Druva: Governing AI Agents: Guardrails & Authentication

Name: Druva: Governing AI Agents: Guardrails & Authentication
Uploaded: 2026-07-07T09:42:15-04:00
Duration: 52 s
Description: A practical conversation on governing AI agents — with David Gildea (Druva) and Joseph Holland (Aon), creator of Vectimus. Where agents go wrong, and how to put real guardrails in place. Follow Druva LinkedIn: https://www.linkedin.com/company/druva/ Fa...

Druva

07/07/2026

0 (0%)

Report Like Favorite

TL;DR

Enterprise customers are increasingly worried about the broad access AI agents can acquire, with the risk of something going wrong considered significant at scale.
The security threat model has shifted to roughly 50-50 internal versus external risk, meaning insider misuse — even unintentional — is now as concerning as external attacks.
Supply chain attacks targeting AI agents represent an emerging vector where a well-meaning employee's tool can be weaponized to do far more than intended.

Summary

In this short clip, David Gildea of Druva and Joseph Holland of Aon discuss the real-world security risks that AI agents introduce inside large enterprises. The conversation highlights a fundamental shift in how organizations must think about their threat surface: the traditional perimeter-focused model has given way to an environment where internal and external threats are now roughly equal in concern. A well-intentioned employee deploying an AI agent can inadvertently open the door to supply chain attacks that allow that agent to operate far beyond its intended scope. Looking ahead, the speakers point to emerging authentication standards — including agent-to-agent (AA) auth and delegated approval frameworks — being developed across standards bodies to establish consistent, least-privilege access controls for AI agents. The key takeaway is that governing AI agents requires purpose-built authentication and strict permission scoping, not just perimeter defenses.

Chapters

0:00 - Enterprise AI Agent Risk
0:08 - Shift to Internal Threats
0:33 - Emerging Auth Standards

Key Quotes

0:00 "Our customers are definitely concerned about the access that these tools have, and as large enterprises, the risk that something goes wrong is huge."
0:17 "Now it's internal, and it is very much 50-50 between internal and external."
0:21 "You have to be worried about a well-intentioned employee who wants to do a good job, and they get an agent, and they start doing some work, and maybe there's a supply chain attack or something that allows an agent to do significantly more."

FAQ

What makes AI agents a unique security risk compared to traditional software?

AI agents can be granted broad access by well-intentioned employees and, if compromised through a supply chain attack, can perform actions far beyond their original scope — making least-privilege controls and agent-specific authentication critical.

What authentication standards are being developed for AI agents?

The speakers reference AA auth (agent-to-agent authentication) and delegated approval frameworks currently being worked through standards bodies to create a consistent, limited-access approach to agent authentication.

Categories:

Tags:

Show more Show less

TL;DR

Summary

Chapters

Key Quotes

FAQ

Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

Harnessing Data Governance for AI with Cyera and Snowflake