Topic starter
09/07/2026 1:40 pm
TL;DR: A private Black Hat USA dinner on August 4 will bring CISOs together to discuss how agentic AI is expanding the identity attack surface and what that means for security teams, according to AuthMind. The real issue is not AI adoption itself, but whether identity governance can cope with runtime decision-making and tool use.
Editorial analysis by NHI Mgmt Group, based on content published by AuthMind: “Meet AuthMind at Black Hat USA 2026”.
Key questions
Q: What breaks when agentic AI is governed like a normal application account?
A: Security controls break down because agentic systems do not behave like fixed-function applications.
Q: Why do agentic systems change the identity risk model for security teams?
A: They change it because access is no longer the only question.
Practitioner guidance
- Map agentic execution paths Identify where AI systems can choose tools, sequence actions, and execute without a human approval gate.
- Define runtime authorisation boundaries Set explicit conditions for when an agent may act, what data it may touch, and which tools it may invoke during a session.
- Review where access reviews stop helping Test whether your recertification process can meaningfully evaluate access that exists only briefly inside a single task.
Bottom line: Agentic AI changes identity risk by introducing runtime decision-making, not just new software or more automation.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
09/07/2026 1:43 pm
Agentic AI collapses the assumption that identity is stable long enough to govern it after the fact. The old model assumes access can be granted, observed, and then reviewed against a durable record of behaviour. That assumption fails when the actor can choose tools and actions at runtime without a human gate. The implication is that governance must move toward issuance-time and execution-time control boundaries, because retrospective review becomes too late to shape the behaviour that matters.
A few things that frame the scale:
- 67% of organisations still rely heavily on static credentials despite the risks they pose to agentic AI deployments, according to the 2026 Infrastructure Identity Survey.
- Only 13% of organisations feel extremely prepared for the reality of agentic AI despite the majority racing toward autonomous adoption, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: Should organisations rework IAM when AI systems begin to act on data?
A: Yes, because AI-connected workflows turn permissions into a runtime risk. IAM teams need to review delegated access, enforce least privilege, and make sure entitlements are traceable to an accountable owner. Without that, AI systems can inherit access that was never designed for autonomous or semi-autonomous use.
👉 Read our full editorial: Agentic AI identity dinner at Black Hat USA on August 4