As cited
Copy frozen at (site build).
ai security
Who's governing your AI? A trust framework for enterprise agents and models
Enterprise organizations increasingly deploy artificial intelligence (AI) agents without governance controls, creating security and compliance risks. DigiCert proposes an AI Trust framework that uses public key infrastructure, Domain Name System (DNS) policies, and workload identity standards to enforce controls over agent deployment, runtime behavior, and model integrity. The approach leverages short-lived credentials, cryptographic attestation, and centralized policy enforcement to answer five critical governance questions: which agents employees use, what regulated data flows to them, which credentials they hold, whether compromised agents can be stopped immediately, and whether incidents can be reconstructed.
Why it matters: Security leaders and infrastructure teams must address shadow AI deployment now, as only 38 percent of organizations require information technology approval for AI rollout and 68 percent lack AI governance capabilities. Organizations storing customer data accessible to agents need cryptographic controls and runtime attestation to meet emerging regulatory requirements and prevent unauthorized access through unmanaged AI workloads.
- Source published
- First seen by Cybersecurity Tracker