Govern Microsoft 365 AI agents — with evidence, not guesswork
79 controls, 316 playbooks, 4 pillars, 6 regulatory frameworks — operationalized for Copilot Studio and Agent Builder in US financial-services organizations.
What do you need to do today?
-
New to agent governance?
Confirm this framework fits your situation, orient to zones and controls, and take your first concrete action — in about 10 minutes.
-
Prepare for an exam or audit
Map controls to FINRA, SEC, SOX, GLBA, and OCC/Fed expectations, and build examination-ready evidence with the audit-readiness checklist.
-
Find or deploy a specific control
Filter all 79 controls by pillar, zone, regulation, role, and automation in the interactive Control Explorer — then jump straight to the implementation playbooks.
-
Assess your tenant's readiness
Run the readiness assessment to see where your organization stands against all 79 controls and identify which to prioritize — runs entirely in your browser, nothing uploaded.
Who this is for
- Enterprise architects defining agent operating patterns
- Governance & risk teams establishing control coverage
- Power Platform & M365 admins deploying and verifying controls
- Compliance officers & examiners reviewing readiness and evidence
This framework is intended for regulated environments where agent behavior, connector usage, publishing decisions, and operational evidence need to be governed with more rigor than a generic AI rollout — and where being able to show your work matters as much as doing it.
Explore the framework
Browse the control catalog Read the executive summary
Disclaimer
This framework is provided for informational purposes only and does not constitute legal, regulatory, or compliance advice. Organizations should consult with their legal counsel and compliance teams. See Disclaimer for full details.
FSI Agent Governance Framework v1.6.2 - May 2026