Shadow AI Governance & Policy for Safe Agent Deployment: Program AnnouncedOctober 22, 2026 at 09:09 AM EDT
ⓘ This article is third-party content and does not represent the views of this site. We make no guarantees regarding its accuracy or completeness.
Matthew Mathison has announced the Krista Foundation, a 90-day AI governance and policy program built for executives at mid-sized companies whose employees are already using AI without oversight. Salt Lake City, United States, October 22, 2026 -- Matthew Mathison has announced the Krista Foundation, a 90-day program designed to establish AI governance and policy, train employees, and build a company knowledge record before organizations activate AI agents. The program targets executives at 100-to-500-person, knowledge-intensive businesses, drawing directly on Mathison’s own experience running AI implementation at MBL Partners and its portfolio companies. More information is available at https://www.matthewmathison.com/resources/krista-foundation The program addresses a pattern Mathison observed firsthand and that research increasingly confirms: employees at companies of all sizes are using personal AI tools at work without IT knowledge or approval, a practice commonly referred to as shadow AI. According to IBM’s Cost of a Data Breach Report 2026, shadow AI was involved in 43% of security incidents that year, up from 20% the prior year, according to the same report. The unsanctioned use of these tools can expose proprietary data, create compliance gaps, and expand an organization’s attack surface beyond its managed tech stack. Mathison notes that this pattern creates value for individual employees while leaving the organization to carry the risk, often without any internally kept record. When agents are layered on top of that environment, they inherit whatever governance exists underneath, so unmanaged use does not stay contained. It compounds, and it does so quickly. The program follows a fixed 90-day sequence: policy and employee training are established within the first 14 days, giving the organization a standard to enforce and a trained workforce before anything else moves forward. A company knowledge record then begins in week three, capturing decisions and context that would otherwise live only in individual employees’ heads. Mathison emphasizes that the policy is structured for enforcement rather than filed as a document nobody reads. Enforcement runs through platform settings, a shared permission model, and an audit trail, ensuring that the policy governs what actually happens inside the organization’s systems and creating a documented record of AI activity over time. The program is designed for organizations with 100 to 500 people whose calendars run on Microsoft 365 or Google Workspace. The first cohort is limited to non-regulated data. By day 30, participating companies also receive a weekly leadership brief: a three-minute summary of what was decided, which commitments remain open, and where risks stand. Executives can learn more about how the 90 days unfold and whether the program fits their organization at https://www.matthewmathison.com/ Contact Info: Source: NewsNetwork Release ID: 89207012 In the event of detecting errors, concerns, or irregularities in the content shared in this press release that require attention or if there is a need for a press release takedown, we kindly request that you inform us promptly by contacting error@releasecontact.com (it is important to note that this email is the authorized channel for such matters, sending multiple emails to multiple addresses does not necessarily help expedite your request). Our dedicated team will promptly address your feedback within 8 hours and take necessary actions to resolve any identified issues diligently or guide you through the removal process. Providing accurate and dependable information is our utmost priority.
Report this content
If you believe this article contains misleading, harmful, or spam content, please let us know. Report this articleMore NewsView MoreVia MarketBeat
Via MarketBeat
Tickers
RAPP
Via MarketBeat
Odyssey Therapeutics Highlights OD-001 Phase IIa UC Data, Sets 2027 Trial Readouts ↗
Today 12:02 EDT
Via MarketBeat
Tickers
ODTX
Via MarketBeat
Tickers
ALB
Recent QuotesView More
Stock Quote API & Stock News API supplied by www.cloudquote.io
Quotes delayed at least 20 minutes. By accessing this page, you agree to the Privacy Policy and Terms Of Service.
© 2025 FinancialContent. All rights reserved.
|