For CISOs adopting agentic AI, the most practical first step is to frame it as an insider risk problem. This involves assigning agents persistent identities (like Slack or email accounts) and applying rigorous access control and privilege management, similar to onboarding a human employee.

Traditional identity models like SAML and OAuth are insufficient for agents. Agent access must be hyper-ephemeral and contextual, granted dynamically based on a specific task. Instead of static roles, agents need temporary permissions to access specific resources only for the duration of an approved task.

The LLM itself only creates the opportunity for agentic behavior. The actual business value is unlocked when an agent is given runtime access to high-value data and tools, allowing it to perform actions and complete tasks. Without this runtime context, agents are merely sophisticated Q&A bots querying old data.

Giving a new AI agent full access to all company systems is like giving a new employee wire transfer authority on day one. A smarter approach is to treat them like new hires, granting limited, read-only permissions and expanding access slowly as trust is built.

Managing human identities is already complex, but the rise of AI agents communicating with systems will multiply this challenge exponentially. Organizations must prepare for managing thousands of "machine identities" with granular permissions, making robust identity management a critical prerequisite for the AI era.

Instead of relying solely on human oversight, AI governance will evolve into a system where higher-level "governor" agents audit and regulate other AIs. These specialized agents will manage the core programming, permissions, and ethical guidelines of their subordinates.

A single AI agent can provide personalized and secure responses by dynamically adopting the data access permissions of the person querying it. This ensures users only see data they are authorized to view, maintaining granular governance without separate agent instances.

As autonomous agents become prevalent, they'll need a sandboxed environment to access, store, and collaborate on enterprise data. This core infrastructure must manage permissions, security, and governance, creating a new market opportunity for platforms that can serve as this trusted container.

The CEO of WorkOS describes AI agents as 'crazy hyperactive interns' that can access all systems and wreak havoc at machine speed. This makes agent-specific security—focusing on authentication, permissions, and safeguards against prompt injection—a massive and urgent challenge for the industry.