
The Enterprise AI Operating Model After Build 2026: Data, Agents, Governance, and Human Oversight
The capstone: synthesizing Microsoft Build 2026 into a single Enterprise AI Operating Model. EPC Group ties Work IQ, Fabric IQ, Foundry IQ, Agent 365, MAI, MXC, and Aion into one operating discipline — governed, vendor-flexible, and built to last past the next keynote.
The capstone: synthesizing Microsoft Build 2026 into a single Enterprise AI Operating Model. EPC Group ties Work IQ, Fabric IQ, Foundry IQ, Agent 365, MAI, MXC, and Aion into one operating discipline — governed, vendor-flexible, and built to last past the next keynote.

This article is part of the EPC Group Microsoft Build 2026 series. For the full strategic read on Project Solara, the Copilot Super App tease, MAI, Scout, MDASH, and RTX Spark — see the pillar: Project Solara, the Death of Apps, and the One Copilot That Wasn't.
Every enterprise technology event produces two conversations. The first happens during the conference: the demos, the announcements, the social posts, the Slack channels lighting up with screenshots. The second conversation — the one that actually matters — happens afterward, in boardrooms and architecture reviews and budget planning sessions, when someone has to answer the question: "What does this mean for us, and what do we actually do next?"
I have had hundreds of versions of that second conversation over the last 29 years. And the one I keep having now, after Microsoft Build 2026 in San Francisco, is different from anything I've had before. Not because the technology is more impressive — though it is. Because the scope of what enterprises have to decide has fundamentally changed.
The organizations that will succeed with AI in the next three years are not the ones that pick the best model or move fastest on a pilot. They're the ones that answer a harder question: what is our AI operating model?
That's not a technology question. It is a strategy, governance, architecture, and organizational design question. And Build 2026 gave us enough to see exactly what the answer has to include.
The frame that most organizations are still using is: "We need to choose AI tools and figure out how to use them." That frame leads to a fragmented collection of pilots, uncoordinated deployments, duplicate costs, and governance gaps that become visible only when something goes wrong.
The frame that Build 2026 confirms is necessary is different: "We need to design an AI operating model — the strategy, architecture, data foundation, governance structure, change management approach, and measurement system that allows AI to function as a reliable, governed, scalable part of how we operate."
These are not the same problem, and they don't have the same solution. Picking tools is a procurement exercise. Designing an operating model is an organizational design exercise that happens to involve technology.
The reason this matters more after Build 2026 than it did before is that the Microsoft ecosystem now includes agents that can operate autonomously, act in the moment without human instruction, access your operational data continuously, and send communications, modify records, and trigger workflows in your name. Scout operates across your cloud, desktop, and web; it preps meetings, flags deadlines, spots stalled decisions — without needing to be prompted each time. Operations agents in Fabric are now GA, making policy-based decisions and taking action on your live operational data. Work IQ allows agents to reason across your Microsoft 365 environment with API endpoints now GA.
When AI can act — not just answer — the governance framework is not a nice-to-have. It is the only thing standing between an intelligent system and an unintended consequence.
The framework EPC Group uses for Virtual Chief AI Officer engagements — our vCAIO practice — has evolved through real deployments with enterprise clients across industries. Build 2026 confirmed and extended every layer. Here is how the model assembles.
The strategy layer answers the questions that precede every technology decision: What problems are we solving? What outcomes define success? How does AI capability map to competitive advantage in our specific context?
The Build 2026 landscape includes capabilities across Microsoft 365 (Copilot with Agent Mode now default in Word, Excel, and PowerPoint; Cowork for proactive task management; Scout as the first Autopilot), Azure AI (Foundry, the cloud-based MAI model family, the Microsoft IQ intelligence umbrella — Work IQ, Fabric IQ, Foundry IQ, and Web IQ), data and analytics (Fabric, Fabric IQ now GA, Power BI semantic models, Ontologies), and security (Defender, Purview, Entra, Intune, Agent 365 now extended at Build with the Agent 365 SDK, MDASH). The breadth is intentional — Microsoft is positioning this as a complete enterprise AI stack, not a collection of point solutions.
Your strategy layer should define: which capabilities are board-level priorities (likely agentic automation and Copilot productivity for most enterprises), which are near-term pilots (operations agents in Fabric, Work IQ integrations), and which require foundational work before they're relevant (agentic apps on HorizonDB, Windows local AI with MXC).
