The Rise of Agentic Data Governance
Sep 10, 2026
By Dr. Adi Hod, Founder & CEO, Velotix
Tel Aviv, Israel Sep 10, 2026 (Issuewire.com) - Yesterday, humans requested access to data and humans governed it. Tomorrow, humans and AI agents will both consume enterprise data - while governance agents continuously evaluate what data may be used, by whom, for what purpose, under what conditions, and for how long. That, to me, is the defining enterprise challenge of the next decade: governing data access at machine speed without losing policy, context, or accountability.
That single shift breaks thirty years of access control architecture. And it is why the next era of data security will not be won by more roles, more rules, or more approval workflows. It will be won by an agentic governance layer that understands intent, reasons over policy and context, and continuously governs how both humans and machines use data.
To see why, it helps to understand how we got here.
Three Eras of Access Control, One Fatal Assumption
When researchers at NIST formalized role-based access control in 1992, it was a genuine breakthrough. Instead of granting permissions user by user, you defined what an "analyst" could see, and every analyst inherited it. RBAC carried the enterprise for three decades - until data spread across 50 sources and three clouds, roles multiplied faster than employees, and every platform enforced its own local version of the truth.
Policy-based access control (PBAC) was the answer to that sprawl. Rather than asking "what role does this person have?", PBAC asks "what does our policy say about this person, this data, this purpose, right now?" Policy became a living statement of intent, evaluated in context and enforced centrally across every data source.
The third era added intelligence. A policy engine that merely stores rules still depends on humans to write every one of them - which relocates the bottleneck from IT ticketing queues to governance committees. A policy brain learns instead: AI-generated recommendations capture the judgment inside every access decision, and approved requests become candidate rules, so that yesterday's manual approval becomes tomorrow's automated policy. This approach is foundational enough to Velotix's platform that it is protected by US Patent 12,393,718, covering the system and method for managing data access requests. This evolution from static permissions toward intelligent, policy-driven governance is central to the approach we have taken at Velotix.
But all three eras quietly shared a more fundamental assumption: that access decisions would happen at human scale - with relatively stable identities, predictable purposes, and enough time for a human to intervene.
That assumption just expired.
The Agent Changed the Question
Enterprises are now deploying LLM copilots, autonomous agents, and agent-to-agent pipelines against their most sensitive data. A single agent can issue thousands of queries an hour, chain requests across systems, and act on behalf of users whose entitlements it may silently exceed. Non-human identities - service accounts, bots, and now agents - already outnumber human ones in most large organizations, and agentic workloads are multiplying them again.
Approval workflows designed for humans collapse at this scale. No committee can review ten thousand machine-initiated requests per day. No quarterly access certification can keep pace with agents that are created, cloned, and retired in minutes. And no role model can answer the question that now matters most: not just who is asking, but what is asking, on whose behalf, for what purpose, and under which conditions.
Much of the security industry has responded by racing to secure the agents themselves - authenticating them, sandboxing them, watching their behavior. That work is necessary. It is also insufficient, because it treats the agent as the perimeter while leaving the deeper question unanswered: how should the use of enterprise data itself be governed, when the consumers of that data are humans, applications, and machines all at once?
What Agentic Data Governance Actually Means
Agentic data governance flips the frame. Instead of only securing agents, it puts agents to work governing data - a continuous, autonomous layer that evaluates every access, human or machine, against policy, context, sensitivity, and purpose, in real time.
Governance agents reason over identity, intent, purpose, data sensitivity, and regulatory context. They recommend and orchestrate the appropriate action, while a deterministic policy layer authorizes and enforces the final decision within enterprise-defined boundaries.
In practice, that layer behaves less like a rulebook and more like a colleague with perfect memory and infinite patience. Governance agents observe how data owners decide, identify patterns, and generalize those decisions into candidate policies. They can attach conditions and time limits, trigger the appropriate approval path, and maintain a complete audit trail for every decision - precisely the evidence that regulators and auditors will increasingly demand as AI-driven data use comes under scrutiny.
The building blocks are already in production. In its work with IBM watsonx, Velotix embedded governed intelligence into a conversational assistant that lets users request data in natural language, through the tools they already use, while policy enforcement runs silently underneath - collapsing access timelines from months to minutes. Velotix's inclusion as a representative vendor in the Gartner Guide for Data Security Platforms reflects how central this architecture has become to the data security conversation. The agentic layer is the natural continuation of the same design: governance that learns and enforces continuously, because nothing slower can survive contact with machine-speed consumption. For us, these production building blocks point toward governance that can operate at the same speed as the AI agents and applications consuming enterprise data.
