The AI Control Plane Handbook
Toolkit contents

Appendix D

Sources

Superscript numbers in this toolkit refer to the shared endnote list in The AI Control Plane Handbook (Appendix B), so the handbook, the executive deck, the client deck and this toolkit cite sources the same way. The sources cited here are listed below with their handbook numbers. Vendor-authored sources are cited for product facts, not as independent validation.

  1. Chris Thomas, Parth Patwari, Ram Ravi, Oniel Cross, Diana Kearns-Manolatos, and Iram Parveen, “The next tech infrastructure advantage is intelligence orchestration,” Deloitte Insights, August 21, 2026 (based on more than 30 expert interviews conducted March–May 2026). https://www.deloitte.com/us/en/insights/topics/technology-management/enterprise-ai-control-plane.html Handbook endnote 1
  2. Salesforce, “Multi-agent adoption to surge 67% by 2027 as enterprises race toward agentic transformation — unified architecture key to success,” February 5, 2026 (2026 Connectivity Benchmark; survey of 1,050 IT leaders, October–November 2025). https://www.salesforce.com/news/stories/connectivity-report-announcement-2026/ Handbook endnote 2
  3. Gartner, “Gartner predicts over 40% of agentic AI projects will be canceled by end of 2027,” press release, June 25, 2025. https://www.gartner.com/en/newsroom/press-releases/2025-06-25-gartner-predicts-over-40-percent-of-agentic-ai-projects-will-be-canceled-by-end-of-2027 Handbook endnote 6
  4. Deloitte, “From ambition to activation: Organizations stand at the untapped edge of AI’s potential, reveals Deloitte survey,” press release, January 21, 2026 (State of AI in the Enterprise 2026; survey of 3,235 business and IT leaders in 24 countries, August–September 2025). https://www.deloitte.com/us/en/about/press-room/state-of-ai-report-2026.html Handbook endnote 7
  5. KPMG, “Investment and AI agent deployment surge as execution becomes the differentiator,” March 31, 2026 (AI Quarterly Pulse Survey, Q1 2026; 237 US leaders); “AI investment and agent deployment hold steady amid growing focus on pragmatism,” June 24, 2026 (Q2 2026; 204 US leaders); and “AI’s value story sharpens as organizations gain confidence in governance, accountability and workforce adoption,” September 24, 2026 (Q3 2026; 314 US leaders, July–August 2026). https://kpmg.com/us/en/media/news/q1-ai-pulse2026.html https://kpmg.com/us/en/media/news/q2-ai-pulse-2026.html https://kpmg.com/us/en/media/news/q3-ai-pulse-2026.html Handbook endnote 8
  6. Vasu Jakkal, “80% of Fortune 500 use active AI agents: Observability, governance, and security shape the new frontier,” Microsoft Security Blog, February 10, 2026 (Cyber Pulse, issue 1; Microsoft telemetry for November 2025 and a Microsoft-commissioned survey of more than 1,700 data security professionals, July 2025). https://www.microsoft.com/en-us/security/blog/2026/02/10/80-of-fortune-500-use-active-ai-agents-observability-governance-and-security-shape-the-new-frontier/ Handbook endnote 9
  7. Jessica Apotheker et al., “Are you generating value from AI? The widening gap,” Boston Consulting Group, September 30, 2025. https://www.bcg.com/publications/2025/are-you-generating-value-from-ai-the-widening-gap Handbook endnote 10
  8. Andy Packham, “Control planes: A strategic lens for enterprise platform decisions,” HCLTech, April 21, 2026. https://www.hcltech.com/blogs/enterprise-control-planes-platform-strategy Handbook endnote 11
  9. Microsoft, “Introducing the First Frontier Suite built on Intelligence + Trust,” Official Microsoft Blog, March 9, 2026; see also Microsoft, “What’s new in Microsoft Entra Agent ID,” Microsoft Learn, updated May 1, 2026, and Microsoft, “Microsoft Agent Framework overview,” Microsoft Learn, updated August 25, 2026. https://blogs.microsoft.com/blog/2026/03/09/introducing-the-first-frontier-suite-built-on-intelligence-trust/ https://learn.microsoft.com/en-us/entra/agent-id/whats-new-agent-id https://learn.microsoft.com/en-us/agent-framework/overview/ Handbook endnote 12
