Contact us

Who Owns The Bot?

A office working working on his computer wiht a mirror image of himself and a bot

Automation as an Unmanaged Risk Line on the Balance Sheet Executive Summary Enterprise automation creates value by reducing repetitive work, improving process efficiency and releasing capacity across the organisation. But every bot or automated workflow also creates an ownership obligation. It may execute business logic, hold credentials, process regulated data or produce outputs relied upon elsewhere in the business. When ownership, documentation, access controls and ongoing review are unclear, successful automation can become an unmanaged operational and governance risk. This article explores the rise of shadow automation and argues that enterprises need visibility over what has been automated, named accountability for each automation, proportionate governance and clear processes for reviewing changes and managing failures. Who Owns The Bot? Ask most executive committees how their automation programme is going and the answer comes with the same repeated terminology: the number of bots deployed, the hours returned, the number of processes touched, and the amount of team capacity liberated. A finance analyst who once spent three days a month reconciling intercompany balances now spends an afternoon reviewing exceptions. A claims team that used to rekey data between two systems no longer needs to. Multiply that across a few hundred small automations and the business case looks unarguable. These numbers aren’t wrong and they’re very helpful to the company using automation, but these numbers aren’t the whole picture. The prevailing assumption in most large organisations is that team-level automation can only be good: a quick win with no downside, no carrying cost, and no obligation once it is live. Under that assumption, the only sensible next step for the business is to build more and build faster. But a bot is more than just a productivity gain. It executes business logic, holds credentials, touches regulated data, and produces outputs that other people rely on. Every one of those properties creates an obligation. But obligations that are never assigned to someone do not disappear, they accumulate quietly, in the same way technical debt accumulates, until something breaks and the organisation discovers it cannot answer this basic question: who owns this? Automation With No Owner The pattern is consistent and well-intentioned. Someone identifies a tedious manual process and reaches out for help. They have access to a low-code platform, an RPA licence, a scripting environment, or increasingly an AI agent builder made available under a self-service model. They build something that works, and it saves the team oodles of time. Out of this success, word spreads, and more variants appear in adjacent teams. What does not happen, in most cases, is the assignment of a named owner in a register. When the builder changes teams, leaves the organisation, or takes on a role that does not include maintaining a reconciliation script, the automation continues to run unchanged. Nothing in its behaviour signals the transition, and it may operate correctly for months afterwards. But what has changed is that, now, no one is responsible for it: the automation still performs a business function, but there is no longer anyone assigned to confirm it works, to update it when the process changes, or to answer for its output. That absence of ownership creates risk in three areas: Undocumented business logic. The automation expected decision rules: which records to include, which thresholds trigger an exception, and how to treat an ambiguous field. Those decisions were made by a limited number of people, for reasons that were obvious at the time but often recorded nowhere. So, when the logic is questioned later, for example by an auditor, a regulator, or a customer complaint, the organisation cannot explain its own process, because the explanation left with the person who wrote the script. Orphaned access. Bots need credentials, and in practice they are frequently given standing access under a provisioned account, or under a generic service account created outside the normal identity lifecycle. If left unchecked, the access persists, unattached to any active employee, and often exempted from the password rotation and recertification controls applied to human accounts. Spreading blast radius. The output produced by an (unowned) unattended bot is rarely used only by the team that built it. Often the bot does work that the team produces for an internal or external customer. For example, a file lands in a shared folder, feeds a management report, populates a customer record, or initiates a payment. Even if the automation’s original scope was local, its results can flow through the organisation and beyond, wherever that data is subsequently used by participants in the data chain. Shadow Automation Around a decade ago, shadow IT was identified as a major business risk. Business information tools and services were acquired and run outside the knowledge of the IT function. Organisations built governance to manage it and created a general expectation that if a system mattered to the business, someone was accountable for it. Shadow automation is the same underlying problem, but harder to see. Where an unlisted software subscription was mainly a data or cost exposure, an unlisted bot is actively doing things inside the business, like updating records, sending communications, or initiating transactions. It also tends to leave less of a paper trail, because it is usually built on platforms the organisation already licenses and actively encourages people to use, rather than acquired through an approval process that would have flagged it. And because the tools involved are now genuinely easy to use, automations can be created faster than most governance processes are built to track. But lessons from the shadow IT era still apply today. The problem was that the organisation had no way of knowing what existed and no one could be held accountable when something went wrong. That was addressed through governance, and the same correction is now needed for automation. Why this is a Governance Question, not a Technical One Perhaps the natural response is to treat this as a platform problem and tighten access controls or improve the engineering. But this approach won’t address the actual risk, which