The architecture layer defines how the components assemble into a coherent, governed system rather than a collection of independent deployments.
As I detailed in our Build 2026 Azure architect article, the governed agentic application pattern runs through eight layers: UI/interface, Entra identity, Foundry agent runtime, knowledge layer (Foundry IQ — the unified SLA-backed retrieval endpoint unifying Work IQ, Fabric IQ, Azure SQL, File Search, and MCP sources, with Web IQ for real-time global grounding; plus Fabric semantic models, OneLake, Ontologies), tool layer (Real-Time Intelligence, Work IQ), data layer (HorizonDB, Cosmos DB, PostgreSQL, Database Hub in Fabric), evaluation and governance (Foundry Control Plane observability, guardrails, ACS and ASSERT open trust stack, cost monitoring), and security and compliance (Defender, Purview, Intune via Agent 365 — GA since May 1, extended at Build with the Agent 365 SDK).
The critical architectural discipline is ensuring that AI capabilities do not create parallel infrastructure that lives outside your governance perimeter. Every agent should have an Entra identity. Every agent action should be loggable. Every data source an agent accesses should be within the governed data estate. The architecture layer is where you enforce this from the beginning rather than trying to retrofit it later.
Microsoft Execution Containers (MXC) extend this governance to the device level — agents on Windows declare what they can access, and containment is enforced at runtime. Native integration between MXC and Agent 365 (delivering Defender, Entra, Intune, and Purview protections) is targeted for July preview, so plan your device-layer governance timeline accordingly — it's coming, but not at Build GA. Windows 365 for Agents is GA within Agent 365, providing secure managed Cloud PCs for computer-using agents beyond the local device.
Every AI operating model is built on a data foundation. If that foundation is fragile, ungoverned, or incomplete, the AI operating model will produce unreliable outputs at scale, continuously, in ways that are hard to detect and harder to remediate.
The data foundation layer has three components in the Build 2026 context:
OneLake and Fabric as the unified AI-ready estate. Every meaningful data source — relational operational data, analytics, real-time signals, document stores — should have a governed path into OneLake. Database Hub in Fabric (private preview) provides the bridge for relational sources. Shortcuts to SharePoint and OneDrive are now GA. The goal is a single AI-ready data lake that agents and semantic models work from, not a collection of siloed sources that each require separate integration.
Certified Power BI semantic models. As I covered in our operations agents in Fabric article, the semantic model is the contract between your data and your AI. Certified means business-approved definitions, governed refresh schedules, documented measures, and IT accountability. If your semantic models aren't certified, your agents aren't grounded in trustworthy business logic.
Ontologies. This is the layer most organizations are furthest behind on. Ontologies in Fabric define business entities and their relationships — what a "healthy deal" means, how a "project at risk" is characterized, what a "high-value customer" is. Without this layer, agents reason against raw data structures. With it, they reason in your operational language. The gap between these two is the gap between a clever tool and a reliable business capability.
Governance in the AI operating model means something more specific than compliance. It means: how do we ensure that AI systems behave according to our policies, that their actions are attributable, that they operate within defined boundaries, and that when something goes wrong we have the audit record and the accountability structure to respond?
The Build 2026 governance stack is comprehensive and, importantly, increasingly open. Agent 365 went GA on May 1, 2026, as the unified control plane for observing, governing, and securing agents — providing a registry and visual map of deployed agents, using Entra, Defender, and Intune, and surfacing unmanaged local agents. The Agent 365 SDK reached GA at Build, extending the programmatic surface for agent governance. Every agent in the Scout/Autopilot model is bound to its own Entra identity for attribution. Work IQ uses a Rego-based policy engine for fine-grained, context-aware rules per request — every tool invocation logged and evaluated against policy. MDASH provides agentic security scanning with Defender integration.