  10. Jim Rowan, Nitin Mittal, Parth Patwari, and Ed Burns, “The agentic reality check: Preparing for a silicon-based workforce,” Deloitte Insights (Tech Trends 2026), December 10, 2025. https://www.deloitte.com/us/en/insights/topics/technology-management/tech-trends/2026/agentic-ai-strategy.html Handbook endnote 13
  11. Microsoft, “Govern and secure AI agents across the organization,” Cloud Adoption Framework for Azure, Microsoft Learn, updated June 26, 2026. https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ai-agents/governance-security-across-organization Handbook endnote 14
  12. Tom Martin, Daniel Sack, Djon Kleine, Niels Degrande, and Nicolas de Bellefonds, “Put AI agents to work faster using MCP,” Boston Consulting Group, August 1, 2025. https://web-assets.bcg.com/pdf-src/prod-live/put-ai-to-work-faster-using-model-context-protocol.pdf Handbook endnote 18
  13. Bain & Company, “How to architect for agentic AI,” May 29, 2026; see also Eric Sheng, Roger Zhu, Brendan O’Rourke, Dale Pedzinski, and Kevin Zhang, “From roadmap to reality: Phasing agentic AI into production,” Bain & Company, April 14, 2026. https://www.bain.com/insights/how-to-architect-for-agentic-ai https://www.bain.com/insights/from-roadmap-to-reality-phasing-agentic-ai-into-production/ Handbook endnote 20
  14. MuleSoft, “Agent Fabric,” product page, accessed October 2026; see also the MuleSoft documentation pages “Agent Fabric release notes,” “Agent Scanners,” “Adding an MCP Bridge Instance,” “Creating and Managing Model Proxies” and “Detect and Contain Rogue Agents,” and MuleSoft, “AI Cost Management,” accessed October 2026. https://www.mulesoft.com/ai/agent-fabric https://docs.mulesoft.com/general/agent-fabric-release-notes https://docs.mulesoft.com/exchange/agent-scanners https://docs.mulesoft.com/api-manager/latest/create-instance-task-mcp-bridge https://docs.mulesoft.com/general/model-proxy https://docs.mulesoft.com/general/exp-detect-and-contain-rogue-agents https://www.mulesoft.com/ai/agent-fabric/cost-management Handbook endnote 21
  15. Hans Schabert and Prasanta Roy, “Economics for agentic AI on AWS,” AWS Prescriptive Guidance, accessed September 2026. https://docs.aws.amazon.com/prescriptive-guidance/latest/agentic-ai-economics/introduction.html Handbook endnote 22
  16. FinOps Foundation, “FinOps for AI,” FinOps Framework, accessed September 2026. https://www.finops.org/framework/technology-categories/ai/ Handbook endnote 23
  17. Model Context Protocol, specification (revision 2026-07-28), including “Authorization” for MCP servers and “Key changes” for that revision, Agentic AI Foundation (Linux Foundation). https://modelcontextprotocol.io/specification https://modelcontextprotocol.io/specification/2026-07-28/changelog Handbook endnote 26
  18. Agent2Agent (A2A) Protocol, specification and project repository, Agentic AI Foundation (Linux Foundation); version 1.0, March 2026; see also Agentic AI Foundation, “A2A joins AAIF’s open agentic stack,” August 17, 2026. https://github.com/a2aproject/A2A https://aaif.io/blog/a2a-joins-aaif Handbook endnote 27
  19. FIDO Alliance, “FIDO Alliance to develop standards for trusted AI agent interactions,” April 28, 2026. https://fidoalliance.org/fido-alliance-to-develop-standards-for-trusted-ai-agent-interactions/ Handbook endnote 28
  20. Chirag Agrawal, “AI governance strategy: A 12-month plan to build responsible, trusted AI autonomy,” CDO Magazine, May 14, 2026. https://www.cdomagazine.tech/opinion-analysis/ai-governance-strategy-a-12-month-plan-to-build-responsible-trusted-ai-autonomy Handbook endnote 29
  21. Regulation (EU) 2024/1689 (Artificial Intelligence Act), including Articles 9–15, 25–27 and 73 and Annex III, as amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI), under which the high-risk obligations apply from December 2, 2027 (Annex III systems) and August 2, 2028 (Annex I); see also Lewis Silkin, “The Digital Omnibus on AI enters into force today,” July 27, 2026. https://eur-lex.europa.eu/eli/reg/2024/1689/oj https://www.lewissilkin.com/insights/2026/07/27/the-digital-omnibus-on-ai-enters-into-force-today-102nedo Handbook endnote 32
