Shadow AI Governance & Policy for Safe Agent Deployment: Program Announced

Matthew Mathison has announced the Krista Foundation, a 90-day AI governance and policy program built for executives at mid-sized companies whose employees are already using AI without oversight.

Salt Lake City, United States, October 22, 2026 /NewsNetwork/ -- Matthew Mathison has announced the Krista Foundation, a 90-day program designed to establish AI governance and policy, train employees, and build a company knowledge record before organizations activate AI agents. The program targets executives at 100-to-500-person, knowledge-intensive businesses, drawing directly on Mathison’s own experience running AI implementation at MBL Partners and its portfolio companies.

More information is available at https://www.matthewmathison.com/resources/krista-foundation

The program addresses a pattern Mathison observed firsthand and that research increasingly confirms: employees at companies of all sizes are using personal AI tools at work without IT knowledge or approval, a practice commonly referred to as shadow AI. According to IBM’s Cost of a Data Breach Report 2026, shadow AI was involved in 43% of security incidents that year, up from 20% the prior year, according to the same report. The unsanctioned use of these tools can expose proprietary data, create compliance gaps, and expand an organization’s attack surface beyond its managed tech stack.

Mathison notes that this pattern creates value for individual employees while leaving the organization to carry the risk, often without any internally kept record. When agents are layered on top of that environment, they inherit whatever governance exists underneath, so unmanaged use does not stay contained. It compounds, and it does so quickly.

The program follows a fixed 90-day sequence: policy and employee training are established within the first 14 days, giving the organization a standard to enforce and a trained workforce before anything else moves forward. A company knowledge record then begins in week three, capturing decisions and context that would otherwise live only in individual employees’ heads.

Mathison emphasizes that the policy is structured for enforcement rather than filed as a document nobody reads. Enforcement runs through platform settings, a shared permission model, and an audit trail, ensuring that the policy governs what actually happens inside the organization’s systems and creating a documented record of AI activity over time.

The program is designed for organizations with 100 to 500 people whose calendars run on Microsoft 365 or Google Workspace. The first cohort is limited to non-regulated data. By day 30, participating companies also receive a weekly leadership brief: a three-minute summary of what was decided, which commitments remain open, and where risks stand.

Executives can learn more about how the 90 days unfold and whether the program fits their organization at https://www.matthewmathison.com/

Contact Info:
Name: Matthew Mathison
Email: Send Email
Organization: MBL Partners, LLC
Address: 2115 S Dallin St, Salt Lake City, Utah 84109, United States
Phone: +1-303-885-8688
Website: https://www.matthewmathison.com/

Source: NewsNetwork

Release ID: 89207012

Should you identify any discrepancies, concerns, or inaccuracies in the content provided in this press release or require assistance with a press release takedown, we strongly urge you to notify us promptly by contacting [email protected] (it is important to note that this email is the authorized channel for such matters, sending multiple emails to multiple addresses does not necessarily help expedite your request). Our responsive team is committed to addressing your concerns within 8 hours by taking necessary actions to resolve identified issues diligently or guiding you through the necessary steps for removal. Our dedication lies in providing accurate and reliable information.