Build 2026 also delivered two new open-source governance standards that belong in every enterprise AI architecture conversation. ACS (Agent Control Specification) gives runtimes a deterministic allow/deny decision at five agent lifecycle checkpoints — input, LLM invocation, state transitions, tool execution, and output. This is a hard gate, not a probabilistic guardrail. Either the action is allowed by the specification or it isn't. ASSERT (Adaptive Spec-driven Scoring for Evaluation and Regression Testing) converts plain-text behavioral specifications into executable test suites that run in CI/CD across LangChain, CrewAI, LiteLLM, OpenAI, and other frameworks. ACS defines what agents should do. ASSERT verifies continuously that they actually do it. Together they form what Microsoft calls the open trust stack — and they're the difference between an agent governance posture that's auditable and one that's aspirational.
The governance failure mode I see most often in enterprise AI deployments is not a technical failure. It is an institutional failure: organizations deploy AI capabilities with technology governance (permissions, audit logs, data classification) but without operational governance (who owns agent behavior, what's the escalation path when an agent acts incorrectly, how does the audit record translate into accountability). Both are required.
The EPC Group Purview and Entra governance practice exists precisely because these are different problems with different owners. Technology governance is an IT responsibility. Operational governance is a business responsibility. The vCAIO function is what bridges them.
This is the layer that technology conferences almost never discuss — and it's the layer where most AI initiatives fail in practice.
The Telsyte survey data cited in Build 2026 reporting is worth sitting with: fewer than one third of adults say they are comfortable with AI managing daily life. Trust, security, and privacy are the top barriers. These are not concerns that better model performance addresses. They are human concerns that require human responses: communication, transparency, training, demonstrated accountability, and visible governance.
Copilot Agent Mode is now default in Word, Excel, and PowerPoint. Cowork proactively proposes work. Scout prepares your meetings and flags your deadlines before you ask. For employees who haven't been part of the implementation decision, these capabilities don't feel like productivity improvements — they feel like surveillance with a friendly interface.
Change management in the AI operating model means: communicating what agents can and cannot do before employees encounter them; designing onboarding that builds trust rather than demanding it; creating visible feedback channels so employees can flag when AI behavior doesn't match expectations; and celebrating early wins in ways that make the capability feel like a professional amplifier rather than a replacement.
EPC Group's 30-Day Copilot and M365 Tenant Hardening Accelerator includes a change management component precisely because the technology deployment without the human adoption work consistently underperforms against potential.
The measurement layer defines how you know the AI operating model is working — and what you do when it isn't.
Measurement in this context has three dimensions:
Capability performance. Are the AI systems doing what they're designed to do? Are Copilot users generating work product faster and at higher quality? Are operations agents detecting the anomalies they're designed to detect? Are the grounding sources producing accurate recommendations?
Governance performance. Are policy violations being detected and remediated? Is the audit record complete? Are escalation paths being used appropriately? Are human approval gates functioning as designed?
Business outcomes. What is the measurable impact on the business metrics that justified the investment? Revenue per seller, close rates, project delivery cycle time, customer retention rates, operational exception handling time — these are the numbers that justify the operating model investment to the board.
Foundry Control Plane observability and cost monitoring are the technical instrumentation layer. The business measurement layer requires a separate design effort with the executives who own the outcomes. EPC Group's vCAIO engagements include a measurement framework as a deliverable — because without it, AI investments are perpetual pilots that never graduate to operating infrastructure.
Let me make this concrete. Here is how the specific Build 2026 announcements map to the six layers:
Strategy: Copilot super app (summer preview), Agent Mode default, Cowork, Scout/Autopilot, MAI model family in Foundry — these define the productivity and agentic automation capabilities your strategy layer should evaluate first.
Architecture: Microsoft IQ (Work IQ + Fabric IQ + Foundry IQ + Web IQ) as the unified intelligence foundation — with Foundry IQ GA as the single SLA-backed retrieval endpoint; Foundry as the governed agent runtime; Entra identity for every agent; MXC for device-level containment (Agent 365 integration targeting July preview); Windows 365 for Agents (GA); Agent 365 (GA May 1, SDK GA at Build) as the management plane.
Data Foundation: Fabric and OneLake as the unified AI-ready estate; Power BI semantic models and Ontologies as the knowledge layer; Database Hub in Fabric bridging operational data; HorizonDB and Cosmos DB agent memory toolkit for AI-native application data.
Governance: Agent 365 (GA May 1; SDK extended at Build) with Defender/Entra/Intune/Purview; ACS open-source deterministic checkpoints; ASSERT open-source regression testing; Work IQ's Rego-based policy engine; Foundry Control Plane audit and observability; MDASH for agentic security scanning; Entra identity per agent for attribution.
