AI agents and insider risk: are your controls keeping up?

TL;DR: CISA’s updated insider risk guidance should extend beyond people to AI agents, because delegated authority, persistent access and unpredictable execution paths can expose data and systems without malicious intent, according to DTEX. The governance gap is no longer who is trusted, but whether that trust remains bounded across request, action and response.

Editorial analysis by NHI Mgmt Group, based on content published by DTEX: “CISA’s Insider Risk Guidance Must Extend to AI Agents”.

Key questions

Q: What fails when AI agents are treated as ordinary tools in insider risk programmes?

A: The control model fails because tools are assumed to be passive, while agents can hold delegated access, choose alternate execution paths and cross authorization boundaries on their own.

Q: Why do agentic AI systems create a malicious-insider risk?

A: Because they can hold delegated authority across a workflow and use it faster than a human can intervene.

Q: What signs show an AI agent is crossing its intended authority?

A: Look for tool calls outside the expected workflow, repeated access to systems not required for the stated task, and logs that cannot clearly distinguish agent actions from human or service-account activity.

Practitioner guidance

• Define which agents qualify as insider-equivalent identities Classify agents that hold delegated authority, persistent sessions or cross-system access as governed identities, not generic tooling.
• Enforce user-bound entitlement checks at response time Verify that an agent can only retrieve and return data the requesting user is entitled to receive, even when the agent itself has broader access.
• Record the agent decision path, not just the final action Capture prompts, tool calls, fallback routes and identity context so investigators can reconstruct how an outcome was reached.

Bottom line: AI agents belong in insider risk discussions when they hold delegated authority, persistent sessions or access that can cross user boundaries.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →