Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Nutanix: AI Agent Governance: Why Policy Alone Isn't Enough

Nutanix
08/24/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


tools, the employee or the company? Lyncomp has been through enough technology transitions to know when an industry is running faster than it can think. And right now she says that's what's happening. I see a lot of fear and confusion right now because I've been through a number of tech transitions and this one is happening faster and being marketed more and there's more hype around it than I've seen in other tech transitions like dot com, the mobile phone rollout or the internet. And so I think really the amount of stress that people are having over what is artificial intelligence? How is it going to affect me? Should I be using it? How should I be using it? Is probably the undercurrent of the entire tech industry right now. AI trust and safety. Yeah. AI governance, security. I actually had an IT person at a company that openly admitted when they saw open claw, like what fresh hell is about to become shadow IT? There's a lot that is really starting to pop. It's exciting because nobody really loves to have to do all of the grind themselves. They'd really like to have a personal assistant. But when something needs your user ID credentials, admin privileges, your credit cards, your calendar, you're taking a really interesting risk. I had somebody tell me today, oh, well, my information's all there on the dark net. But you need to really think about it when you have something making autonomous decisions that is non-deterministic. So lots of great experiments, lots of excitement, but lots for us to really keep an eye on and try and figure out what does it mean to have admin privileges or the right privileges for a staff of agents like they're humans? Is it really a user ID that you give them or is it something else? What do you do when an employee leaves the company? Do they take their agents with them? Probably not. So who manages the agents? So many things that we have not thought about. I had a blog post recently about how essentially, actually it was an MIT journal article that between December 2025 and January 2026, it's the same experience for IT that new parents have when their baby that was crawling starts walking. Because the whole idea of keeping them safe, it's a new ballgame. You're making me think, if you have all these agents everywhere, is it even possible to have sovereign AI? There's a whole question. AI governance used to be, let's have policies, let's look at safety, let's see how the model interacts with humans. Unfortunately, now AI governance has to be code. And you have to be ahead of questions around if someone has built an AI agent that has made them significantly more productive, is that the intellectual property of the company? Because if it is, then what do employees do when they've built and invested in this thing? It just by definition invites shadow IT. So there's just some things that we don't have worked out yet. I was talking with someone today at a lunch table about the fact that in the US, attorney client privilege and doctor patient privilege do not count when you're asking questions to chatbots. There is no copyright protection when you're using AI tools. So if you're trying to self-publish on Amazon, please don't use an AI image generator, unless you actually can do a lot of work on the image to prove that it was yours. Because those three examples right there, it just says our policies, our laws, our governance, we are gonna have to rethink things as dramatically as we did when people started getting connected with the internet. It feels like we are moving also towards people are doing more AI on their own. Right. Can you talk about where we're going with that? Yeah. I used this analogy earlier today. And if you remember, or you look on the internet, depending on if you're Gen Z or Gen X, when mobile phones and mobile telephony first came out, the systems that you were carrying were the size of a box. They were suitcases. If you go to Mobile World Congress, when they're announcing the new wireless technology, and they've just got it up and running, the motherboards are not phone size. They're, you know, rack size, because they're still working out the kinks, and they're still programming and tweaking the configurations for the wireless technology. With AI, we're in that kind of situation. So you got these big systems for it to proliferate, and for it to really be everywhere, the way that mobile telephony is, essentially, it's going to have to go through optimization, you're going to have a bunch of heterogeneous types of solutions, you're going to have to go from programmable to ASICs, in some cases, which is hardened logic, it only does one set of things. So what a phone call used to look like, on something that was programmable is now a hardened set of logic that only does that wireless technology. So you're going to see something similar in terms of wireless, that evolution with AI, and the proliferation of the different solution types. It goes back to what you said at the very beginning about fear. How are people getting through this time? You know, what Intel IT has done that I think is really, really smart. They are, they've always been an eat your own dog food type of IT department. And they publish a lot about what they've implemented. So they've done everything from taking natural language processing, to read tool logs in manufacturing facilities. Because as it turns out, when the technicians start getting really tense in their language on logging using the tool, that's because the system needs maintenance. And it's about to go down. So now, when they sense that the technicians are getting really pissed off, they know, oh, we should probably do proactive maintenance. So that's one use case. But they also do things where they have a common interface. And underneath it, you can swap models out. So as they find different models that are either more economical or better for a task, you don't get stuck on one model. And then they have also had a trial of things like, you know, some of the chaining, the agent chaining technologies, there's a few out there. And they watch how people are building with it, who they know are trustworthy and developers that are going to do it right, so that they know what they can replicate, and they know what's going to be a popular popular use case. Transcribed by https://otter.ai

TL;DR

  • Lynn Comp of Intel warns that the current AI transition is moving faster and generating more hype than any previous technology wave, including the dotcom boom and mobile rollout, creating a governance crisis most enterprises are unprepared for.
  • Autonomous AI agents that carry user credentials and make non-deterministic decisions expose critical gaps in identity management, since access control frameworks designed for humans do not translate cleanly to agents.
  • Unresolved ownership questions — such as whether an employee-built productivity agent is company intellectual property — risk incentivizing shadow IT if enterprises claim ownership without offering clear frameworks.
  • Comp argues AI governance must shift from written policy to enforceable code, and points to Intel IT's model-agnostic interface and controlled agent chaining trials as a practical template for enterprise teams.

