<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>IT Risk &amp; Controls</title><description>Things that are invisible until they&apos;re not. Thought leadership on identity governance, IT audit, and cybersecurity controls.</description><link>https://itriskandcontrols.com/</link><language>en-us</language><item><title>The Ghost in the Machine: Why AI Agents Are the Next Frontier for IT Audit</title><link>https://itriskandcontrols.com/blog/agentic-ai-audit-perspectives/</link><guid isPermaLink="true">https://itriskandcontrols.com/blog/agentic-ai-audit-perspectives/</guid><description>The IT General Controls that have governed enterprise technology for decades weren&apos;t built for AI Agents. Here&apos;s what&apos;s breaking — and what to do about it.</description><pubDate>Fri, 03 Apr 2026 00:00:00 GMT</pubDate></item><item><title>Things That Are Invisible Until They&apos;re Not</title><link>https://itriskandcontrols.com/blog/welcome/</link><guid isPermaLink="true">https://itriskandcontrols.com/blog/welcome/</guid><description>An introduction to why identity, access, and controls are the silent load-bearing walls of every organization — and what happens when they crack.</description><pubDate>Mon, 30 Mar 2026 00:00:00 GMT</pubDate></item></channel></rss>