Agentic AI and identity: what it means for security teams

TL;DR: The Chasing Entropy Podcast season recap says CISOs are increasingly accountable for risk, revenue, and board communication while agentic AI systems raise new questions about tool access, blast radius, and governance, according to 1Password. Identity control is becoming the practical control plane for both human and machine-driven security decisions.

NHIMG editorial — based on content published by 1Password: Chasing Entropy Podcast season one recap

Questions worth separating out

Q: How should security teams govern agentic AI systems that can call tools and APIs?

A: Treat them as delegated runtime actors, not as simple applications.

Q: Why does identity become the control plane in agentic AI environments?

A: Because the risk is carried through who or what can act, on which systems, and under what oversight.

Q: What do security teams get wrong about CISO accountability?

A: They often treat accountability as a reporting issue instead of a control issue.

Practitioner guidance

• Map executive accountability to identity controls Document which roles approve risk, who owns remediation, and which identity events must be surfaced for board-level reporting.
• Inventory agent tool access by action chain List every API, SaaS connector, and production action an agent can reach, then test how those actions combine inside a live session.
• Separate automation from autonomous authority Classify which workflows are fixed, which are human-reviewed, and which can make runtime decisions without approval.

What's in the full article

1Password's full podcast recap covers the operational detail this post intentionally leaves for the source:

• Episode-by-episode examples from sitting CISOs, former CISOs, and advisors on real operational trade-offs
• More detail on the agentic AI conversations, including practical guardrails and review patterns
• The specific incident timelines, burnout stories, and governance tensions that shaped the season's themes
• Listener feedback and reflections that show how practitioners used the episodes in leadership conversations

👉 Read 1Password’s season recap of CISO realities, agentic AI, and security operations →

Agentic AI and identity: what it means for security teams?

Explore further

View Full Forum →  |  NHI Foundation Course →