GovernanceCore

POLICY & MARKETS DESK · FRIDAY, OCTOBER 16, 2026

LiveEU AI Act enforcement begins is now in force
MCP Server Governance: Who Approved the Tools Your Agents Can Call?
Technical Controls & AssuranceLead story

MCP Server Governance: Who Approved the Tools Your Agents Can Call?

Model inventories record systems. They do not record the tool servers those systems act through, the credentials those servers hold, or the text that tells the model what to do with them. This guide covers what an MCP server is in governance terms, why the tool description is the control surface, what the 2026 disclosures actually showed, and how tool access engages ISO/IEC 42001, the NIST AI RMF and the EU AI Act.

October 16, 2026 · 11 min read

Market Research

Governance is turning into a market of its own

Spending is moving from one-off audits toward continuous monitoring bought as software. The numbers below track how fast the discipline is scaling, and how much room is left to run.

$0.31B
2025
→
$5.88B
2035 projected
$5.88B
projected AI governance market by 2035
Precedence Research
~34%
compound annual growth rate to 2035
Precedence Research
88%
of organizations now use AI in a business function
McKinsey, 2025
51%
report at least one negative AI incident
McKinsey, 2025
Regulation & standards tracker
FrameworkJurisdictionTypeStatusKey milestone
EU AI ActEuropean UnionBinding regulationEnforcingCore obligations from Aug 2, 2026
NIST AI RMFUnited StatesVoluntary frameworkActiveGenerative AI Profile added 2024
ISO/IEC 42001GlobalManagement standardCertifiableAI management system, published 2023
GPAI Code of PracticeEuropean UnionVoluntary guidanceIn usePresumption of conformity for signatories
Governance toolsAll tools →

Free, always-on trackers for the people accountable for AI risk — live countdowns, incident feeds and enforcement data, in one place.

Live countdown

Regulatory Deadline Board

290days

until EU AI Act: high-risk rules for regulated products

Open tool→
Auto-updating hourly

AI Incident Monitor

0this week

52 recent AI incidents tracked — bias, privacy, safety, deepfake fraud and more.

Open tool→
Auto-updating hourly

Enforcement Tracker

€6075.4M

in AI-related fines across 40 actions and 22 authorities — and counting.

Open tool→
Sourced index

Shadow AI Risk Index

98%

of organizations have employees using unsanctioned AI tools — shadow AI is effectively universal.

Open tool→
Interactive classifier

EU AI Act Risk Classifier

Open tool→
Interactive calculator

AI Act Penalty Calculator

Open tool→
Coming soon

Framework Crosswalk

A side-by-side mapping between the EU AI Act, NIST AI RMF and ISO/IEC 42001 — so a control you already run for one shows what it satisfies in the others. In build.

Coming soon
Explore by topic
013 articles

AI Governance Fundamentals

Foundational concepts, principles, and frameworks for AI governance.

023 articles

Accountability & Oversight

Governance structures, policy development, compliance management, and board-level oversight.

034 articles

AI Risk Management

Technical, operational, compliance, and reputational risk identification and mitigation.

045 articles

Regulations & Compliance

AI laws, regulations, and standards worldwide: the EU AI Act, US state laws, NIST AI RMF, ISO 42001, and how to comply.

052 articles

Tools & Platforms

Buyer's guides, platform comparisons, and reviews of the tools that operationalize AI governance, monitoring, and compliance.

064 articles

Technical Controls & Assurance

Testing, red-teaming, bias auditing, validation, and the technical assurance work that proves an AI system does what it should.

072 articles

Roles & Operating Model

How to structure AI governance: committees, roles and responsibilities, operating models, and the people who run them.

083 articles

Industry & Sector Governance

Sector-specific AI governance for financial services, healthcare, the public sector, and other regulated industries.

More from the desk
Bias Auditing and Fairness Testing: A Practical Method

Bias Auditing and Fairness Testing: A Practical Method

August 10, 2026 · 15 min read

AI Governance in the Public Sector

AI Governance in the Public Sector

August 7, 2026 · 14 min read

AI Governance in Healthcare: Clinical AI, Devices, and Oversight

AI Governance in Healthcare: Clinical AI, Devices, and Oversight

August 5, 2026 · 14 min read

Third-Party and AI Vendor Risk Assessment

Third-Party and AI Vendor Risk Assessment

August 3, 2026 · 14 min read

AI Incident Response and Reporting

AI Incident Response and Reporting

July 31, 2026 · 14 min read

Building an AI Governance Operating Model

Building an AI Governance Operating Model

July 29, 2026 · 13 min read

AI Governance in Financial Services

AI Governance in Financial Services

July 17, 2026 · 12 min read

AI Red-Teaming and Model Testing: A Practical Method

AI Red-Teaming and Model Testing: A Practical Method

July 17, 2026 · 12 min read

EU AI Act vs NIST AI RMF vs ISO 42001: A Plain-English Comparison

EU AI Act vs NIST AI RMF vs ISO 42001: A Plain-English Comparison

July 13, 2026 · 13 min read

Shadow AI: The Systems You Do Not Know You Run

Shadow AI: The Systems You Do Not Know You Run

July 13, 2026 · 11 min read

EU AI Act Timeline: Every Compliance Deadline from 2025 to 2028

EU AI Act Timeline: Every Compliance Deadline from 2025 to 2028

July 13, 2026 · 9 min read

Choosing an AI Governance Platform: What to Evaluate

Choosing an AI Governance Platform: What to Evaluate

July 13, 2026 · 13 min read

How to Build an AI Model Inventory (and Why It's Step One)

How to Build an AI Model Inventory (and Why It's Step One)

July 13, 2026 · 11 min read

The NIST AI Risk Management Framework: How It Works

The NIST AI Risk Management Framework: How It Works

July 13, 2026 · 13 min read

Agentic AI Governance: A Framework for Autonomous Agents

Agentic AI Governance: A Framework for Autonomous Agents

July 13, 2026 · 13 min read

Generative AI Usage Policy: A Template for Employees

Generative AI Usage Policy: A Template for Employees

July 13, 2026 · 10 min read

ISO/IEC 42001 Explained: The AI Management System Standard

ISO/IEC 42001 Explained: The AI Management System Standard

July 13, 2026 · 13 min read

The EU AI Act, Explained

The EU AI Act, Explained

July 12, 2026 · 14 min read

AI Governance vs AI Ethics vs AI Safety vs Responsible AI: What's the Difference

AI Governance vs AI Ethics vs AI Safety vs Responsible AI: What's the Difference

July 12, 2026 · 11 min read

AI Governance Glossary: 50+ Terms, Defined

AI Governance Glossary: 50+ Terms, Defined

July 12, 2026 · 16 min read

AI Governance: What It Is and What It Requires

AI Governance: What It Is and What It Requires

July 11, 2026 · 19 min read

Building an AI Governance Framework

Building an AI Governance Framework

July 11, 2026 · 14 min read

AI Governance in Practice: Market, Challenges and Direction

AI Governance in Practice: Market, Challenges and Direction

July 11, 2026 · 12 min read