Things that are invisible until they're not.
Thought leadership on identity governance, cybersecurity controls, and IT audit — from someone who has spent 25 years watching the invisible become very visible.
Start ReadingAI agents are already operating against enterprise and OT systems — holding credentials nobody issued deliberately, crossing boundaries that were supposed to be controls. A practitioner framework for governing non-human identity before the regulator asks.
AI is collapsing the window to patch from five days to five minutes. In an era of AI-powered zero-days and supply chain attacks, your identity security vendor's update cadence is no longer a product detail — it's a risk decision.
The IT General Controls that have governed enterprise technology for decades weren't built for AI Agents. Here's what's breaking — and what to do about it.
AI agents are already operating against enterprise and OT systems — holding credentials nobody issued deliberately, crossing boundaries that were supposed to be controls. A practitioner framework for governing non-human identity before the regulator asks.
AI is collapsing the window to patch from five days to five minutes. In an era of AI-powered zero-days and supply chain attacks, your identity security vendor's update cadence is no longer a product detail — it's a risk decision.
The IT General Controls that have governed enterprise technology for decades weren't built for AI Agents. Here's what's breaking — and what to do about it.