Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

Ivanti: Closing the AI Governance Gap with Brooke Johnson

Ivanti
07/21/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


and sort of even more than a tool, it's an experience for employees and people right now. You know, there's a lot of excitement around it. There's a lot of excitement around what it can do and how it's going to be changing our lives and the workforce. And so there are some employees who want to run really fast. And I think part of the struggle with compliance, those of us who work in compliance function always have, is making sure that we're doing it safely and we're doing it correctly. And so there's just, I think, a natural tension there, right, with how exciting AI is and how it is so revolutionary, but also, you know, needing to make sure that we're getting our arms around how it can be used responsibly, appropriately, and securely. Only one out of four employees report consistent policy adherence, which really, I think, highlights the disconnect there between, you know, when you're ruling out policies and what the actual adoption is. So, you know, one thing is that governance can't be something that comes after an AI tool. It's already being used. It's already been integrated in someone's workday and workflow. One potential cause of the gap and the impact would be shadow AI use. So shadow AI is when you have employees out there in the company using AI, using IT, AI tools without supervision, right, from the right departments. And so, you know, again, you know, there's an employee who has an agent that has been very effective in helping them, you know, respond to emails quickly in their personal life. So they want to bring that into the company and they, you know, give an agent authority to send emails on their behalf. And that's, you know, without the right, you know, first of all, it hasn't been checked against policies. There's no one supervising it. Maybe that, you know, that agent decides to, you know, send an email, a nasty email to the CEO. I mean, that's just, that's a very benign example. But I think, you know, the impact of shadow AI is something that we can all imagine. But from a policy perspective, it is a very strict breach of any kind of governance and policy and process that the organization has put in place. And it is something that's very serious and a big risk. Yeah, and at Avanti, we, as part of our governance, we do talk about managing AI the way we manage employees. And I think that's a really responsible way to think about it because it's like, don't, you wouldn't trust a human to do all this. Don't trust this tool that also needs to have some kind of human oversight and control. So IT organizations are successfully scaling AI by aligning their work with the business value. So a really good way to sort of get your arms around that is to have conversations, start with the executive team and senior leadership and discuss, you know, what AI actually means to the company. We did that at Avanti. We made some commitments to AI, both internally with our employees and externally. And from that, as sort of like the baseline of discussions here about AI, we built the AI Governance Council. That is a cross-functional team because AI is not one team's responsibility. It's not one individual's responsibility, really, because it's something that's changing our lives. It's changing our industry. It's changing our business.

TL;DR

  • Only 1 in 4 employees report consistent AI policy adherence, revealing a significant gap between governance intent and actual organizational behavior.
  • Shadow AI — employees using unsanctioned AI tools without IT or compliance oversight — poses serious security and policy breach risks that organizations must actively detect and manage.
  • Effective AI governance must be established before tools are deployed; retrofitting policies after adoption creates compounding compliance and security exposure.
  • Ivanti built a cross-functional AI Governance Council anchored in executive alignment, treating AI oversight as a shared organizational responsibility rather than a single team's mandate.

Summary

In this short-form segment from Ivanti's 'Scaling AI in IT Operations: The Path to Maturity in 2026' research series, Brooke Johnson — Ivanti's Chief Legal Counsel and SVP of HR and Security — addresses the widening gap between AI policy creation and real-world employee compliance. Drawing on research showing that only one in four employees report consistent AI policy adherence, Johnson frames the core challenge as a natural tension between employee enthusiasm for AI's transformative potential and the organizational need to govern its use responsibly. She introduces the concept of shadow AI — employees deploying unsanctioned AI tools or agents without oversight from IT or compliance functions — and explains why this represents a serious security and governance risk, not merely a policy technicality. Johnson argues that governance frameworks must be established before AI tools are deployed, not retrofitted after adoption has already occurred. She describes how Ivanti addressed this internally by anchoring AI commitments at the executive level and establishing a cross-functional AI Governance Council, emphasizing that responsible AI at scale is a shared organizational responsibility rather than the domain of any single team or individual.

Chapters

0:00 - AI Excitement vs. Compliance Tension
0:47 - The Policy Adherence Gap
1:09 - Shadow AI Risks Explained
2:12 - Ivanti's Governance Council Model

Key Quotes

0:47 "Only one out of four employees report consistent policy adherence, which really, I think, highlights the disconnect there between, you know, when you're ruling out policies and what the actual adoption is."
1:02 "Governance can't be something that comes after an AI tool. It's already being used. It's already been integrated in someone's Workday and workflow."
2:01 "It is a very strict breach of any kind of governance and policy and process that the organization has put in place. And it is something that's very serious and a big risk."
2:14 "We do talk about managing AI the way we manage employees. And I think that's a really responsible way to think about it because it's like, don't trust a human to do all this. Don't trust this tool that also needs to have some kind of human oversight and control."

