Authors :
Aditya Kashyap
Volume/Issue :
Volume 11 - 2026, Issue 4 - April
Google Scholar :
https://tinyurl.com/43vy2bem
Scribd :
https://tinyurl.com/xw6ymah
DOI :
https://doi.org/10.38124/ijisrt/26apr503
Note : A published paper may take 4-5 working days from the publication date to appear in PlumX Metrics, Semantic Scholar, and ResearchGate.
Abstract :
AI governance frameworks such as the EU AI Act, the NIST AI Risk Management Framework, and ISO 42001
were built for a world where AI systems were visible, discrete, and clearly owned. That is not the world enterprises operate
in today.AI now exists inside enterprise software. It influences decisions across ERP, CRM, contract management, and
supply chain platforms. Organizations are not deploying AI systems. They are inheriting AI capabilities. This shift creates
a structural accountability problem. Enterprises do not train these models and often cannot inspect them. Yet they remain
fully accountable for the outcomes those systems produce. Vendors control the technology, but do not share operational
responsibility. The result is a governance gap that current frameworks such as the EU AI Act, NIST AI RMF, and ISO
42001 are not designed to address. This paper explores how that gap appears in real enterprise environments and proposes
the Enterprise AI Integration Governance model, a practical four-layer approach to reestablishing accountability in
embedded AI ecosystems. With regulatory enforcement approaching, this is no longer a future concern.
Keywords :
AI Governance, Enterprise AI, EU AI Act, NIST AI RMF, ISO 42001, ERP, Embedded AI, Agentic AI, Accountability, Digital Transformation, AI Risk Management, CLM, SAP, Oracle.
References :
- European Parliament and Council of the European Union. (2024). Regulation (EU) 2024/1689 of the European Parliament and of the Council laying down harmonized rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union, L Series.
- National Institute of Standards and Technology. (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0) (NIST AI 100-1). U.S. Department of Commerce.
- International Organization for Standardization. (2023). ISO/IEC 42001:2023 — Information technology — Artificial intelligence — Management system. ISO.
- SAP SE. (2023). SAP Joule: The generative AI copilot for business. SAP News Center.
- Microsoft Corporation. (2024). Copilot in Dynamics 365 Sales overview. Microsoft Learn.
- Oracle Corporation. (2024). Using AI and machine learning in Oracle Fusion Cloud Financials. Oracle Cloud Documentation.
- Salesforce Inc. (2024). Introducing Agentforce: The agentic layer for the enterprise. Salesforce News. https://www.salesforce.com/news/press-releases/2024/09/12/agentforce-news/
- Oracle Corporation. (2024). Oracle AI agents for finance Oracle Cloud World 2024. Oracle News.
- SAP SE. (2024). SAP at a glance. SAP Investor Relations.
- Oracle Corporation. (2024). Oracle Fusion Cloud ERP.
- Salesforce Inc. (2024). Salesforce FY2024 Annual Report. Salesforce Investor Relations.
- Dastin, J. (2018, October 10). Amazon scraps secret AI recruiting tool that showed bias against women. Reuters.
- Flint, J., & Mullin, B. (2021, November 2). Zillow quits home-flipping business, cites inability to forecast home prices. The Wall Street Journal.
- British Columbia Civil Resolution Tribunal. (2024, February 14). Moffatt v. Air Canada, 2024 BCCRT 149.
AI governance frameworks such as the EU AI Act, the NIST AI Risk Management Framework, and ISO 42001
were built for a world where AI systems were visible, discrete, and clearly owned. That is not the world enterprises operate
in today.AI now exists inside enterprise software. It influences decisions across ERP, CRM, contract management, and
supply chain platforms. Organizations are not deploying AI systems. They are inheriting AI capabilities. This shift creates
a structural accountability problem. Enterprises do not train these models and often cannot inspect them. Yet they remain
fully accountable for the outcomes those systems produce. Vendors control the technology, but do not share operational
responsibility. The result is a governance gap that current frameworks such as the EU AI Act, NIST AI RMF, and ISO
42001 are not designed to address. This paper explores how that gap appears in real enterprise environments and proposes
the Enterprise AI Integration Governance model, a practical four-layer approach to reestablishing accountability in
embedded AI ecosystems. With regulatory enforcement approaching, this is no longer a future concern.
Keywords :
AI Governance, Enterprise AI, EU AI Act, NIST AI RMF, ISO 42001, ERP, Embedded AI, Agentic AI, Accountability, Digital Transformation, AI Risk Management, CLM, SAP, Oracle.