“An agent identity needs to be treated as a first-class identity… it needs to have least privilege… just-in-time access… a complete record of everything privileged.”
♫
Said on The Enterprise AI Show
#AuditTuesday GRC Podcast · Worried About Rogue AI? Start with Identity Governance - #AuditTuesday w/ Justin Roy and Jeff Kushner
Audio streams from the publisher’s own feed. Verbatim does not host or copy it.
recommend applying least-privilege and just-in-time access to AI agents, limiting them to only the permissions needed for the task
“An agent identity needs to be treated as a first-class identity… it needs to have least privilege… just-in-time access… a complete record of everything privileged.”
“We need to move to zero standing privileges…just in time access so that if an attacker finds an identity, they can't do anything because the entitlement doesn't exist.”
“We are giving identity and access to agents based on the task… we call this CASA, which is continuous semantic authorization and giving access based on that.”
“Just in time appointments… you send an event like this agent's quoting… you process the appointment just in time.”
The strongest new moments on your topics, in the speakers' own words. Free for three topics.
No card. No password. One-click unsubscribe.
Pro watches up to 25 names or phrases and emails you the morning after they are said.
See Pro, $29 a monthVerbatim quotes a short extract and links to the episode; the episode belongs to its publisher. Remove a show.