The Arc Only Bends One Way
Step back and the trajectory is unmistakable:
RBAC gave us structure. PBAC gave us intent. The policy brain gave us learning. Agentic data governance gives us autonomy - governance that finally moves at the speed of the systems it governs.
Each transition happened for the same reason: the previous model could not keep pace with how data was actually being used. This one is no different, except in its urgency. Organizations will not get to choose whether agents consume their data. They will only choose whether that consumption is governed by an intelligent layer built for it, or by role hierarchies designed when the fax machine was cutting-edge collaboration technology.
The winners of the agentic era will not be the enterprises with the most rules. They will be the ones whose governance thinks - continuously, contextually, and autonomously - so that every human, every application, and every agent gets exactly the data it should, the moment it should, and not a byte more.
Access control had three eras. The fourth one governs itself.
See how an agentic policy brain works on your own data stack - book a demo.
About Dr. Adi Hod
Dr. Adi Hod is the Founder and CEO of Velotix, a data security platform that uses policy-based access control and AI to govern how humans, applications, and AI agents consume enterprise data. His work focuses on data access governance, the evolution of enterprise permission models, and the security challenges introduced by agentic AI.
Source :velotix
This article was originally published by IssueWire. Read the original article here.
Orion expands Custard cream cake production in Korea, Vietnam, India as global demand surges
Orion has expanded production lines for its flagship Custard cream cakes across Korea, Vietnam and India to keep pace with surging domestic and international demand, the company said Thursday. Launched in Korea in 2004, Orion Custard is a soft, individually wrapped sponge cake with a custard cream filling. It has become the company’s second-biggest global pie brand after its flagship Choco Pie. Global sales rose 14 percent last year to 154 billion won ($116 million). China, Vietnam and India accounted for 76 percent of that total, and sales kept growing at a double-digit pace through September this year. The company added a production line in Korea in September and recently began running new lines in Vietnam and India. The expansion lifts Custard’s global production capacity to as much as 300 billion won a year, roughly double last year’s sales. Orion’s global research center at its headquarters in Korea oversees product development for each market. In Vietnam, the company sells flavors including tiramisu, raspberry, egg lava, melon and a reduced-sugar version. There is also a fl
Young Poong loses shareholder derivative suit against Korea Zinc
A court on Thursday ruled against Young Poong Corp. in a shareholder derivative lawsuit seeking 837 billion won ($631 million) in damages from Korea Zinc Co. Chairman Choi Yun-beom and other company directors. Young Poong — a major shareholder in Korea Zinc — had filed the suit in November 2024, claiming Korea Zinc's directors had inflicted losses of 837 billion won on the company by making a tender offer involving the purchase of its own shares at 890,000 won apiece, when the actual price was around 560,000 won. The Seoul Central District Court ruled, however, that Korea Zinc's directors could not be deemed to have violated their managerial duties, given the steps they took before making the purchase. It also ruled that the action did not violate the Commercial Act or the company's articles of incorporation.
