AI Security Governance in the Enterprise: A Working Model
Most enterprise AI governance stalls because it is written as policy and never wired into engineering. Here is a model that treats governance as a control plane — owned, measurable, and enforced where AI actually runs.
Agents turn a model from something that answers into something that acts. That single shift breaks most of the assumptions behind traditional application security. Here is a concrete threat model and a control set for agentic systems.
Identity and Zero Trust for Enterprise AI Adoption
AI did not introduce a new security model — it introduced a flood of new identities that the old perimeter was never designed to hold. Zero Trust is the model that scales to it. Here is how identity-first thinking applies to enterprise AI.