Integrated Quality Management within GRC: A Foundation for Responsible Agentic AI

Peter Haenni

29 Oct 2026 — 1 min read

Event-driven SIPOC model auto generated by the ProcessHorizon web app

Governance defines what should be achieved. Risk Management determines what could go wrong. Compliance establishes what must be respected. Quality Management ensures that processes and their outcomes consistently fulfill requirements & intended objectives.

Together, they establish an integrated management system for responsible human & AI-driven enterprise operations.

Event-driven SIPOC model for integrated GRC & Quality Management

Ensure that enterprise human & AI operations consistently produce reliable, compliant, risk-controlled & valuable outcomes.

1. Establish Integrated Quality & GRC Governance

Define quality policy, governance & accountability.

2. Assure Data Quality

Validate data integrity, provenance & fitness for purpose.

3. Assure Process & AI Agent Quality

Validate process design, agent behavior, decision rights & controls.

4. Manage Risks, Compliance & Controls

Assess exposure, enforce controls, resolve nonconformities.

5. Monitor Quality & Outcomes

Evaluate quality, effectiveness & intended outcomes.

6. Improve Enterprise Processes & AI Systems

Implement corrective actions & process improvements.

Embedding Quality Management into GRC provides three principal benefits:

First, it transforms quality from a specialized management function into an enterprise-wide responsibility for achieving intended results.

Second, it connects data quality with process quality & outcome quality, which is essential for responsible Agentic AI.

Third, it makes governance actionable: policies, risks & quality requirements become embedded in the processes through which human and AI agents create value.

Using the following link you can access this sandbox model in the ProcessHorizon web app and adapt it to your needs (easy customizing) and export or print the automagically created visual AllinOne event-driven SIPOC map as a PDF document or share it with your peers: https://app.processhorizon.com/enterprises/msQJebt1a6k8HwC2tkgcszT2/frontend

AI Literacy: The 5-stage event-driven AI Operating & Control model

My objective is for AI users to understand: how information becomes AI intelligence, how intelligence is used to perform tasks & how the entire journey is governed to produce reliable, safe & useful outcomes. The five-stage event-driven AI Operating & Control model follows the analogy of the Vacuum Cleaner sucking

Innovation-driven growth model

Inspired by last year's nobel prize winners in Economic Sciences, Joel Mokyr, Philippe Aghion & Peter Howitt, I am proposing a value chain focusing on the processes & data from Knowledge to Innovation to Process Transformation to Value Creation to Economic Growth and eventually to New Innovation Opportunities.

How to address the Principal– Agent challenge by the Enterprise Action & Delegation Architecture ?

How does management know what its AI agents are doing, why they are doing it, what information they use, what authority they possess, what they produce, who is affected & who remains accountable? The Enterprise Action & Delegation Architecture makes delegation governable from strategy to action. > Enterprise Principal Architecture:

Dynamic Risk & Capital Safe-State Management

The important architectural shift with the banker's algorithm is to treat capital not as a largely fixed annual constraint that business units subsequently consume, but as a continuously recalculated scarce safety resource attached to risk-taking. 1. Assess Risk Change Determine how a material change like a new transaction,