Adoption: Copilot change management, executive communication on Scout/Autopilot capabilities and constraints, Work IQ API rollout for developers, Surface RTX Spark Dev Box for developer enablement.
Measurement: Foundry Control Plane cost monitoring and observability, Power BI reporting on AI-assisted business outcomes, governance audit reporting from Purview.
The organizations that will get the most value from the Build 2026 announcements in the shortest time are not the ones that try to deploy everything at once. They're the ones that sequence intelligently.
Map your current state across all six layers. Where are your semantic models today — certified and governed, or scattered and personal? Is your Fabric environment established, or is data still fragmented across disconnected services? What agents or AI capabilities are already deployed, and what governance do they have? What are the top three business outcomes your leadership team would prioritize for AI investment?
The output of the Assess phase is an honest picture of your readiness — not a list of what's possible, but a map of what's ready and what's not. EPC Group's readiness assessments typically surface 3–5 specific foundation gaps that need to close before any agentic deployment can be responsible.
With readiness mapped, design the architecture and governance model for your first production AI capability. This typically means: selecting the first operations agent or Copilot workflow to build, designing the semantic model governance required to support it, defining the policy layer (approval gates, escalation paths, audit requirements), and establishing the measurement framework so you'll know at day 90 whether it's working.
The Design phase should involve your security, compliance, operations, and finance stakeholders — not just IT and the AI team. The governance design decisions made here will be harder to change once the system is in production.
Deploy the first production capability with the governance model in place. Not a demo. Not a sandbox. A real workload, on real data, with real policies, real audit logging, and real business users. Monitor performance against the measurement framework from day one. Capture lessons learned. Use the pilot results to validate or adjust the operating model design before broader rollout.
The 90-day roadmap is not a complete AI transformation. It is proof that your organization can deploy AI responsibly — and that proof is the foundation for everything that comes after it.
Every layer of the AI operating model requires judgment at the intersection of technology and business strategy. That judgment is rare inside most enterprises — not because enterprises lack talent, but because the combination of deep Microsoft platform expertise, enterprise architecture experience, AI governance practice, and executive communication skill is genuinely difficult to hire for and maintain as a full-time capability when the technology evolves as fast as it does now.
EPC Group's Virtual Chief AI Officer engagement model provides that judgment on a fractional basis. The vCAIO function owns the AI operating model design, coordinates across layers, reports to executive stakeholders, and ensures that the technology decisions are made in service of business outcomes rather than in spite of them. It's the difference between a collection of AI pilots that each department runs independently and an AI operating model that the organization runs coherently.
After Build 2026, the scope of that role expanded. The vCAIO now has to hold a coherent view across Copilot and Agent 365 (the M365 and agent management layer), Foundry and the cloud-based MAI model family plus the local Aion models for Windows (the AI model layers), Foundry IQ and the full Microsoft IQ stack (the knowledge and retrieval layer), Fabric and Power BI (the data intelligence layer), MXC and Windows 365 for Agents (the device and containment layer), ACS and ASSERT (the behavioral governance layer), and the full security stack (Defender, Purview, Entra, Intune, MDASH). No single vendor relationship, internal IT team, or consulting engagement covers all of that. The vCAIO function does.
Microsoft Build 2026 delivered more production-ready enterprise AI capability in two days than most of the prior three years combined. Operations agents in Fabric are GA. Fabric IQ is GA. Foundry IQ — the unified SLA-backed knowledge retrieval layer — is GA. Work IQ APIs are GA. Foundry Control Plane observability is GA. Windows 365 for Agents is GA. The Agent 365 SDK is GA. ACS and ASSERT are open-source and ready to implement today. The technology is ready.
The question is whether enterprise organizations are ready for the technology — not in the sense of whether they can run the demos, but whether they have the operating model required to deploy AI responsibly at scale, with governance that regulators, boards, and employees can trust.
That readiness is built layer by layer: strategy that connects AI capability to business outcomes, architecture that enforces governance from the beginning, a data foundation that makes AI trustworthy rather than confidently wrong, governance that makes AI accountable rather than opaque, change management that makes AI adopted rather than feared, and measurement that makes AI improvable rather than perpetually provisional.
