www.nist.gov/itl/ai-risk-management-framework https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdfCited in Section 5, Appendix C
  74. Cloud Security Alliance, “AI Controls Matrix (AICM) v1.1,” June 22, 2026. https://cloudsecurityalliance.org/artifacts/ai-controls-matrix-v1-1Cited in Section 5, Appendix C
  75. Ministry of Digital Development and Information (Singapore), “Singapore launches new Model AI Governance Framework for Agentic AI,” January 22, 2026 (framework developed by the Infocomm Media Development Authority). https://www.mddi.gov.sg/newsroom/singapore-launches-new-model-ai-governance-framework-for-agentic-ai--/Cited in Section 5, Appendix C
  76. Amazon Web Services, “Agentic AI Lens,” AWS Well-Architected Framework, June 10, 2026. https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentic-ai-lens.htmlCited in Section 6
  77. Informatica, “Informatica from Salesforce: Trusted context for agents,” accessed September 2026; see also Informatica, “New features and enhancements,” Informatica MCP servers, What’s New, April 2026 (Address Verification, CDGC Metadata Search and other MCP servers). https://www.informatica.com/salesforce.html https://onlinehelp.informatica.com/IICS/prod/agentic-ui/en/aa-aiae-mcp-whats-new/New_features_and_enhancements_2.htmlCited in Section 7, Section 11, Section 12, Section 13
  78. MuleSoft, “Omni Gateway Policy Development Kit (PDK)” and “Omni Gateway agent policies,” product documentation, accessed September 2026. https://docs.mulesoft.com/pdk/latest/policies-pdk-develop-custom-policies https://docs.mulesoft.com/gateway/latest/agent-policiesCited in Section 7, Section 11, Section 12, Section 13
  79. PwC, “CEO confidence in revenue outlook hits five-year low – as AI becomes a defining divide between leaders and laggards: PwC 2026 Global CEO Survey,” press release, January 19, 2026 (survey of 4,454 CEOs in 95 countries and territories). https://www.pwc.com/gx/en/news-room/press-releases/2026/pwc-2026-global-ceo-survey.htmlCited in Section 8
  80. Dan Tinkoff, Lieven Van der Veken, and Michael Chui, with Tara Balakrishnan, “The state of AI in 2026: On the road to ROI,” McKinsey & Company, August 25, 2026 (survey of 1,719 participants, May–June 2026). https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-aiCited in Section 8
  81. Aditya Challapally, Chris Pease, Ramesh Raskar, and Pradyumna Chari, “The GenAI Divide: State of AI in Business 2025,” MIT NANDA, July 2025. https://mlq.ai/media/quarterly_decks/v0.1_State_of_AI_in_Business_2025_Report.pdfCited in Section 8
  82. Deloitte, “AI ROI: The paradox of rising investment and elusive returns,” 2025 (survey of 1,854 executives in Europe and the Middle East, August–September 2025). https://www.deloitte.com/global/en/what-we-do/capabilities/ai/research/ai-roi-the-paradox-of-rising-investment-and-elusive-returns.htmlCited in Section 8
  83. KPMG International, “KPMG 2025 Global CEO Outlook,” October 2025 (survey of 1,350 CEOs, August 5 to September 10, 2025). https://kpmg.com/kz/en/insights/2025/10/kpmg-2025-ceo-outlook.htmlCited in Section 8
  84. Oliver Parker, “How AI ROI leaders prioritize investments for real business outcomes,” Google Cloud, July 27, 2026 (survey of 2,403 executives by National Research Group). https://cloud.google.com/transform/ai-roi-report-token-efficiency-agentic-ai-ownership-workflows-fluencyCited in Section 8
  85. Nina Kataeva, Vinciane Beauchene, Christoph Hilberath, Kevin Kelley, and Sophie Strelczyk, “Design your company for AI, not AI for your company,” Boston Consulting Group, April 23, 2026. https://www.bcg.com/publications/2026/design-your-company-for-ai-not-ai-for-your-companyCited in Section 8
  86. Microsoft WorkLab, “2026 Work Trend Index report: Agents, human agency, and the opportunity for every organization,” May 5, 2026 (survey of 20,000 people using AI at work in 10 countries, with Microsoft 365 productivity signals). https://www.microsoft.com/en-us/worklab/work-trend-index/agents-human-agency-and-the-opportunity-for-every-organizationCited in Section 8
  87. Sue Cantrell, Stephen Harrington, Nicole Scoble-Williams, Kevin Moss, and Russell Klosk, “Orchestrating for agility,” Deloitte Insights (2026 Global Human Capital Trends), March 4, 2026. https://www.deloitte.com/global/en/insights/topics/talent/human-capital-trends/2026/orchestrating-for-agility.htmlCited in Section 8
