Topic starter
27/10/2026 7:06 pm
TL;DR: JNUC 2026 Day 2 centered on AI governance, third-party app management and agentic admin workflows, according to Jamf, while the Education State of the Union framed school IT as an accountability problem tied to identity, device management and digital governance. That mix shows governance is moving from policy language to operational control.
Editorial analysis by NHI Mgmt Group, based on content published by Jamf: “JNUC 2026 Day 2 recap”.
Key questions
Q: How should security teams govern third-party apps in managed device fleets?
A: Treat third-party app deployment as a lifecycle control, not a one-time approval.
Q: Why do AI-supported workflows make privileged access harder to manage?
A: AI-supported workflows can multiply the number of actions taken on behalf of one subject, which makes privilege easier to misuse and harder to attribute.
Q: What breaks when device management is separated from identity management?
A: Revocation becomes too slow and incomplete.
Practitioner guidance
- Govern third-party app intake and update timing Create a formal approval and update policy for software deployed through blueprints or patch automation, including ownership, review, and rollback criteria.
- Separate human approval from AI execution rights Limit AI-assisted admin workflows to the minimum permissions needed for the task and require clear logging for every action the workflow can trigger.
- Tie identity controls to fleet governance outcomes Measure whether login friction, device state and policy enforcement actually improve the operational result you care about, rather than tracking each control in isolation.
Bottom line: JNUC Day 2 shows governance moving into the operational layer, where app control, identity and AI-assisted administration have to work together.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
28/10/2026 9:29 pm
AI governance is becoming an operating discipline, not a committee function. The conference themes show governance moving into the same operational layer as device administration and app control. That matters because AI use in management workflows creates decisions, permissions and remediation paths that now sit inside live infrastructure operations. Where AI can act on systems, the governance model has to describe authority, boundaries and reversal, not just acceptable use.
A few things that frame the scale:
- 52% of respondents see AI security decision-making power shifting toward platform and infrastructure teams rather than the executive suite, according to the 2026 Infrastructure Identity Survey.
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: What should education IT teams measure instead of screen time alone?
A: Measure screen value, meaning whether technology use supports the learning or operational outcome the programme is trying to prove. Activity counts are useful, but they do not show whether identity, device and content controls improved the result. Good governance links control enforcement to outcome evidence.
👉 Read our full editorial: AI governance and third-party app management shape JNUC Day 2