Identity and permissions aren’t enough to govern AI agent behavior
Presented by Box Identity and permissions are no longer enough to secure enterprise AI agents. They govern what an agent can reach, not how it behaves once…
Summary
Presented by Box Identity and permissions are no longer enough to secure enterprise AI agents. They govern what an agent can reach, not how it behaves once it starts working on its own, and an autonomous agent can turn legitimate access of enterprise data into unintended action in seconds. That gap is pushing enterprise AI security from just governing access toward a layered approach that includes governing execution, says Heather Ceylan, chief information security officer at Box. "Access controls and permissions are the foundation, but the challenge is they were designed for humans," Ceylan says.
Positives
- The report adds a new data point to the technology market.
- The development may create new product, research, or competitive opportunities.
Risks & concerns
- That gap is pushing enterprise AI security from just governing access toward a layered approach that includes governing execution, says Heather Ceylan, chief information security officer at Box.