Vonage CISO Andy Ulrich: treat AI agents as managed identities, not privileged
Andy Ulrich of Vonage tells UC Today that AI agents are entering enterprise workflows with access to applications and data, so security teams should enforce established disciplines—identity and access management, patching, incident response and logging—and treat agents as managed identities, moving away from a temporary privileged-user model.
Summary
AI-assisted summary of the linked sourceUlrich describes AI agents as capable of acting faster and more thoroughly than individual employees and recommends treating them like employees for permissioning: organisations may temporarily grant elevated oversight by treating agents as privileged users, but should aim to match an agent’s permissions to the person responsible and review those rights via the same human identity processes.