LensReading which lens this session carries.

Function cockpit

Information Technology

Agents resolve, provision and remediate. Humans hold cyber and change authority.

Autonomy0% / 85%

Phase: Phase 4 — Governed autonomy

Run service, identity and infrastructure as a self-healing estate: classification, routine resolution, approved provisioning, telemetry correlation and patch staging are agent work; privileged access, architecture and major incident command remain human.

Trust score

0

Touchless

0%

Human review

0%

Override rate

0%

Capacity released

30-50% reduction in routine service effort, with sustained human investment in architecture and cyber

Accountable human

Chief Information Officer

CoS agent: IT Chief of Staff

Every workflow drawn as a line with its stations and live trains

Line map

Information Technology as a running network

Every workflow is a line.

Enterprise network

Lines running

33

Stations

195

Control gates

34

stations a unit cannot pass without clearing a rule

Interchanges

11

handoffs to another function

Behind timetable

21 of 33

actual cycle time above design

Live signal across 204 units
132 in time62 late10 late and material
auto-cleared in envelope cleared, evidence posted held for a person

Owns ticket work end to end inside Information Technology.

8 agents 82% agentic · ceiling 93%orchestrated by Service Desk Orchestratorhuman owner Director, Service Desk
13 in time7 late1 late and material
IT1ATicket-to-ResolutionTransactional · 8 stations

Intake

2 live

Classify

3 live

Retrieve knowledge

1 live

Auto-resolve

36 q

Escalate to tier 2

1 live

Resolve

4 q

Confirm

44 q

Close

2 live

IT1BPassword ResetTransactional · 5 stations

Request

3 live

Verify identity

29 q

Reset

2 live

Notify

2 live

Log

1 live

IT1CEscalation HandlingTransactional · 4 stations

Detect breach risk

35 q

Reroute

2 live

Notify owner

1 live

Track

1 live

Owns access request work end to end inside Information Technology.

9 agents 84% agentic · ceiling 86%orchestrated by Identity Orchestratorhuman owner Director, Identity & Access Management
9 in time8 late0 late and material
IT2AJoiner ProvisioningTransactional · 6 stations

Receive trigger

13 q

Derive role

1 live

Provision standard

1 live

Duty check

1 live

Manager approve exception

1 live

Notify

1 live

IT2BLeaver DeprovisioningTransactional · 6 stations

Receive trigger

4 live

Disable access

1 live

Revoke tokens

2 q

Transfer ownership

34 q

Confirm

1 live

Evidence

30 q

IT2CPrivileged Access RequestTransactional · 7 stations

Request

1 live

Justify

2 live

Duty check

1 live

Owner approve

1 live

Grant time-boxed

1 live

Auto-revoke

28 q

Log

24 q

Owns device work end to end inside Information Technology.

8 agents 74% agentic · ceiling 90%orchestrated by End-User Compute Orchestratorhuman owner Director, Workplace Technology
16 in time3 late1 late and material
IT3ADevice ProvisioningTransactional · 7 stations

Trigger

20 q

Select build

42 q

Order

1 live

Image

4 live

Ship

1 live

Enroll

1 live

Confirm

2 live

IT3BPatch CycleTransactional · 5 stations

Detect patch

3 live

Ring test

1 live

Deploy

1 live

Verify compliance

9 q

Escalate holdout

1 live

IT3CDevice RefreshTransactional · 7 stations

Detect age

27 q

Model cost

5 q

Budget check

1 live

Approve

6 q

Order

1 live

Swap

3 live

Retire

24 q

Owns infrastructure change work end to end inside Information Technology.

8 agents 78% agentic · ceiling 88%orchestrated by Infrastructure Orchestratorhuman owner Director, Cloud Infrastructure
13 in time6 late0 late and material
IT4ACapacity ResponseTransactional · 5 stations

Forecast

1 live

Scale in-policy

1 live

Escalate spend

1 live

Apply

1 live

Verify

5 q

IT4BCost OptimizationTransactional · 6 stations

Detect waste

42 q

Model saving

41 q

Auto-remediate low risk

2 live

Owner approve

8 q

Apply

1 live

Verify saving

3 live

IT4CBackup AssuranceTransactional · 5 stations

Run backup

1 live

Verify restore

1 live

Flag failure

1 live

Remediate

2 live

Evidence

4 live

Owns network change work end to end inside Information Technology.

8 agents 76% agentic · ceiling 82%orchestrated by Network Orchestratorhuman owner Director, Network Services
12 in time5 late2 late and material
IT5ANetwork IncidentTransactional · 6 stations

Detect

1 live

Correlate

3 q

Auto-remediate known

1 live

Escalate

1 live

Restore

13 q

Post-mortem

1 live

IT5BConfiguration ChangeTransactional · 7 stations

Request

3 live

Impact scan

46 q

Peer review

1 live

Change board approve

2 live

Apply

2 live

Verify

13 q

Auto-revert on failure

16 q

IT5CCircuit LifecycleTransactional · 6 stations

Detect need

2 live

Order

5 q

Install

2 live

Test

2 live

Activate

9 q

Bill verify

1 live

Owns application change work end to end inside Information Technology.