Nvidia broadens ties with Korean component makers
Nvidia is expanding partnerships with domestic component makers LG Innotek and Samsung Electro-Mechanics, strengthening its supply chain for physical artificial intelligence (AI) applications and next-generation AI infrastructure. LG Innotek unveiled a lineup of sensing solutions incorporating Nvidia's latest Holoscan Sensor Bridge (HSB) technology at the U.S. chipmaker's annual GPU Technology Conference (GTC) in Berlin on Tuesday (local time). The solutions include 3-megapixel camera modules and a multimodal vision system that combines multiple cameras and sensors, targeting applications in physical AI and robotics. Nvidia's HSB technology allows sensor data to be sent directly to AI computers, bypassing the central processing unit and potentially speeding up how robots and autonomous vehicles process information and make decisions. The partnership reflects growing demand for advanced sensing technologies as AI expands beyond software and data centers into physical environments, where machines must perceive and respond to their surroundings in real time. LG Innotek said it plans to expan
K-beauty firms to seek export deals at Cheongju expo
Korean cosmetics and other beauty product companies will seek export deals at an annual industry exhibition that opened Thursday in North Chungcheong Province, the provincial government said. The Cosmetics & Beauty Expo Osong Korea 2026 that runs through Saturday is underway in Osong, a district of Cheongju, 83 kilometers south of Seoul. The event aims to connect local companies with international buyers, according to the provincial government. "We will help K-beauty products reach global markets and attract international buyers to North Chungcheong Province, a hub for the industry, to facilitate export deals," Gov. Shin Yong-han said. More than 250 companies are participating in the business-to-business (B2B)-focused event, held under the theme "K-Beauty Osong Seeks Growth Along With Global Partners," the provincial government said. This year's expo, the largest to date, will give local companies opportunities to expand into overseas markets while allowing visitors to experience K-beauty products, Jang Woo-sung, director general of the provincial government's bureau of biologics, food a
Regulators weigh antitrust safeguards as Naver-Dunamu deal stalls
Financial authorities said Thursday that they are considering safeguards to address concerns over potential market dominance arising from the merger of Naver Financial and Dunamu. "The Fair Trade Commission (FTC) is currently conducting a thorough review of whether the proposed merger between Naver and Dunamu would restrict competition," the Financial Services Commission said in a written response to Rep. Lee Kang-ill of the ruling Democratic Party of Korea. "Similarly, under the proposed Digital Asset Basic Act, we are considering safeguards to ensure that cryptocurrency exchanges, which serve as critical market infrastructure, maintain their public interest role and neutrality without being subject to undue influence from any particular company or shareholder," it added. Last November, Naver Financial announced plans to make Dunamu a wholly owned subsidiary through a comprehensive share swap. With the deal, Naver Financial aims to tap into new growth opportunities in digital assets. Dunamu would gain foundation to expand beyond its existing cryptocurrency exchange and integrate with Na
Samsung SDI to sponsor Korea's International Chemistry Olympiad team
Samsung SDI said Thursday that it has signed an agreement with the Korea Foundation for the Advancement of Science and Creativity (KOFAC) and the Korean Chemical Society (KCS) to sponsor Korea’s team for the International Chemistry Olympiad (IChO). The signing ceremony was held at the Korea Science and Technology Center in Seoul and attended by Samsung SDI Vice President and Head of the People Team Kim Hun-kyu, KOFAC President Chung Woo-sung and KCS President Keum Kyo-chang. Beginning in January, Samsung SDI will support the selection and training of Korea’s IChO team, organized by the KCS, as well as the team’s participation in the international competition. The company will also provide scholarships to students who win medals. The sponsorship reflects Samsung SDI’s commitment to nurturing young talent in basic sciences and helping students compete on the global stage, while contributing to Korea’s scientific and technological competitiveness. The IChO is an annual competition in which high school students from around the world test their chemistry knowledge and skills. Korea
Samsung chairman visits UAE, encourages employees
Samsung Electronics Executive Chairman Lee Jae-yong visited the Al Dhafra gas-fired power plant construction site in Abu Dhabi, the United Arab Emirates (UAE), on Wednesday (local time) to inspect construction progress and encourage employees working in the Middle East. Lee toured key facilities, checking construction schedules and safety measures, before meeting with executives from Samsung C&T and Samsung E&A to discuss regional market trends, growth strategies and new business opportunities. The Al Dhafra power plant is being built by Samsung C&T in a consortium with local construction firm Trojan General Contracting. It is designed to meet rising electricity demand amid the UAE's industrial growth and is expected to support energy-intensive industries, including artificial intelligence (AI) data centers. Samsung C&T previously demonstrated its construction capabilities through the Barakah nuclear power plant project in the UAE, while Samsung E&A uses the country as a key hub for its Middle East and Africa operations, undertaking projects in refining, gas and petrochemicals. Korea and
Lotte World ramps up safety prep with hands-on fire, CPR drills
