Agent owner RACI template
In short: This template is a RACI matrix for AI agents. It sets who is responsible, accountable, consulted and informed for each governance activity, from registration and purpose to approval, review, incidents and board reporting. The agent owner is accountable for most rows, and security runs the shared machinery.
Download Agent owner RACI (CSV)
What is in the template?
| Activity | Control | Agent owner | Security | Platform team | Legal and privacy | Risk committee |
|---|---|---|---|---|---|---|
| Register the agent | GOV-01 | A | C | R | I | I |
| Write the purpose statement | GOV-03 | A | C | R | C | I |
| Set initial access | GOV-04 | A | C | R | I | I |
| Approve high-risk actions | GOV-07 | A | C | I | I | I |
| Change permissions or tools | GOV-20 | A | C | R | I | I |
| Quarterly access review | GOV-15 | A | R | C | I | I |
| Find shadow agents | GOV-16 | I | A | R | I | I |
| Run the kill switch | GOV-11 | I | A | R | I | I |
| Respond to an agent incident | GOV-19 | C | A | R | C | I |
| Decommission the agent | GOV-12 | A | C | R | I | I |
| Onboard a third-party agent | GOV-21 | A | C | R | C | I |
| Keep evidence | GOV-23 | I | A | R | C | I |
| Report to the board | GOV-24 | I | R | C | C | A |
Which controls does it support?
- GOV-01Agent inventory
- GOV-03Documented purpose
- GOV-04Least privilege at creation
- GOV-07Human approval for high-risk actions
- GOV-11Revocation and kill switch
- GOV-12Decommission at task end
- GOV-15Periodic access review
- GOV-16Shadow agent detection
- GOV-19Agent incident response
- GOV-20Change management for agent permissions
- GOV-21Third-party agent onboarding
- GOV-23Evidence retention
- GOV-24Board reporting
Reviewed by The Register desk