EPC Group has been building that operating model with enterprise clients for years. Build 2026 raised the ceiling on what's possible. It also raised the stakes on what's required.
For more on the specific components that feed into this operating model:
Q: What is a Virtual Chief AI Officer (vCAIO), and when does an enterprise need one?
A: The vCAIO is a fractional executive function that owns the AI operating model design, coordinates across the technology and business layers of AI deployment, and provides strategic guidance to executive stakeholders. Enterprises benefit most when they have significant AI activity underway but lack the internal combination of deep Microsoft platform expertise, governance practice, and executive-level AI strategy capability. EPC Group's vCAIO engagement is typically a fit for organizations with 500+ employees actively deploying Microsoft AI capabilities.
Q: How is an AI operating model different from an AI strategy?
A: An AI strategy defines what you want to accomplish with AI and why. An AI operating model defines how AI actually functions as part of your organization — including the architecture, governance, data foundation, change management processes, and measurement systems required to make it work reliably at scale. Strategy without operating model produces impressive pilots and disappointing production deployments.
Q: Should we wait for more capabilities to mature before building the operating model?
A: No. The foundation work — data governance, semantic model certification, Entra and Purview configuration, Fabric environment setup — takes time regardless of which agents or AI capabilities you ultimately deploy. Starting the foundation work now positions you to deploy faster when you're ready, rather than discovering the foundation gaps after you've committed to a deployment timeline.
Q: How does Entra identity management relate to AI agents specifically?
A: In the Build 2026 architecture, every agent is designed to have its own Entra identity. This means every action an agent takes is attributable — you can audit what the agent did, when, with what data, and under whose authority. Without per-agent Entra identities, agent actions are effectively unattributable in your audit record, which creates compliance exposure in regulated industries.
Q: What is the relationship between Copilot and the broader AI operating model?
A: Copilot (now with Agent Mode default across Word, Excel, PowerPoint, and the Cowork/Scout autopilot capabilities) is the user-facing layer of the operating model — the interface through which most employees will interact with AI first. The broader operating model — Fabric, Foundry, Work IQ, Entra, Purview, Agent 365 — is the infrastructure that makes Copilot trustworthy, governable, and grounded in your organization's actual data and policies. The two are not separable; Copilot without the operating model infrastructure underneath it is a capable tool without a foundation.
Ready to design your Enterprise AI Operating Model? EPC Group's Virtual Chief AI Officer engagements are built for exactly this moment.
contact@epcgroup.net · 888-381-9725 · www.epcgroup.net
Microsoft Build 2026 raised the ceiling on what agentic AI can do across the Microsoft estate — and the floor on what your tenant has to be to deploy it safely. EPC Group has been doing this work for 29 years across Fortune 500 and federal organizations, with six Microsoft Solutions Partner designations and a perfect 100 NPS on G2.
If any of the following sound like your next 90 days, that is exactly the work we do:
Email contact@epcgroup.net, call 888-381-9725, or request a consultation. Senior architects only — no offshore handoff, no junior account managers.
AFTER BUILD 2026, YOUR ENTERPRISE HAS AN OPERATING MODEL DECISION TO MAKE — NOT A TOOL DECISION.
I've been saying for months that the frame most organizations are using for AI is wrong. "We need to pick AI tools and figure out how to use them" is a procurement frame. It leads to fragmented pilots, duplicate costs, uncoordinated governance, and gaps that only become visible when something goes wrong.
The frame Build 2026 confirms is necessary: "We need an AI operating model."
Not a strategy deck. Not a vendor selection matrix. An operating model — the strategy, architecture, data foundation, governance structure, change management approach, and measurement system that allows AI to function as a reliable, governed, scalable part of how the business actually operates.
WHY THIS CHANGED AT BUILD 2026
Because AI can now act, not just answer. Operations agents in Fabric are GA — they detect anomalies, reason over live context, and take action without waiting to be asked. Scout is live for Frontier customers, proactively preparing meetings, flagging deadlines, spotting stalled decisions — without needing to be prompted each time. Work IQ APIs are GA, letting agents reason across your entire Microsoft 365 environment. Every agent gets its own Entra identity. Every action is loggable.
When AI can act at scale on your real operational data, "we'll figure out governance later" is not a strategy. It is a liability.