  22. Aaron Brown and Matt Saner, “The agentic AI security scoping matrix: A framework for securing autonomous AI systems,” AWS Security Blog, November 21, 2025; see also Mark Ryland, Riggs Goodman III, and Todd MacDermid, “Four security principles for agentic AI systems,” AWS Security Blog, April 2, 2026. https://aws.amazon.com/blogs/security/the-agentic-ai-security-scoping-matrix-a-framework-for-securing-autonomous-ai-systems/ https://aws.amazon.com/blogs/security/four-security-principles-for-agentic-ai-systems/ Handbook endnote 33
  23. Mark Abraham and Neveen Awad, “The agentic leadership playbook: A scaling strategy for CTOs and CIOs,” Boston Consulting Group, July 8, 2026. https://web-assets.bcg.com/pdf-src/prod-live/agentic-ai-strategy-cio-cto.pdf Handbook endnote 34
  24. Bryan McGowan, Aisha Tahirkheli, Kartik Gupta, Kareem Sadek, Nana Amonoo Neizer, and Brad Wrobleski, “AI governance for the agentic AI era,” KPMG, 2025. https://kpmg.com/us/en/articles/2025/ai-governance-for-the-agentic-ai-era.html Handbook endnote 35
  25. Nenad Tomasev and Reshu Yadav, “How agents can delegate better,” Google Cloud Blog, August 21, 2026; see also Nenad Tomasev, Matija Franklin, and Simon Osindero, “Intelligent AI delegation,” arXiv:2602.11865, February 2026. https://cloud.google.com/blog/products/ai-machine-learning/how-agents-can-delegate-better https://arxiv.org/abs/2602.11865 Handbook endnote 36
  26. Microsoft AI Red Team, “Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us,” Microsoft Security Blog, June 4, 2026. https://www.microsoft.com/en-us/security/blog/2026/06/04/updating-taxonomy-failure-modes-agentic-ai-systems-year-red-teaming-taught-us/ Handbook endnote 37
  27. National Cybersecurity Center of Excellence, “Accelerating the adoption of software and artificial intelligence agent identity and authorization,” concept paper, National Institute of Standards and Technology, February 5, 2026. https://www.nist.gov/news-events/news/2026/02/new-concept-paper-identity-and-authority-software-agents Handbook endnote 45
  28. Pieter Kasselman, Jeff Lombardo, Yaroslav Rosomakho, Brian Campbell, Nick Steele, and Aaron Parecki, “AI Identity Management System,” IETF Internet-Draft draft-ietf-wimse-aims-00, September 15, 2026 (work in progress). https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/ Handbook endnote 46
  29. Kanchana Patlolla and Greg Brosman, “20 questions for the agentic enterprise (and how Agent Platform can help),” Google Cloud Blog, July 7, 2026. https://cloud.google.com/blog/products/ai-machine-learning/20-questions-for-the-agentic-enterprise Handbook endnote 47
  30. OWASP GenAI Security Project, “OWASP Top 10 for Agentic Applications: The benchmark for agentic security in the age of autonomous AI,” December 9, 2025. https://genai.owasp.org/2025/12/09/owasp-top-10-for-agentic-applications-the-benchmark-for-agentic-security-in-the-age-of-autonomous-ai/ Handbook endnote 48
  31. MITRE, ATLAS data release notes (CHANGELOG), versions 5.2.0 (December 24, 2025) to 2026.06 (June 30, 2026). https://github.com/mitre-atlas/atlas-data/blob/main/CHANGELOG.md Handbook endnote 49
  32. The White House, “Securing the Nation Against Advanced Cryptographic Attacks,” Executive Order 14412 of June 22, 2026, 91 Fed. Reg. 38483 (June 25, 2026); see also Olivia Radin, Ana B. Daily, and Ryan Jones, “Defend and advance: New executive orders mobilize a two-front federal quantum strategy,” King & Spalding, June 23, 2026. https://www.federalregister.gov/documents/2026/06/25/2026-12909/securing-the-nation-against-advanced-cryptographic-attacks https://www.whitehouse.gov/presidential-actions/2026/06/securing-the-nation-against-advanced-cryptographic-attacks/ https://www.kslaw.com/insights/articles/defend-and-advance-new-executive-orders-mobilize-a-two-front-federal-quantum-strategy Handbook endnote 51