Lotte World employees put their emergency response skills to the test Wednesday, competing in rapid firefighting and CPR challenges designed to sharpen their readiness when lives are at stake. The amusement park operator held its 2026 Fire Safety Competition in partnership with the Songpa Fire Station. The annual exercise comes as theme parks and high-density public venues face growing scrutiny over crowds and facility safety, prompting major operators to move beyond routine compliance and build real-time tactical readiness among frontline staff. The competition centered on two core scenarios: rapid initial suppression using indoor hydrants and emergency first aid. In the firefighting challenge, employees simulated an active blaze by quickly connecting hydrant systems, deploying hoses and executing the critical steps needed to contain flames before first responders arrive. The medical segment tested teams on sudden cardiac arrest scenarios. Participants were evaluated on their precision and speed while performing CPR on training mannequins and deploying automated external defibrillators
Daewoo E&C expands AI use across construction sites
Daewoo Engineering & Construction (E&C) is expanding artificial intelligence (AI) and digital management systems across its construction sites, deploying translation tools and quality-control software to reduce administrative workloads and improve communication with foreign workers. The construction firm rolled out AI translation and tablet-based training systems across its domestic construction sites last month. Its AI-powered translation system supports 16 languages, converting site managers' spoken Korean instructions into text and speech in foreign workers' native languages in real time. The company said the system recorded 94.6 percent accuracy in Korean speech recognition during preliminary testing. It is designed to reduce communication errors on construction sites, where clear instructions are essential for workplace safety, particularly as the number of foreign workers continues to increase. Daewoo E&C has also introduced a tablet-based system for safety training and related paperwork, such as worker registration, health screenings and training reports. The company is also develop
Hyundai, Kia's Sept. sales fall 1.7% amid model shortage
Combined vehicle sales by Korea's leading automaker Hyundai Motor and its affiliate Kia fell 1.7 percent in Europe last month from a year earlier, amid a lack of new models, industry data showed Thursday. Hyundai and Kia sold a combined 96,258 vehicles in the common market in September, down from 97,907 in the same one-month period in 2025, according to data from the European Automobile Manufacturers' Association (ACEA). "The lack of new models, particularly electric vehicles, in Hyundai Motor's lineup affected its sales performance for the month," a company spokesperson said by phone. Hyundai Motor's sales fell 17.5 percent to 39,821 units from 48,253 a year earlier, while Kia's sales rose 13.7 percent to 56,437 units from 49,654. As emissions regulations in Europe become increasingly stringent, the two automakers are focusing on expanding sales of environmentally friendly vehicles, including the gasoline hybrid and plug-in hybrid versions of Hyundai's Tucson, its all-electric Kona, and Kia's pure electric EV3 and Niro plug-in hybrid. Last month, Hyundai and Kia together accounted for 7.
JB Financial targets Central Asia through acquisition of 2 Kyrgyz firms
JB Financial Group is expanding into Central Asia through the planned purchase of two Kyrgyz financial firms, broadening an overseas business portfolio built largely around Southeast Asia, the company said Thursday. JB Woori Capital, its consumer finance subsidiary, has agreed to buy Korky Credit and Korky Leasing from their parent, Epoche. The deal covers all shares in both companies and is expected to close before year-end, subject to regulatory approval and registration in Kyrgyzstan. The acquisitions would give JB Financial a presence in a fifth overseas market. Its existing businesses include commercial banking in Cambodia, microfinance in Myanmar and securities services in Vietnam. The group also secured Indonesian regulatory clearance in September to purchase an 85 percent stake in KB Bukopin Finance, a local financing company. JB Financial’s interest in Kyrgyzstan is driven primarily by the country’s young population and rapid economic growth. About 70 percent of its population is reportedly under 40. Its economy expanded 11.1 percent last year, according to the Internationa
PHP security flaws alarm Korean government, companies
The Korean government has issued a nationwide security alert to businesses and website operators over critical vulnerabilities in PHP, a programming language widely used to build websites and web services, as the flaws spark widespread alarm across the globe amid concerns that they could rank among the most severe software vulnerabilities in history. Experts warned that small and medium-sized enterprises (SMEs) and individual business owners operating websites without dedicated cybersecurity personnel could be particularly vulnerable. They strongly recommended prompt security updates, noting that a vulnerability in one company's website could also affect other businesses whose websites are hosted on the same server. In a statement released Thursday, the Ministry of Science and ICT urged domestic companies and institutions operating PHP-based websites to immediately apply security updates. “The latest PHP vulnerabilities could affect a vast number of websites in Korea. An extremely urgent response is required as exploit code is already publicly available," Deputy Prime Minister and Min
YOUR NEWS, OUR NETWORK.
Do you have Great News you want to tell the world?
Be it updates about your business or your community, you can make sure that it’s heard by submitting your story to our network reaching hundreds of news sites across 6 verticals.