THE SIX LAYERS
The operating model I use in EPC Group's Virtual Chief AI Officer engagements has six layers. Build 2026 gave us the components to close every one.
STRATEGY — Map the Build 2026 capabilities to real business outcomes: Copilot Agent Mode + Cowork + Scout for productivity, Fabric operations agents for operational automation, Foundry for AI application development. Prioritize the ones that connect to board-level metrics.
ARCHITECTURE — The governed agentic stack runs through Entra identity, Foundry agent runtime, Foundry IQ (the unified SLA-backed retrieval endpoint for Work IQ + Fabric IQ + Azure SQL + File Search + MCP + Web IQ), Fabric semantic models and OneLake, Real-Time Intelligence, HorizonDB/Cosmos DB data layer, Foundry Control Plane observability, and Agent 365 (GA May 1; SDK extended at Build) security. MXC device-level containment with Agent 365 integration ships in July. Design this as an integrated system, not a collection of independent deployments.
DATA FOUNDATION — Certified Power BI semantic models. Ontologies that define your business entities. OneLake as your unified AI-ready data lake. This is the work most organizations have deferred, and it is the work that determines whether your agents are trustworthy or confidently wrong.
GOVERNANCE — Agent 365 (GA since May 1; SDK extended at Build) delivers Defender, Entra, Intune, and Purview to agents as a management plane. Work IQ uses Rego-based policy rules per request. MDASH provides agentic security scanning with Defender integration. The open trust stack — ACS for deterministic allow/deny at five lifecycle checkpoints, ASSERT for behavioral regression testing in CI/CD — is open source and available today. The governance stack exists. Configuring it is your responsibility.
ADOPTION AND CHANGE MANAGEMENT — Fewer than one in three adults say they're comfortable with AI managing their daily life. Trust, security, and privacy are the barriers. Better demos don't close that gap. Transparent communication, visible governance, and demonstrated accountability do. This is the layer technology conferences almost never discuss and most deployments fail on.
MEASUREMENT — Foundry Control Plane cost monitoring and observability for capability performance. Purview audit reporting for governance performance. Business outcome metrics — revenue per seller, delivery cycle time, customer retention — for the board.
THE 90-DAY PATH FORWARD
Assess (Days 1–30): Map your actual readiness. Where are your semantic models? Is Fabric established? What governance do your existing AI deployments have?
Design (Days 31–60): Architecture and governance model for the first production capability. Security, compliance, operations, and finance in the room — not just IT.
Pilot (Days 61–90): Real workload, real data, real governance, real measurement. Not a sandbox. Proof that your organization can deploy AI responsibly.
The organizations that will get real value from AI in the next three years are the ones that treat this as an operating model investment, not a tool purchase.
Is your organization designing an AI operating model — or still running pilots that haven't graduated to infrastructure?
#EnterpriseAI #MicrosoftBuild #AIOperatingModel #MicrosoftFabric #AzureAI #Copilot #EPCGroup #vCAIO #AIGovernance #DigitalTransformation #MicrosoftBuild2026
Build 2026 confirmed it: enterprise AI is now an OPERATING MODEL decision, not a tool decision. Strategy + Architecture + Data Foundation + Governance + Adoption + Measurement — six layers, one framework. Full breakdown: [link] #EnterpriseAI #MicrosoftBuild
Founder & Chief AI Architect, EPC Group
Microsoft Press bestselling author with 29 years of enterprise consulting experience.
View Full ProfileMicrosoft Build 2026 unveiled Project Solara, the MAI model family, Scout, MDASH, and a Copilot Super App tease. EPC Group reads what is real, what is hype, and what every regulated enterprise needs to do in the runway before agent-first devices arrive.
AI & InnovationMicrosoft Build 2026 made the agentic shift official: Work IQ, Fabric IQ, Foundry IQ, Agent 365, MAI models, Scout. EPC Group lays out what every CIO must do in the next 90 days to get tenant-ready before agents act across the enterprise.
AI & InnovationWork IQ goes GA June 16 2026. It is the context layer that lets every Microsoft AI agent reach across your tenant. EPC Group explains the Microsoft IQ umbrella, Agent 365 control plane, and the governance work to do before flipping the switch.
Our team of experts can help you implement enterprise-grade ai & innovation solutions tailored to your organization's needs.