{"version":"0.42.0","built_at":"2026-11-01T08:34:43.408Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","product":{"id":"PR-770","name":"IBM watsonx.governance","vendor":"IBM","category":"AI governance","description":"A toolkit for governing AI models and agents across their lifecycle: an inventory of AI use cases and assets, risk assessment against a supplied taxonomy, mapping to AI regulations and standards, automatic lifecycle records, and monitoring of model quality, drift and safety, including models hosted by other providers.","website":"https://www.ibm.com/products/watsonx-governance","license_model":"mixed","deployment":["saas","self-hosted"],"aliases":["watsonx.governance"],"csdm_note":"One Business Application with an Application Service per environment. The use cases it inventories are not Configuration Items; link each governed model or agent to the Application Service that runs it so risk and runtime records meet.","sources":[{"url":"https://www.ibm.com/products/watsonx-governance","title":"IBM watsonx.governance"},{"url":"https://www.ibm.com/products/watsonx-governance/model-governance","title":"Model Governance - IBM watsonx.governance"},{"url":"https://www.ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance","title":"New in IBM watsonx.governance: Govern AI agents as you build, expand accountability and streamline compliance"}],"as_of":"2026-11-01","product_capabilities":[{"id":"PC-770.10","name":"Governance Console","description":"A record of AI use cases and the agents and models behind them, linked to risks, controls and policies, with runtime controls in watsonx Orchestrate tied back to the same records.","business_capability_ids":["BC-770.10.50","BC-770.10.10","BC-770.10.20"],"maturity":"strong","confidence":"medium","source_url":"https://www.ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance","business_capabilities":[{"id":"BC-770.10.50","name":"AI System Inventory"},{"id":"BC-770.10.10","name":"AI Use Case Portfolio"},{"id":"BC-770.10.20","name":"Responsible AI Policy"}]},{"id":"PC-770.20","name":"AI Asset Discovery","description":"Finds agents and their tools, foundation models, MCP servers and knowledge bases on connected platforms such as Amazon Bedrock, Azure AI Foundry, Google Cloud and watsonx Orchestrate, and adds them to the inventory.","business_capability_ids":["BC-770.10.50"],"maturity":"emerging","confidence":"high","source_url":"https://www.ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance","business_capabilities":[{"id":"BC-770.10.50","name":"AI System Inventory"}]},{"id":"PC-770.30","name":"AI Risk Assessment","description":"Risk assessments of AI use cases against a supplied AI risk taxonomy that an organization can extend with its own categories.","business_capability_ids":["BC-770.10.30","BC-130.10.20"],"maturity":"strong","confidence":"high","source_url":"https://www.ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance","business_capabilities":[{"id":"BC-770.10.30","name":"AI Risk & Model Review"},{"id":"BC-130.10.20","name":"Risk Taxonomy"}]},{"id":"PC-770.40","name":"Regulatory Compliance Management","description":"Ties AI use cases to obligations under regulations and standards such as the EU AI Act, NIST AI RMF and ISO 42001, with AI-assisted review of the evidence and the final call left to a person.","business_capability_ids":["BC-140.10.10","BC-140.40.20","BC-770.10.20"],"maturity":"strong","confidence":"medium","source_url":"https://www.ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance","business_capabilities":[{"id":"BC-140.10.10","name":"Obligation Inventory"},{"id":"BC-140.40.20","name":"Compliance Testing"},{"id":"BC-770.10.20","name":"Responsible AI Policy"}]},{"id":"PC-770.50","name":"Factsheets","description":"Lifecycle records written automatically as a model is built and changed, which can be exported for reviewers and auditors.","business_capability_ids":["BC-770.50.20","BC-770.10.30"],"maturity":"core","confidence":"high","source_url":"https://www.ibm.com/products/watsonx-governance/model-governance","business_capabilities":[{"id":"BC-770.50.20","name":"Model Registry & Lineage"},{"id":"BC-770.10.30","name":"AI Risk & Model Review"}]},{"id":"PC-770.60","name":"Model Evaluation and Monitoring","description":"Threshold checks on drift, quality and harmful content for predictive and generative models, including ones built in other tools or served by Amazon Bedrock, Microsoft Azure and OpenAI.","business_capability_ids":["BC-770.20.40","BC-770.30.40"],"maturity":"strong","confidence":"high","source_url":"https://www.ibm.com/products/watsonx-governance/model-governance","business_capabilities":[{"id":"BC-770.20.40","name":"Model Monitoring & Retraining"},{"id":"BC-770.30.40","name":"Output Evaluation & Guardrails"}]},{"id":"PC-770.70","name":"Agent Evaluation and Code Risk Scanning","description":"Brings agent evaluation scores from Langfuse and Arize AX in against governance controls, and runs static analysis on agents found in connected GitHub repositories to show which OWASP agentic risk categories apply.","business_capability_ids":["BC-770.30.40","BC-760.50.20"],"maturity":"emerging","confidence":"high","source_url":"https://www.ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance","business_capabilities":[{"id":"BC-770.30.40","name":"Output Evaluation & Guardrails"},{"id":"BC-760.50.20","name":"Application Security Testing"}]}],"page_url":"https://catalog.mikereams.com/products/PR-770"}}