FAQ

What is shadow AI and why is it a risk?

Shadow AI refers to employees using AI tools or agents without authorization or oversight from IT and compliance teams. According to Brooke Johnson, this is a serious governance breach because such tools haven't been vetted against company policies, lack supervision, and can take consequential actions — like sending communications on an employee's behalf — without appropriate controls in place.

How did Ivanti structure its AI governance approach?

Ivanti began by aligning AI commitments at the executive and senior leadership level, then built a cross-functional AI Governance Council. The model reflects the view that AI governance is not one team's responsibility — it affects the entire organization and requires coordinated oversight across functions.


Categories:
  • » Webinar Library » Ivanti
  • » Data Protection
Channels:
News:
Events:
Tags:
  • AI & Machine Learning
  • Compliance & Governance
  • Security Operations
  • Thought Leadership
  • Executive Briefing
  • AI governance
  • Shadow AI
  • AI policy compliance
  • Enterprise AI adoption
  • Cross-functional governance
  • AI risk management
  • IT operations
  • Human oversight of AI
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Ivanti: Closing the AI Governance Gap with Brooke Johnson

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Oct
                  27

                  Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action

                  10/27/202611:00 AM ET
                  • Oct
                    28

                    EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                    10/28/202601:00 PM ET
                    • Nov
                      12

                      Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

                      11/12/202601:00 PM ET
                      More events

                      Industry Events (Sponsor Hosted)

                      • Oct
                        20

                        Master Data Governance for AI with Cyera and Snowflake Insights

                        10/20/202611:00 AM ET
                        • Oct
                          27

                          Maximize Security, Value, and Profit from Your Microsoft Investment

                          10/27/202611:00 AM ET
                          • Oct
                            27

                            The HUMAN Experience: Real-Time Insights into Page Intelligence

                            10/27/202601:00 PM ET
                            • Oct
                              28

                              Ensuring AI Security Across the APAC Region

                              10/28/202601:00 AM ET
                              • Oct
                                28

                                EMEA: Ensuring Comprehensive AI Security Across All Platforms

                                10/28/202606:00 AM ET
                                More events

                                Upcoming Webinar Calendar

                                • 10/20/2026
                                  11:00 AM
                                  10/20/2026
                                  Master Data Governance for AI with Cyera and Snowflake Insights
                                  https://www.truthinit.com/index.php/channel/2137/master-data-governance-for-ai-with-cyera-and-snowflake-insights/
                                • 10/27/2026
                                  11:00 AM
                                  10/27/2026
                                  Maximize Security, Value, and Profit from Your Microsoft Investment
                                  https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-profit-from-your-microsoft-investment/
                                • 10/27/2026
                                  11:00 AM
                                  10/27/2026
                                  Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action
                                  https://www.truthinit.com/index.php/channel/2182/see-it-stop-it-contain-it-lateral-movement-defense-in-action/
                                • 10/27/2026
                                  01:00 PM
                                  10/27/2026
                                  The HUMAN Experience: Real-Time Insights into Page Intelligence
                                  https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                                • 10/28/2026
                                  01:00 AM
                                  10/28/2026
                                  Ensuring AI Security Across the APAC Region
                                  https://www.truthinit.com/index.php/channel/2125/ensuring-ai-security-across-the-apac-region/
                                • 10/28/2026
                                  06:00 AM
                                  10/28/2026
                                  EMEA: Ensuring Comprehensive AI Security Across All Platforms
                                  https://www.truthinit.com/index.php/channel/2127/emea-ensuring-comprehensive-ai-security-across-all-platforms/
                                • 10/28/2026
                                  01:00 PM
                                  10/28/2026
                                  AMERICAS: Safeguarding AI Across All Fronts
                                  https://www.truthinit.com/index.php/channel/2126/americas-safeguarding-ai-across-all-fronts/
                                • 10/28/2026
                                  01:00 PM
                                  10/28/2026
                                  EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                                  https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                                • 11/04/2026
                                  11:00 AM
                                  11/04/2026
                                  Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                                  https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                                • 11/05/2026
                                  02:00 PM
                                  11/05/2026
                                  HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                                  https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                                • 11/05/2026
                                  02:00 PM
                                  11/05/2026
                                  Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                                  https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                                • 11/12/2026
                                  01:00 PM
                                  11/12/2026
                                  Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision
                                  https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
                                • 11/19/2026
                                  01:00 PM
                                  11/19/2026
                                  Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                                  https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                                • 11/19/2026
                                  01:00 PM
                                  11/19/2026
                                  Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                                  https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                                Truth in IT
                                • Sponsor
                                • About Us
                                • Terms of Service
                                • Privacy Policy
                                • Contact Us
                                • Preference Management
                                Desktop version
                                Standard version