Essays, analysis, and practitioner perspectives on identity governance, IT audit, and cybersecurity controls.
AI agents are already operating against enterprise and OT systems — holding credentials nobody issued deliberately, crossing boundaries that were supposed to be controls. A practitioner framework for governing non-human identity before the regulator asks.
AI is collapsing the window to patch from five days to five minutes. In an era of AI-powered zero-days and supply chain attacks, your identity security vendor's update cadence is no longer a product detail — it's a risk decision.
The IT General Controls that have governed enterprise technology for decades weren't built for AI Agents. Here's what's breaking — and what to do about it.