A cyber incident can start with an authorized AI agent doing exactly what it has permission to do. No attacker required.
Our Chief Strategy Officer, @youngbloodtim, joined Krista Case from @theCUBE to discuss unintended actions and rogue agents in the enterprise.
A few points that stood out:
1️⃣ Runtime control is essential. You need to understand intent and agent reasoning in order to intervene in real time.
2️⃣ Identity needs context. Whose authority is an agent using? Do its permissions fit the task? Who is accountable when it acts?
3️⃣ An AI kill switch needs nuance. Steering an agent back on task, limiting its permissions, and quarantining it are different responses to different levels of risk.
4️⃣ Agent failures belong in your tabletop exercises. Test your team’s ability to detect, contain, and recover from unintended agent actions while keeping the business running.
Tim leaves security leaders with a practical test: could you stop an unsafe action before it runs?
Watch the full conversation: youtube.com/watch?v=ab2eHh…
Our Chief Strategy Officer, @youngbloodtim, joined Krista Case from @theCUBE to discuss unintended actions and rogue agents in the enterprise.
A few points that stood out:
1️⃣ Runtime control is essential. You need to understand intent and agent reasoning in order to intervene in real time.
2️⃣ Identity needs context. Whose authority is an agent using? Do its permissions fit the task? Who is accountable when it acts?
3️⃣ An AI kill switch needs nuance. Steering an agent back on task, limiting its permissions, and quarantining it are different responses to different levels of risk.
4️⃣ Agent failures belong in your tabletop exercises. Test your team’s ability to detect, contain, and recover from unintended agent actions while keeping the business running.
Tim leaves security leaders with a practical test: could you stop an unsafe action before it runs?
Watch the full conversation: youtube.com/watch?v=ab2eHh…