Show Notes
AI agents are entering enterprise AI faster than CIOs can govern them. Line-of-business users are vibe-coding their own tools, agents are operating with employee credentials, and foundation models are changing under running systems. In CXOTalk episode 919, Anthony Scriffignano, PhD, a prominent data scientist, and Tim Crawford, a strategic advisor to CIOs at the world's largest companies, examine what enterprise AI governance, shadow AI, and agentic risk require of technology leaders today. The discussion grounds the AI agent conversation in practical decisions: what to keep from established IT governance, what is genuinely new, and where the CIO role must evolve. YOU'LL LEARN: ✅ Why traditional regression testing breaks when foundation models, training data, and environments all change at once ✅ How shadow AI and vibe-coding by non-developers expand the threat paradigm beyond the enterprise perimeter ✅ Why HR-style policies do not transfer to AI agents, and what changes when super-agents call sub-agents through an orchestration layer ✅ Specific controls for shadow AI: sandboxes, token counting, personal Identifying Information (PII) guardrails, and watching for value leaving the organization ✅ Red, blue, and green teaming for autonomous agents, including why red teams need a defined target list, not a license to break things ✅ The three governance layers CIOs must now reconcile: user role-based access controls (RBAC), agent governance, and knowledge governance, across ServiceNow, Salesforce, and SAP ✅ When human in the loop is meaningful and when it becomes theater, including the limits of audited-sample review at machine speed ✅ How the transformational CIO mindset differs from the traditional one, and why business depth is now the prerequisite skill ⏱️ TIMESTAMPS 0:00 AI agents are running wild: framing the problem 3:11 From automation to autonomy: how CIOs should reframe risk 5:21 What old governance disciplines still apply, and what is new 6:12 Shadow AI, vibe coding, and the limits of control 9:11 Practical controls: sandboxes, token counting, PII guardrails 11:53 Why HR policies do not work for AI agents 15:24 Regression testing for misuse and misadventure 18:43 The aspiring CIO: traditional vs. transformational mindset 21:07 Disciplined red, blue, and green teaming 23:30 When mandatory automation becomes the only option 32:03 Human in the loop: meaningful or theater? 34:09 What AI governance actually looks like in practice 38:10 New roles: context engineers, AI FinOps, and value frameworks 40:30 Talent and jobs inside IT: what changes
🔔 Subscribe for weekly conversations with the world's top business and technology leaders. 📩 Get the CXOTalk newsletter: https://newsletter.cxotalk.com 💬 Read the show notes: https://www.cxotalk.com/episode/cio-playbook-agentic-ai-in-the-enterprise 🎙️ ABOUT CXOTALK CXOTalk features unfiltered conversations with C-suite executives from major companies about AI, digital transformation, and business strategy. Hosted by Michael Krigsman. Episode 919 #cxotalk #ShadowAI #AIAgents #AIGovernance #AgenticAI #CIO #EnterpriseAI #DigitalTransformation #AIRisk #CIOLeadership
More from CXOTalk
Check out Gartner Symposium: https://cxo.news/KGg8XY === Tamar Yehoshua is Chief Product and AI Officer at Atlassian, where AI agents are now direct users of the software her team builds. She led product at Google Search and Slack before joining Atlassian, and in this conversation she explains how the company designs products for both people and agents: the teamwork graph that gives an agent the organizational context it arrives without, who stays accountable when a chain of agents goes wrong, how Atlassian measures AI spending with its CFO, and why she never believed agents would kill SaaS.
Check out Gartner Symposium: https://cxo.news/KGg8XY ======== More than 90% of the code at Snap is now written by AI agents, and a code review agent checks most of it within ten minutes. Saral Jain, SVP, Head of Engineering and CIO at Snap Inc., built the system that makes that safe for nearly a billion monthly users. He explains the golden path of 14 managed agents, the guardrails that account for more than half of the investment, and why accountability still rests with a named human for every change that ships.
Enterprise AI has moved past experimentation and now has to prove its return. Ed Sim, Founder and General Partner of boldstart ventures, ranked the No. 1 seed investor in the Business Insider Seed 100 two years running, sees hundreds of AI startup pitches a year, and writes the first check into companies enterprises buy from years later. He wrote the first check into Snyk and backed Protect AI, which Palo Alto Networks acquired for more than $700 million.
Most enterprise AI pilots stall or fail before production, and the blocker is rarely the model.
Are AI agents ready for banking and financial services? Former UBS Group CIO Oliver Bussmann explains the risks to trust and reputation in banking.