Topic starter
22/09/2026 3:43 pm
TL;DR: Agentic AI breaks zero-trust assumptions by planning its own steps, retaining memory, and traversing multiple systems in a single workflow, according to NetFoundry. The control problem is no longer just perimeter defense or prompt scanning, but identity-first governance that binds every agent, endpoint, and MCP server to unique authorization and traceable access.
Editorial analysis by NHI Mgmt Group, based on content published by NetFoundry: “The IT & Security Leader’s Guide to AI Governance”.
Key questions
Q: How should teams govern AI agent handoffs across workflows?
A: They should define each handoff as a governed trust boundary, not a casual message exchange.
Q: Why do shared identities make agentic AI incidents harder to investigate?
A: Shared identities collapse attribution.
Q: What breaks when data controls are built before agent identity is established?
A: Data controls become too broad and too late.
Practitioner guidance
- Define unique agent identities Assign each AI agent, LLM endpoint, and MCP server a distinct cryptographic identity so activity can be traced to a single executor.
- Separate launcher and agent permissions Remove inherited access from the human or service account that starts the agent, then scope the agent to its own explicit authorisations.
- Sequence governance as identity, access, then data Use identity as the first decision layer, then constrain access paths, and only then apply data controls to the reduced surface area.
Bottom line: Agentic AI changes the identity problem because a single workflow can cross many systems while making independent decisions along the way.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 2 days ago by NHI Mgmt Group
22/09/2026 3:43 pm
Identity-first governance is the missing control plane for agentic AI. Agentic systems do not simply consume access, they initiate it across multiple services in one workflow. That breaks zero-trust programmes that still assume a stable network boundary or a single application session. The practical conclusion is that governance must follow the actor, not the perimeter.
A few things that frame the scale:
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security, according to the 2026 Infrastructure Identity Survey.
- 53% of security leaders expect AI to run major portions of their infrastructure autonomously within the next three years, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: What does Zero Trust mean for AI agent identity governance?
A: For AI agents, Zero Trust means every request is authenticated and authorised in context, with access granted only for the specific task and duration required. Long-lived trust, broad entitlements, and reusable tokens all undermine that model. Teams should use Zero Trust to reduce standing privilege and make agent access auditable and disposable.
👉 Read our full editorial: Identity-first governance is the missing layer for agentic AI
This post was modified 2 days ago by NHI Mgmt Group