OneTrust plans to extend AI-Ready Governance to Workday Agent Passport through integration. Planned integration will enable organizations to map controls, collect evidence, and maintain audit-ready records for Workday Agent Passport, helping move AI agent governance from policy to proof. October 15, 2026 12:00 ET | Source: OneTrust LLC ATLANTA, Oct. 15, 2026 (GLOBE NEWSWIRE) - OneTrust, the AI-Ready Governance Platform(TM) and a Workday Venture partner, today announced a planned integration with Workday, Inc., the enterprise AI platform for HR, finance, and IT. The planned integration will connect OneTrust with Workday Agent Passport, so organizations will have a repeatable way to organize the governance evidence that an independent auditor reviews for Agent Passport Stamps. "Agent Passport answers three questions about an agent: what has been verified, by whom, and to what standard. OneTrust's integration will give customers a..." "Workday has taken the lead in establishing a standards-based approach to trust in AI agents through Agent Passport," "As companies scale AI, governance has to scale with it. By connecting the controls and evidence organizations already maintain to the agents they deploy..." "As AI agents take on work in payroll, HR, and finance, teams need to be able to back their decisions with evidence and audit-ready records," The integration builds on OneTrust's strategy of helping organizations govern data and AI through reusable controls and evidence across more than 50 frameworks, including GDPR, the EU AI Act, ISO 42001, and the NIST AI Risk Management Framework. Through Workday Agent Passport, organizations can extend their existing governance controls to the AI agents they build and deploy across HR, finance, and IT. For ISVs and joint customers, that means less duplicative work and a simpler path to meeting Agent Passport requirements without creating a separate compliance process. As enterprises scale AI agents into the processes that touch people and money, they face growing pressure to show that those agents are governed, auditable, and compliant with emerging regulations and internal policies. Many governance requirements, including auditability, appropriate data use, and human oversight of high-stakes actions, depend on policy and architectural evidence that organizations may already maintain but struggle to connect directly to the agents they deploy. Workday customers and partners building agents will be able to use OneTrust to map existing governance controls to Agent Passport requirements, collect and reuse evidence they already hold, run internal policy-confirmation workflows, and maintain audit-ready records. "Workday has taken the lead in establishing a standards-based approach to trust in AI agents through Agent Passport," said Sriram Iyer, SVP & GM, AI Strategy & Products at OneTrust. "As companies scale AI, governance has to scale with it. By connecting the controls and evidence organizations already maintain to the agents they deploy across the business, we are helping them move from experimentation to real business outcomes faster, with governance built in. Together, we plan to help customers scale AI responsibly with the proof needed to meet governance and compliance requirements as they grow." The integration is expected to make OneTrust among the first assessors, extending what Workday customers can verify about an agent beyond security testing to the governance controls regulators and auditors ask about. Agent Passport brings signed assessments from security testing providers and auditors together in one place, so customers can see what has been verified about an agent, by whom, and to what standard, and set tenant policies accordingly. "As AI agents take on work in payroll, HR, and finance, teams need to be able to back their decisions with evidence and audit-ready records," said Dean Arnold, VP of Workday AI Platform. "Agent Passport answers three questions about an agent: what has been verified, by whom, and to what standard. OneTrust's integration will give customers a practical way to organize the governance evidence behind those answers, and assess whether AI agents meet defined governance and compliance standards alongside independent security testing." Agent Passport remains available to Workday customers and partners regardless of which governance platforms, auditors, or testing providers they choose to work with. Any unreleased Workday services, features, or functions referenced in this release are not currently available, are subject to change at Workday's discretion, and may not be delivered as planned or at all. To learn more about how OneTrust helps organizations accelerate AI delivery, govern AI with confidence, and operate AI at scale, visit the website. About OneTrust OneTrust, the AI-Ready Governance Platform(TM), enables innovation through the responsible use of data and AI. Trusted by thousands of companies, including over half of the Fortune 500, we help businesses govern well and move fast, turning responsible data use into a catalyst for growth. To learn more, follow OneTrust on LinkedIn or visit www.onetrust.com. (C) 2026 OneTrust LLC. All rights reserved. OneTrust and the OneTrust logo are trademarks or registered trademarks of OneTrust LLC in the United States and other jurisdictions. Workday and Workday Agent Passport are trademarks of Workday, Inc. All other brand and product names are trademarks or registered trademarks of their respective holders.

