The decision at the center
Which permissions are justified by the agent's job, and who is accountable when it acts?
The conversation
The session looks past the chat interface to the identities, tools, and downstream permissions that create real exposure. It gives leaders a practical way to ask for evidence without turning the discussion into a product checklist.
What the audience can take away
- Map the requesting person, executing identity, and approving authority.
- Spot excessive permissions and unclear ownership.
- Test an end-to-end action boundary with synthetic data.
- Prepare a usable revocation and exception-handling process.
Possible format
Discuss an executive keynote or a cross-functional working session. Examples can be tailored to the audience without connecting to live private systems.
Questions for your planning brief
- What kinds of agents are deployed or planned?
- Which systems can they read or change?
- Who owns identity and approval decisions across those systems?
Read before the conversation
Your AI Agents Have Keys to Everything. Nobody's Watching the Doors.
A connected agent needs an accountable owner and a bounded identity. Start with what it can reach, then test what it is allowed to do.