Summary

In this interview recorded at Nutanix's 2026 .NEXT event in Chicago, Lynn Comp — Vice President and Global Head of Sales for Intel's AI Center of Excellence — argues that enterprise AI governance has fundamentally outgrown the era of written policy. Drawing on her experience across the dotcom boom, the mobile telephony rollout, and the rise of the internet, Comp identifies the current AI transition as the fastest and most heavily marketed she has witnessed, generating widespread fear and confusion across IT, legal, and business teams alike. The core governance challenge she surfaces is the autonomous AI agent: a tool that carries user credentials, admin privileges, and calendar access, and makes non-deterministic decisions without a human in the loop. This creates unresolved questions around identity management — agents are not humans, and access control frameworks built for people do not map cleanly onto them. Ownership is equally murky: if an employee builds an agent that dramatically boosts their productivity, does that agent constitute company intellectual property? If so, what incentive remains to build such tools on company time? Legal frameworks lag just as badly — attorney-client privilege and doctor-patient privilege do not extend to AI chatbots in the United States, and copyright protection does not apply to AI-generated content. Comp's conclusion is direct: governance must now be enforced through code, not policy. Intel IT's own approach offers a practical model, including a model-agnostic common interface that allows engineers to swap AI models as better or more economical options emerge, and a controlled rollout of agent chaining technologies with vetted developers to identify safe, replicable use cases before broader deployment.

Chapters

0:00 - AI Ownership and Governance Questions
0:35 - Fear and Hype in the AI Transition
1:42 - Agent Credentials and Identity Risks
3:18 - Governance Must Become Code
4:57 - AI Proliferation and the Mobile Analogy
6:25 - Intel IT's Practical Governance Model

Key Quotes

0:44 "I see a lot of fear and confusion right now because I've been through a number of tech transitions and this one is happening faster and being marketed more and there's more hype around it than I've seen in other tech transitions like dot com, the mobile phone rollout or the internet."
1:49 "When something needs your user ID credentials, admin privileges, your credit cards, your calendar, you're taking a really interesting risk."
3:24 "AI governance used to be, let's have policies, let's look at safety, let's see how the model interacts with humans. Unfortunately, now AI governance has to be code."
4:08 "In the US, attorney client privilege and doctor patient privilege do not count when you're asking questions to chatbots. There is no copyright protection when you're using AI tools."

FAQ

Why can't enterprises rely on written AI governance policies?

According to Lynn Comp, autonomous AI agents operate too quickly and make too many non-deterministic decisions for written policies to keep pace. Governance must be embedded in code — enforced at the system level — rather than documented in policy documents that humans may or may not follow.

What is Intel IT doing to manage AI governance in practice?

Intel IT has implemented a common interface that allows engineers to swap AI models without being locked into a single vendor, and has run controlled trials of agent chaining technologies with trusted developers to identify safe, replicable use cases before broader rollout.


Categories:
  • » Data Protection
Channels:
News:
Events:
Tags:
  • AI & Machine Learning
  • Identity & Access
  • Compliance & Governance
  • Security Operations
  • Executive Briefing
  • Interview
  • AI governance
  • AI agents
  • Enterprise AI strategy
  • Identity and access management
  • AI trust and safety
  • Shadow IT
  • Intellectual property
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Nutanix: AI Agent Governance: Why Policy Alone Isn't Enough

              XStreaminars (watch here)

              • Aug
                27

                Becoming Agent Ready with Cyera: Essential Strategies and Insights

                08/27/202601:00 PM ET
                • Sep
                  03

                  Verge.io: Can You Afford Your Next Storage Refresh?

                  09/03/202601:00 PM ET
                  More events

                  Industry Events (Sponsor Hosted)

                  • Aug
                    27

                    Summer of Satori: FunFoneFarm's Transformation of Fraud into Seamless Integration

                    08/27/202601:00 PM ET
                    • Sep
                      23

                      Invisible Data: Understanding What Needs Protection

                      09/23/202601:00 PM ET
                      • Oct
                        08

                        Embrace AI Adoption While Maintaining Robust Security Measures

                        10/08/202612:00 PM ET
                        More events

                        Upcoming Webinar Calendar

                        • 08/27/2026
                          01:00 PM
                          08/27/2026
                          Becoming Agent Ready with Cyera: Essential Strategies and Insights
                          https://www.truthinit.com/index.php/channel/2081/becoming-agent-ready-with-cyera-essential-strategies-and-insights/
                        • 08/27/2026
                          01:00 PM
                          08/27/2026
                          Summer of Satori: FunFoneFarm's Transformation of Fraud into Seamless Integration
                          https://www.truthinit.com/index.php/channel/2086/summer-of-satori-funfonefarms-transformation-of-fraud-into-seamless-integration/
                        • 09/02/2026
                          12:00 PM
                          09/02/2026
                          Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                          https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                        • 09/03/2026
                          01:00 PM
                          09/03/2026
                          Verge.io: Can You Afford Your Next Storage Refresh?
                          https://www.truthinit.com/index.php/channel/2082/verge-io-can-you-afford-your-next-storage-refresh/
                        • 09/23/2026
                          01:00 PM
                          09/23/2026
                          Invisible Data: Understanding What Needs Protection
                          https://www.truthinit.com/index.php/channel/2087/invisible-data-understanding-what-needs-protection/
                        • 09/30/2026
                          04:00 AM
                          09/30/2026
                          AI Command Center: Optimizing Visibility and Control in Your Operations
                          https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                        • 10/08/2026
                          12:00 PM
                          10/08/2026
                          Embrace AI Adoption While Maintaining Robust Security Measures
                          https://www.truthinit.com/index.php/channel/2092/embrace-ai-adoption-while-maintaining-robust-security-measures/
                        • 11/19/2026
                          01:00 PM
                          11/19/2026
                          360View: Govern, Secure & Recover Your Microsoft 365 Environment
                          https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version