8 agents 72% agentic · ceiling 84%orchestrated by Application Management Orchestratorhuman owner Director, Application Services
14 in time7 late1 late and material
IT6AApplication IncidentTransactional · 7 stations

Detect

0 q

Triage

20 q

Auto-remediate

42 q

Vendor escalate

2 live

Human escalate

2 live

Restore

24 q

Post-mortem

3 live

IT6BApplication ReleaseTransactional · 6 stations

Schedule

1 live

Impact scan

1 live

Test

2 live

Change board approve

2 q

Deploy

2 live

Verify

1 live

IT6CApplication RetirementTransactional · 6 stations

Detect obsolescence

0 q

Map dependencies

1 live

Business owner approve

3 live

Migrate

1 live

Decommission

2 live

Archive

1 live

Owns alert work end to end inside Information Technology.

9 agents 80% agentic · ceiling 85%orchestrated by Security Operations Orchestratorhuman owner Director, Security Operations
9 in time9 late1 late and material
IT7ASecurity Alert TriageTransactional · 7 stations

Ingest

1 live

Enrich

28 q

Score

1 live

Auto-close false positive

2 live

Contain in-policy

1 live

Analyst review

1 live

Escalate incident

1 live

IT7BPhishing Campaign ResponseTransactional · 6 stations

Detect

28 q

Quarantine

1 live

Purge mailboxes

9 q

Notify users

2 live

Block indicators

2 live

Report

2 live

IT7CMajor IncidentTransactional · 8 stations

Declare

7 q

Contain

2 live

Human commander

4 q

Assess exposure

1 live

Legal notify

1 live

Restore

14 q

Post-mortem

22 q

Board report

1 live

Owns pipeline run work end to end inside Information Technology.

8 agents 77% agentic · ceiling 87%orchestrated by Data Platform Orchestratorhuman owner Director, Data Platform
13 in time5 late1 late and material
IT8APipeline IncidentTransactional · 6 stations

Detect failure

2 live

Diagnose

33 q

Auto-retry

1 live

Backfill

1 live

Escalate

4 live

Restore

1 live

IT8BData Product ReleaseTransactional · 6 stations

Request

8 q

Model schema

3 live

Quality gate

1 live

Lineage register

35 q

Owner approve

2 q

Publish

32 q

IT8CData Access GrantTransactional · 5 stations

Request

2 live

Classify sensitivity

31 q

Steward approve

1 live

Grant time-boxed

14 q

Auto-review

3 live

Owns license position work end to end inside Information Technology.

8 agents 87% agentic · ceiling 91%orchestrated by Asset Orchestratorhuman owner Director, IT Asset Management
14 in time3 late0 late and material
IT9ALicense ReconciliationTransactional · 6 stations

Discover installs

40 q

Match entitlements

2 live

Detect gap

3 live

Reharvest unused

32 q

Escalate shortfall

7 q

True-up

3 live

IT9BRenewal CycleTransactional · 5 stations

Detect renewal

1 live

Model need

3 live

Recommend

2 q

Owner approve

1 q

Renew

1 live

IT9CAsset Audit ResponseTransactional · 4 stations

Receive request

2 live

Assemble evidence

1 live

Legal review

1 q

Respond

1 live

Owns change record work end to end inside Information Technology.

8 agents 87% agentic · ceiling 89%orchestrated by Change Orchestratorhuman owner Director, Change Management
16 in time7 late0 late and material
IT10AStandard ChangeTransactional · 7 stations

Submit

1 live

Score risk

2 live

Conflict check

1 live

Auto-approve pre-approved

17 q

Implement

2 live

Verify

36 q

Close

1 live

IT10BNormal ChangeTransactional · 7 stations

Submit

2 live

Score risk

39 q

Assemble evidence

4 live

Change board approve

1 live

Implement

36 q

Verify

18 q

Close

25 q

IT10CEmergency ChangeTransactional · 5 stations

Declare

3 live

Implement

3 live

Verify

15 q

Retrospective approve

1 live

Post-mortem

2 live

Owns cost line work end to end inside Information Technology.

8 agents 66% agentic · ceiling 88%orchestrated by IT Finance Orchestratorhuman owner Director, IT Financial Management
3 in time2 late3 late and material
IT11AMonthly ShowbackAnalytical · 5 stations

Attribute cost

36 q

Allocate to business

1 live

Draft readout

29 q

Owner review

1 live

Publish

2 live

IT11BUnit Cost ReadAnalytical · 4 stations

Model cost per service

34 q

Benchmark

1 live

Draft finding

1 live

CIO review

2 q

IT11CSourcing Model PositionJudgment · 5 stations

Frame

44 q

Model options

1 live

Draft position

1 live

Challenge

27 q

CIO ratify

7 q