  33. Benazir Fateh and Amy Liu, “The KPIs that actually matter for production AI agents,” Google Cloud, February 26, 2026. https://cloud.google.com/transform/the-kpis-that-actually-matter-for-production-ai-agents Handbook endnote 60
  34. Center for AI Standards and Innovation, “Insights into AI agent security from a large-scale red-teaming competition,” CAISI Research Blog, National Institute of Standards and Technology, March 23, 2026. https://www.nist.gov/blogs/caissi-research-blog/insights-ai-agent-security-large-scale-red-teaming-competition Handbook endnote 61
  35. Amazon Web Services, “What is Amazon Bedrock AgentCore?” and “Evaluate agent performance with Amazon Bedrock AgentCore Evaluations,” Amazon Bedrock AgentCore Developer Guide, accessed October 2026. https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/what-is-bedrock-agentcore.html https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/evaluations.html Handbook endnote 62
  36. Microsoft, “Responsible AI Transparency Report 2026,” covering July 2025 to June 2026. https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/msc/documents/presentations/CSR/Responsible-AI-Transparency-Report-2026.pdf Handbook endnote 63
  37. Anne Kleppe, Steven Mills, Noah Broestl, Grigor Acenov, Kirill Katsov, and Ning Yang, “What happens when AI stops asking permission?” Boston Consulting Group, December 2025. https://web-assets.bcg.com/34/47/519794794f2ba5d095088ccd36dd/what-happens-when-ai-stops-asking-permission-hybrid-dec-2025.pdf Handbook endnote 64
  38. University of Melbourne and KPMG, “Trust, attitudes and use of artificial intelligence: A global study 2025,” April 2025 (survey of more than 48,000 people in 47 countries). https://kpmg.com/sg/en/insights/ai-and-innovation/trust-attitudes-and-use-of-ai.html Handbook endnote 65
  39. ISO/IEC 42001:2023, “Information technology — Artificial intelligence — Management system,” December 2023; and ISO/IEC 42005:2025, “Information technology — Artificial intelligence (AI) — AI system impact assessment,” May 2025. https://www.iso.org/standard/42005 Handbook endnote 72
  40. National Institute of Standards and Technology, “Artificial Intelligence Risk Management Framework (AI RMF 1.0),” NIST AI 100-1, January 26, 2023; see also “Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile,” NIST AI 600-1, July 26, 2024. https://www.nist.gov/itl/ai-risk-management-framework https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf Handbook endnote 73
  41. Cloud Security Alliance, “AI Controls Matrix (AICM) v1.1,” June 22, 2026. https://cloudsecurityalliance.org/artifacts/ai-controls-matrix-v1-1 Handbook endnote 74
  42. Ministry of Digital Development and Information (Singapore), “Singapore launches new Model AI Governance Framework for Agentic AI,” January 22, 2026 (framework developed by the Infocomm Media Development Authority). https://www.mddi.gov.sg/newsroom/singapore-launches-new-model-ai-governance-framework-for-agentic-ai--/ Handbook endnote 75
  43. Amazon Web Services, “Agentic AI Lens,” AWS Well-Architected Framework, June 10, 2026. https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentic-ai-lens.html Handbook endnote 76
  44. Informatica, “Informatica from Salesforce: Trusted context for agents,” accessed September 2026; see also Informatica, “New features and enhancements,” Informatica MCP servers, What’s New, April 2026 (Address Verification, CDGC Metadata Search and other MCP servers). https://www.informatica.com/salesforce.html https://onlinehelp.informatica.com/IICS/prod/agentic-ui/en/aa-aiae-mcp-whats-new/New_features_and_enhancements_2.html Handbook endnote 77
  45. MuleSoft, “Omni Gateway Policy Development Kit (PDK)” and “Omni Gateway agent policies,” product documentation, accessed September 2026. https://docs.mulesoft.com/pdk/latest/policies-pdk-develop-custom-policies https://docs.mulesoft.com/gateway/latest/agent-policies Handbook endnote 78
  46. PwC, “CEO confidence in revenue outlook hits five-year low – as AI becomes a defining divide between leaders and laggards: PwC 2026 Global CEO Survey,” press release, January 19, 2026 (survey of 4,454 CEOs in 95 countries and territories). https://www.pwc.com/gx/en/news-room/press-releases/2026/pwc-2026-global-ceo-survey.html Handbook endnote 79