Analysis of automation’s role in the UN SDG’s

How Intelligent Automation is Shaping a Better Future: An Analysis of Automation’s Role in the UN SDGs Executive Summary Core Question: How do Intelligent Automation (IA), Artificial Intelligence (AI), and Robotic Process Automation (RPA) impact the United Nations Sustainable Development Goals (SDGs)? Key Findings: Intelligent Automation acts as a critical accelerator for the UN 2030 agenda. It directly enhances global healthcare diagnostics (SDG 3), personalizes inclusive education (SDG 4), promotes gender equity in curricula (SDG 5), and optimizes renewable energy grids (SDG 7 & 13). However, its deployment introduces socio-economic friction, including a documented 12% increase in the Gini income inequality index and rising data center energy demands. To ensure AI and RPA serve as genuine instruments of social progress, organizations must couple deployment with strategic governance, ethical bias auditing, and explicit renewable energy commitments. The World’s To-Do List: The UN 2030 Agenda In 2015, the United Nations set out what is arguably the most ambitious to-do list in human history. The seventeen Sustainable Development Goals (SDGs) cover everything from ending poverty and hunger to tackling climate change and ensuring quality education for all. These were adopted by every member state, with a 2030 deadline. That deadline is now very close, and progress, while real, has been uneven. Into this picture steps one of the most influential technologies of our time: Intelligent Automation (IA). AI and RPA are no longer confined to corporate efficiency projects. They are already reshaping healthcare, education, agriculture, energy systems, and public services around the world, with measurable effects on the very challenges the SDGs were designed to address. This article makes the case that AI and Automation are genuine instruments of social progress, with real potential to accelerate the SDGs in ways that matter to ordinary people. Despite its complications, automation has a significant impact on society today. Defining Intelligent Automation: Two Technologies Worth Understanding AI (Artificial Intelligence) refers to computer systems that can carry out tasks that normally require human intelligence: recognising images, understanding language, making predictions, and finding patterns in large datasets. It powers everything from medical diagnosis tools to climate models to personalised learning apps. Rather than simulating human thinking, RPA (Robotic Process Automation) mimics human actions on a computer: clicking buttons, entering data, moving files, and filling in forms. By centralising a company’s data to create big datasets, it acts as a digital administrative layer supporting operational efficiency and AI readiness. It is exceptionally good at the kind of repetitive, rules-based administrative tasks that consume enormous amounts of human time in organisations like hospitals, universities, and government departments. The two technologies are commonly used together as Intelligent Automation (IA), with AI providing the intelligence to understand complex, unstructured information, while RPA provides the hands to act on it quickly and consistently. Improving Global Healthcare (SDG 3) Healthcare is one of the clearest examples of AI doing something genuinely useful for people outside of the business world. AI-powered diagnostic tools are helping doctors detect diseases earlier and more accurately than was previously possible. Machine learning algorithms trained on thousands of medical images can identify early-stage cancers, diabetic retinopathy, and other conditions that might otherwise be missed until they become harder to treat. In public health, AI models can predict how infectious diseases will spread through a population, helping health authorities allocate resources before a crisis peaks rather than after. During the COVID-19 pandemic, AI tools were used to track transmission patterns and support vaccine distribution logistics, which is a real-world demonstration of the technology’s potential in global health emergencies. RPA is making healthcare systems more efficient behind the scenes. Hospital administrative processes, such as appointment scheduling, prescription management, insurance claims, and supply chain logistics, are being automated, freeing healthcare workers to spend more time with patients rather than paperwork. Research confirms that AI-enabled remote monitoring, virtual consultations, and automated data analysis are simultaneously improving patient outcomes and reducing costs. The equity dimension here matters. SDG 3 is not only about improving healthcare for those who already have good access; it is also about universal health coverage. AI-powered tools, particularly telemedicine platforms and diagnostic aids, have a genuine capacity to reach the people the current healthcare system routinely fails. Advancing Inclusive Education and Gender Equality (SDGs 4 and 5) Education is another domain where AI’s social impact is tangible and growing. Adaptive learning platforms powered by AI can adjust the pace, style, and content of instruction to match each student’s individual needs and learning patterns. AI’s language translation is expanding access to education for many communities where language barriers have limited students’ opportunities. For students in under-resourced schools, or those who have historically been left behind by one-size-fits-all teaching, this kind of personalisation can be transformative for their learning. Gender equality (SDG 5) is also in play. AI tools can analyse educational content to identify and flag gender biases in textbooks, curricula, and career guidance materials. They can surface patterns, such as the underrepresentation of women in science textbooks, that human reviewers might overlook. AI-powered career-matching and skills-development tools can help women identify and access labour market opportunities in fields where they have historically been underrepresented. On the institutional side, RPA is helping universities and schools run more efficiently. Research from universities in India found that RPA adoption significantly improved operational performance by reducing processing times for attendance management, certificate generation, and student enrolment. Staff freed from these repetitive tasks can redirect their time towards teaching, advising, and supporting students. Driving Economic Growth, Productivity, and Market Inclusion (SDGs 8 and 9) When people talk about AI and the economy, the conversation tends to focus on productivity gains and GDP growth. Research analysing global data from 2000 to 2023 found that automation contributed to a 25% increase in labour productivity across sectors. AI-driven innovation is accelerating product development, optimising supply chains, and enabling entirely new categories of economic activity. But the more interesting question is, who benefits from that growth? SDG 8 is about decent work and economic growth. SDG 9 focuses on