Enterprise DLP tools fall short as Mozilla Firefox introduces native AI data controls. As of October 16, 2026, enterprise security teams face a stark reality check regarding their data protection strategies. New research published today shows that legacy enterprise Data Loss Prevention (DLP) solutions are largely ineffective at stopping sensitive data exfiltration, prompting software vendors to move security controls directly into user applications. The Legacy DLP failure and Firefox's native response. A fresh industry study highlights that legacy DLP tools often generate high false positive rates while missing stealthy exfiltration tactics across modern web applications. In response to these architectural gaps, Mozilla has rolled out new native Firefox Enterprise features designed to integrate DLP and AI governance directly into the browser. By embedding controls at the endpoint browser layer, administrators can audit and restrict sensitive corporate data transfers before they reach unapproved AI models or cloud endpoints. High-Profile executive moves signal Zero Trust priority. The enterprise security landscape is also seeing major leadership realignments. IGEL has appointed former U.S. Department of Defense Zero Trust leader Randy Resnick as its Field CTO to accelerate zero trust client strategies. At the same time, OneTrust promoted Tim Mullen to Chief Information Officer, while Inspira Enterprise brought on former Accenture executive Kelly Bissell as Chief Strategy Advisor. Furthermore, AI giant Cohere signed a letter of intent to acquire AI security startup AISLE to harden generative models against data leaks. Strategic identity and infrastructure partnerships. In identity management, Yubico and Okta are expanding their collaboration to eliminate password vulnerabilities across hybrid corporate networks. Meanwhile, sports and entertainment venues continue upgrading core connectivity, as seen by the Cleveland Cavaliers naming Cisco as their official enterprise networking partner. The bottom line. TL;DR summary. * Legacy DLP mechanisms are struggling to halt modern cloud and browser-based data leaks. * Mozilla Firefox Enterprise is shifting security left by building native DLP and AI safeguards into the browser. * Executive hiring trends show a heavy focus on Zero Trust architectures and AI safety. Cybersecurity fun fact. Did you know that over 70 percent of corporate data movement now passes directly through web browsers, making browser-level security controls one of the fastest growing sectors in enterprise cybersecurity? Stay Connected for Daily Security Intelligence Follow Aibots Sdn Bhd to get the latest breaking cybersecurity reports and threat analysis delivered daily. Aibots Sdn Bhd | [Beyond Future]

OneTrust rolls out platform overhaul to tackle AI governance at enterprise scale. Surprisingly useful AI article enhancements. Governance platform vendor, OneTrust, has used its TrustWeek conference to unveil a suite of platform and product updates designed to help organisations govern AI deployments alongside existing privacy, consent, risk and data programs. The updates centre on a shared intelligence layer called CORIE (Contextual Orchestration for Reasoning, Intelligence and Evidence), which underpins a series of new capabilities including an AI Control Plane, a Governance Command Center and integrations with AI tools such as ChatGPT, Claude, Copilot and Glean. The announcements come as OneTrust's own 2026 AI-Ready Governance Report found that 86 per cent of surveyed organisations experienced an AI-related incident in the past year, yet only 27 per cent slowed or paused deployment in response - highlighting a growing gap between the pace of AI adoption and the governance structures intended to manage it. Governance that moves with the work. Chief Product and Technology Officer at OneTrust, DV Lamba, framed the challenge as one of scale rather than capability, arguing that governance teams already have the expertise but lack the tools to apply it across thousands of automated decisions. "As organisations put AI to work, their governance teams already have the context and expertise to guide them. The challenge now is applying that judgment to thousands of agent decisions a day," Lamba noted. "We are building the OneTrust Platform so governance moves with the work, from assessment to production," he continued. "Enabling developers to embed governance into agent behaviour via our headless experience through the MCP Gateway, while integrating CORIE into everyday business applications to make governance conversational and native." Lamba added that the approach is intended to help teams "understand risk in context, act at the point of decision, and generate evidence as work happens - giving businesses the control to move AI into production and a foundation to scale." CORIE: connecting context across programs. At the core of the platform update is CORIE, which OneTrust describes as the shared intelligence layer connecting context and decisions across privacy, consent, technology risk, third-party management and AI risk programs. CORIE draws on a pre-built understanding of an organisation's environment and rules. It is designed to automate risk decisions with business teams maintaining oversight, while providing documentation of the reasoning behind each decision and policy application. The layer comprises three components. The Trust Graph maps AI systems and models alongside enterprise data, vendors and identities, connecting them with consent signals and applicable governance requirements. The Reasoning Engine uses policies, prior assessments and governance decisions