  88. Vinciane Beauchene, Sylvain Duranton, David Martin, Vanessa Lyon, and Jeff Walters, “AI at work: Why strategy matters more than tools,” Boston Consulting Group, June 2, 2026 (survey of close to 12,000 employees, managers and leaders). https://www.bcg.com/publications/2026/ai-at-work-why-strategy-matters-more-than-toolsCited in Section 9
  89. US Securities and Exchange Commission, Regulation S-X Rule 2-01, “Qualifications of accountants” (auditor independence), 17 CFR 210.2-01. https://www.ecfr.gov/current/title-17/chapter-II/part-210/subject-group-ECFR2f5dcb24c1c571e/section-210.2-01Cited in Section 11
  90. Scott Rose, Oliver Borchert, Stu Mitchell, and Sean Connelly, “Zero Trust Architecture,” NIST Special Publication 800-207, August 2020. https://csrc.nist.gov/pubs/sp/800/207/finalCited in Section 11, Section 12, Section 13
  91. SPIFFE: Secure Production Identity Framework for Everyone, Cloud Native Computing Foundation. https://spiffe.ioCited in Section 11, Section 12, Section 13
  92. Michael B. Jones et al., “OAuth 2.0 Token Exchange,” IETF RFC 8693, January 2020. https://www.rfc-editor.org/rfc/rfc8693Cited in Section 11, Section 12, Section 13
  93. OWASP GenAI Security Project, “Top 10 for LLM Applications 2026,” August 3, 2026. https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/Cited in Section 11, Section 12, Section 13
  94. OpenTelemetry, “Semantic conventions for generative AI systems” (development status), semantic-conventions-genai repository, accessed September 2026. https://github.com/open-telemetry/semantic-conventions-genaiCited in Section 11, Section 12, Section 13
  95. US Securities and Exchange Commission, “SEC finalizes rules to reduce risks in clearance and settlement,” press release 2023-29, February 15, 2023. https://www.sec.gov/newsroom/press-releases/2023-29Cited in Section 12
  96. Jesus Benito, “Post-trade providers take charge of settlement discipline,” SIX, February 26, 2025. https://www.six-group.com/en/newsroom/news/securities-services/2025/post-trade-providers-take-charge-of-settlement-discipline.htmlCited in Section 12
  97. Natalie Berkecz and Gillian Turato, “T+1 UK and Europe: The work starts now,” Northern Trust, July 1, 2025. https://www.northerntrust.com/africa/insights-research/2025/asset-servicing/t1-uk-and-europe-the-work-starts-nowCited in Section 12
  98. Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA), applicable from January 17, 2025. https://eur-lex.europa.eu/eli/reg/2022/2554/ojCited in Section 12
  99. Matt Johnson, “Navigating T+1 in Europe: Comparing UK & EU roadmaps,” DTCC, August 6, 2025. https://www.dtcc.com/dtcc-connection/articles/2025/august/06/navigating-t1-in-europe-comparing-uk-eu-roadmapsCited in Section 12
  100. ISO 20022, universal financial industry message scheme. https://www.iso20022.orgCited in Section 12
  101. EDM Council, Financial Industry Business Ontology (FIBO). https://spec.edmcouncil.org/fibo/Cited in Section 12
  102. FINOS, Common Domain Model (CDM). https://www.finos.org/common-domain-modelCited in Section 12
  103. Basel Committee on Banking Supervision, “Principles for effective risk data aggregation and risk reporting” (BCBS 239), January 2013. https://www.bis.org/publications/201301-guidelines-principles-effective-risk-data-aggregation-and-risk-reportingCited in Section 12
  104. US Securities and Exchange Commission, Rule 17a-4, “Records to be preserved by certain exchange members, brokers and dealers,” 17 CFR 240.17a-4. https://www.ecfr.gov/current/title-17/section-240.17a-4Cited in Section 12
  105. US Pipeline and Hazardous Materials Safety Administration, 49 CFR 192.631, “Control room management.” https://www.ecfr.gov/current/title-49/subtitle-B/chapter-I/subchapter-D/part-192/subpart-L/section-192.631Cited in Section 13
  106. Transportation Security Administration, Security Directive Pipeline-2021-02F, “Pipeline cybersecurity mitigation actions, contingency planning, and testing,” May 3, 2025. https://www.tsa.gov/sd-and-eaCited in Section 13
  107. US Pipeline and Hazardous Materials Safety Administration, 49 CFR Part 192, Subpart N, “Qualification of pipeline personnel.” https://www.ecfr.gov/current/title-49/subtitle-B/chapter-I/subchapter-D/part-192/subpart-NCited in Section 13