04 — Product · PR-770
IBM watsonx.governance
A toolkit for governing AI models and agents across their lifecycle: an inventory of AI use cases and assets, risk assessment against a supplied taxonomy, mapping to AI regulations and standards, automatic lifecycle records, and monitoring of model quality, drift and safety, including models hosted by other providers.
// FIG. 04 · Capability coverage
Each tile is an L1; the bar is how many of this product's capabilities realize something beneath it. Our judgment, not a vendor claim.
Direct & Govern
Finance
People & Workplace
Customer & Market
Products & Services
Operations & Supply
Technology & Data
Resilience & Responsibility
Industry L1s
- Plant Operations0
- Production Planning & Scheduling0
- Manufacturing Quality & Compliance0
- Industrial Engineering & Continuous Improvement0
- Plant & Process Safety0
- Dealer & Distributor Network0
- Aftermarket & Service Parts0
- Platform Engineering0
- Software Product Release0
- Site Reliability0
- Developer Experience & API Ecosystem0
- Subscription & Tenant Operations0
- Product Analytics & Experimentation0
- Trust & Compliance Assurance0
- Open Source & Community0
- Merchandising & Assortment0
- Store Operations0
- E-commerce & Omnichannel0
- Category & Trade Promotion0
- Loss Prevention0
- Consumer Insights0
- Store Network & Real Estate0
- Returns & Reverse Logistics0
- Network Planning & Engineering0
- Network Build & Field Operations0
- Network Operations & Assurance0
- Subscriber Order & Activation0
- Usage Charging & Subscriber Billing0
- Content & Programming0
- Advertising Sales & Operations0
- Communications Regulatory Obligations0
- Network Planning & Investment0
- Network Construction & Field Work0
- Network Operations & Control0
- Generation & Treatment Operations0
- Metering & Meter Data0
- Utility Customer Service & Billing0
- Energy Supply, Markets & Flexibility0
- Utility Regulation & Resilience0
- Transmission System Operations0
- Water & Wastewater Networks0
- Deposits & Accounts0
- Lending & Credit0
- Payments & Cards0
- Insurance Products & Policy0
- Insurance Claims0
- Wealth & Investment Management0
- Financial Crime0
- Prudential Risk & Regulatory Reporting0
- Patient Access0
- Clinical Care Delivery0
- Clinical Support Services0
- Revenue Cycle0
- Quality & Patient Safety0
- Population Health0
- Health Plan Operations0
- Health Information0
- Post-Acute & Home-Based Care0
The product at the base, its capabilities in the middle (taller = more mature), and the L1s they land under on top (taller = more of them). Our judgment, not a vendor claim.
- Top · Lands under
- L1AI & Automation · 11
- L2Compliance · 2
- L3Cybersecurity · 1
- L4Enterprise Risk · 1
- Middle · Product capabilities
- P1Governance Console · strong
- P2AI Asset Discovery · emerging
- P3AI Risk Assessment · strong
- P4Regulatory Compliance Management · strong
- P5Factsheets · core
- P6Model Evaluation and Monitoring · strong
- P7Agent Evaluation and Code Risk Scanning · emerging
- Base · Product
- IBM watsonx.governance · IBM
Product capabilities · 7
How to read maturity and confidence
Maturity · how much it covers
- core
- What the product is built around; the capability is covered end to end.
- strong
- Covered well, with a few gaps a buyer would notice.
- partial
- Covers part of the capability; expect to pair it with something else.
- emerging
- New or thin; on the roadmap more than in the product.
Confidence · how well it is evidenced
- Evidence confidence: high
- The vendor's own documentation describes this module doing it.
- Evidence confidence: medium
- Documented, but how far it reaches into the capability is our reading.
- Evidence confidence: low
- Our judgment; we found no public page that confirms it.
- PC-770.10
Governance Console
Evidence confidence: mediumMaturity: strongA record of AI use cases and the agents and models behind them, linked to risks, controls and policies, with runtime controls in watsonx Orchestrate tied back to the same records.
Vendor page: ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance ↗ - PC-770.20
AI Asset Discovery
Evidence confidence: highMaturity: emergingFinds agents and their tools, foundation models, MCP servers and knowledge bases on connected platforms such as Amazon Bedrock, Azure AI Foundry, Google Cloud and watsonx Orchestrate, and adds them to the inventory.
Vendor page: ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance ↗ - PC-770.30
AI Risk Assessment
Evidence confidence: highMaturity: strongRisk assessments of AI use cases against a supplied AI risk taxonomy that an organization can extend with its own categories.
Vendor page: ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance ↗ - PC-770.40
Regulatory Compliance Management
Evidence confidence: mediumMaturity: strongTies AI use cases to obligations under regulations and standards such as the EU AI Act, NIST AI RMF and ISO 42001, with AI-assisted review of the evidence and the final call left to a person.
Vendor page: ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance ↗ - PC-770.50
Factsheets
Evidence confidence: highMaturity: coreLifecycle records written automatically as a model is built and changed, which can be exported for reviewers and auditors.
Vendor page: ibm.com/products/watsonx-governance/model-governance ↗ - PC-770.60
Model Evaluation and Monitoring
Evidence confidence: highMaturity: strongThreshold checks on drift, quality and harmful content for predictive and generative models, including ones built in other tools or served by Amazon Bedrock, Microsoft Azure and OpenAI.
Vendor page: ibm.com/products/watsonx-governance/model-governance ↗ - PC-770.70
Agent Evaluation and Code Risk Scanning
Evidence confidence: highMaturity: emergingBrings agent evaluation scores from Langfuse and Arize AX in against governance controls, and runs static analysis on agents found in connected GitHub repositories to show which OWASP agentic risk categories apply.
Vendor page: ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance ↗
Sources · checked
The public vendor documentation this mapping is based on. Maturity and confidence are our judgment, not the vendor's claim.
- IBM watsonx.governance www.ibm.com/products/watsonx-governance
- Model Governance - IBM watsonx.governance www.ibm.com/products/watsonx-governance/model-governance
- New in IBM watsonx.governance: Govern AI agents as you build, expand accountability and streamline compliance www.ibm.com/new/announcements/new-in-ibm-watsonx-governance-govern-ai-agents-as-you-build-expand-accountability-and-streamline-compliance