ENTERPRISE SECURITY NEEDS TO START GOVERNING WHAT AI AGENTS DO, NOT JUST WHAT THEY CAN ACCESS

Summary from the TLDR IT newsletter

Traditional access controls answer whether an identity has permission, but autonomous agents introduce a second question: whether a permitted action actually matches the user's intent. The piece argues for behavioral governance, sensitive-data controls, audit trails, and targeted human approval for high-impact actions rather than treating AI security as another SSO problem.