Identity-Centric Security for AI Systems
summary
Argues identity becomes the primary control plane for AI, not a user admin task, and lists ten common failure patterns; non-human identities now outnumber humans and most organizations cannot even enumerate them. Recommends least privilege at scale with just‑in‑time, time‑bound permissions, short‑lived tokens and automated rotation; enforces continuous verification on every hop; ties credential lifecycle to service lifecycle; and requires centralized governance — an AI kill switch plus three‑stage playbooks — to revoke and recover in minutes instead of days.
AI-written summary · about
chapters (12)
- 0:00Identity Is the New Perimeter
- 0:47Why the Old Model Broke
- 2:52Agenda and Framework
- 3:13IAM as Control Plane
- 4:12Least Privilege at Scale
- 5:27Continuous Verification Loop
- 6:35Non Human Identity Crisis
- 9:00Agent Trust Delegation
- 10:18Centralized Governance Kill Switch
- 11:25Architecture Principles and Outcomes
- 12:55Common Failure Patterns
- 14:21Key Takeaways and Close
related talks
21mSecurity in the Age of AI & Copilot
35mIdentity and Access Management for the Decade Ahead
04mYou Don't Need a New Identity Platform for the AI Era
27mSecurity by design for agentic AI: How CISOs stay in control of autonomous systems
25mThe Looming Identity Crisis
20mCIAM for AI: Authn/Authz for Agents
20mSecurity in the Age of Agentic AI
27mFrom Perimeter to Silicon: Why Agentic AI Demands a New Security Model