to drive consistent, context-aware decisions across connected programs. The Evidence Ledger captures what was considered, which policy or control was applied and what action was taken, creating an auditable record throughout the flow of work. This intelligence powers agent interactions across the platform. Whether an organisation uses OneTrust's own agents, customer-built agents or third-party agents, CORIE is intended to provide the shared context, reasoning and evidence needed to ensure actions are informed, governed and explainable. AI Control Plane establishes separation of duties. The AI Control Plane brings CORIE's intelligence into AI workflows at runtime, establishing what OneTrust describes as separation of duties for the AI era through architecture rather than organisational boundaries. The Control Plane acts as an independent layer between AI agents and enterprise systems, evaluating actions as they occur and applying or orchestrating the policies, guardrails and controls that determine whether an action proceeds, is blocked or requires human approval. MCP Gateway opens headless integrations. OneTrust is extending its integrations beyond APIs to provide a headless experience via MCP Gateway, enabling AI-native integrations with applications including ChatGPT, Claude, Copilot and Glean. The aim is to bring governance context, intelligence and workflows into the AI tools that teams already use and build with. OneTrust argues this will reduce the need for custom integrations and streamline collaboration across use cases including assessments and agent development. The MCP Gateway is expected to enter private preview in the northern autumn. Governance Command Center. The Governance Command Center provides a centralised view of risk posture and governance activity, decisions and exceptions. Teams can manage policies and controls across privacy, consent, technology risk, third-party management and AI governance from a single interface, and intervene when human judgment is required. Enterprise customer perspective. Global Head of Data Privacy Compliance and Chief Data Ethics and Privacy Officer at Fiserv, Kelly Thewes, offered an enterprise practitioner's view of the platform direction. "Across the business, new uses of AI are improving how we operate and serve our customers. Our role in governance is to help bring those ideas into production with a clear understanding of the risks, confidence that our policies will hold, and evidence of what AI does," Thewes remarked. "OneTrust's vision connects those requirements to the way work actually happens, enabling teams like ours to govern AI at scale and support the pace of innovation that moves our business forward." AI-driven assessments and posture management. Powered by CORIE, the platform establishes shared context across privacy, consent, technology risk, third-party management and AI programs, allowing insights and decisions to flow between programs so teams can reduce manual work. Two initial applications build on this foundation. AI-Driven Assessments combine conversational assessment agents, AI-generated answers with source lineage, Microsoft Teams engagement and embedded support into a single assessment experience. OneTrust claims these capabilities can reduce assessment completion time by 66 per cent on average. The feature is expected to enter private preview in the northern autumn. Posture Management for Regulations offers a continuous, evidence-backed view of compliance with regulations such as GDPR and the EU AI Act, showing which requirements were evaluated and the evidence supporting each result. Teams can identify compliance gaps and prioritise remediation while maintaining an auditable view across programs. This capability is also expected to enter private preview in the northern autumn. Consent, privacy and risk capabilities. The platform updates extend into three additional areas of governance activity. Conversational Consent addresses the rise of conversational AI in customer engagement, providing dynamic, contextual consent experiences that capture verifiable permission. Connected through the MCP Gateway, the capability combines customer-controlled messaging with explicit confirmation for one or multiple purposes, preserving the relevant agent-user exchange on the consent receipt. Private preview is expected in the northern autumn. AI-Driven RoPA Management automates the generation and updating of Records of Processing Activities from source documents such as project briefs and contracts. Users can review changes before they are applied, with the aim of freeing privacy teams to spend less time on documentation. Private preview is expected in the northern winter. Risk, Issue and Control Recommendations use AI to analyse organisational policies against custom frameworks and control libraries, identifying gaps and risks and recommending required controls to close them. This capability is expected to be generally available in the northern winter. Forward Deployed Engineering program. OneTrust has also introduced a Forward Deployed Engineering program, which embeds OneTrust engineers with select customer teams to build and test new solutions against real-world requirements. The program is launching as a pilot, with teams working from a shared 12 to 18-month plan and building on CORIE and the customer's existing technology stack. About OneTrust. OneTrust provides a governance platform for the responsible use of data and AI. The company is used by thousands of organisations, including over half of the Fortune 500. More information is available at www.onetrust.com. Last Updated on October 2, 2026 by Nick Ross