It's #AI, and the question we need to be asking is... "Who's watching the agents?"
That was the question on the table Tuesday evening at ELEVATE - IT Leaders & Executives' roundtable event at Zoro.com's Chicago headquarters. And in my experience, most companies can't answer it yet.
Dimple Thakkar led the discussion on protecting enterprise data now that AI agents are doing real work. Brian Ivanov and the Zoro team hosted, and Tom Parker keeps putting together good rooms. Thank you, all three.
My own answer hasn't changed much. An AI agent is a new kind of employee with a browser, API keys, and a service account. In plenty of shops, the main thing holding it back is just a line in a prompt. 😬 You wouldn't hire a person that way.
So, ask the boring questions... What can each agent touch with the credentials it holds today? Who cut the access it doesn't need? Where does its activity get logged, and can it edit that log? Has anyone tried to talk it past its limits before an attacker does? And who owns those answers? If you can't name that person, nobody's watching.
How is your organization handling it? Does agent oversight sit with security, IT, or the business?
https://www.alinedconsulting.com/elevate
#AIGovernance #AgenticAI #cybersecurity #CIO #ITLeadership #security #PrivacyMatters #cloudcomputing #infosec #AlinedConsultingGroup