  47. Dan Tinkoff, Lieven Van der Veken, and Michael Chui, with Tara Balakrishnan, “The state of AI in 2026: On the road to ROI,” McKinsey & Company, August 25, 2026 (survey of 1,719 participants, May–June 2026). https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai Handbook endnote 80
  48. Aditya Challapally, Chris Pease, Ramesh Raskar, and Pradyumna Chari, “The GenAI Divide: State of AI in Business 2025,” MIT NANDA, July 2025. https://mlq.ai/media/quarterly_decks/v0.1_State_of_AI_in_Business_2025_Report.pdf Handbook endnote 81
  49. Deloitte, “AI ROI: The paradox of rising investment and elusive returns,” 2025 (survey of 1,854 executives in Europe and the Middle East, August–September 2025). https://www.deloitte.com/global/en/what-we-do/capabilities/ai/research/ai-roi-the-paradox-of-rising-investment-and-elusive-returns.html Handbook endnote 82
  50. KPMG International, “KPMG 2025 Global CEO Outlook,” October 2025 (survey of 1,350 CEOs, August 5 to September 10, 2025). https://kpmg.com/kz/en/insights/2025/10/kpmg-2025-ceo-outlook.html Handbook endnote 83
  51. Oliver Parker, “How AI ROI leaders prioritize investments for real business outcomes,” Google Cloud, July 27, 2026 (survey of 2,403 executives by National Research Group). https://cloud.google.com/transform/ai-roi-report-token-efficiency-agentic-ai-ownership-workflows-fluency Handbook endnote 84
  52. Nina Kataeva, Vinciane Beauchene, Christoph Hilberath, Kevin Kelley, and Sophie Strelczyk, “Design your company for AI, not AI for your company,” Boston Consulting Group, April 23, 2026. https://www.bcg.com/publications/2026/design-your-company-for-ai-not-ai-for-your-company Handbook endnote 85
  53. Microsoft WorkLab, “2026 Work Trend Index report: Agents, human agency, and the opportunity for every organization,” May 5, 2026 (survey of 20,000 people using AI at work in 10 countries, with Microsoft 365 productivity signals). https://www.microsoft.com/en-us/worklab/work-trend-index/agents-human-agency-and-the-opportunity-for-every-organization Handbook endnote 86
  54. Sue Cantrell, Stephen Harrington, Nicole Scoble-Williams, Kevin Moss, and Russell Klosk, “Orchestrating for agility,” Deloitte Insights (2026 Global Human Capital Trends), March 4, 2026. https://www.deloitte.com/global/en/insights/topics/talent/human-capital-trends/2026/orchestrating-for-agility.html Handbook endnote 87
  55. Vinciane Beauchene, Sylvain Duranton, David Martin, Vanessa Lyon, and Jeff Walters, “AI at work: Why strategy matters more than tools,” Boston Consulting Group, June 2, 2026 (survey of close to 12,000 employees, managers and leaders). https://www.bcg.com/publications/2026/ai-at-work-why-strategy-matters-more-than-tools Handbook endnote 88
  56. US Securities and Exchange Commission, Regulation S-X Rule 2-01, “Qualifications of accountants” (auditor independence), 17 CFR 210.2-01. https://www.ecfr.gov/current/title-17/chapter-II/part-210/subject-group-ECFR2f5dcb24c1c571e/section-210.2-01 Handbook endnote 89
  57. Scott Rose, Oliver Borchert, Stu Mitchell, and Sean Connelly, “Zero Trust Architecture,” NIST Special Publication 800-207, August 2020. https://csrc.nist.gov/pubs/sp/800/207/final Handbook endnote 90
  58. SPIFFE: Secure Production Identity Framework for Everyone, Cloud Native Computing Foundation. https://spiffe.io Handbook endnote 91
  59. Michael B. Jones et al., “OAuth 2.0 Token Exchange,” IETF RFC 8693, January 2020. https://www.rfc-editor.org/rfc/rfc8693 Handbook endnote 92
  60. OWASP GenAI Security Project, “Top 10 for LLM Applications 2026,” August 3, 2026. https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/ Handbook endnote 93
  61. OpenTelemetry, “Semantic conventions for generative AI systems” (development status), semantic-conventions-genai repository, accessed September 2026. https://github.com/open-telemetry/semantic-conventions-genai Handbook endnote 94