Webinar Description
Key Takeaways
- Explores identity governance challenges created by AI agents operating alongside human users in enterprise environments
- Covers lifecycle management approaches for discovering, classifying and controlling human, non-human and agentic identities
- Addresses compliance requirements under the EU AI Act, SOC 2 and ISO 27001 frameworks
- Features insights from JumpCloud and Vanta on continuous compliance and evidence management
- Designed for IT leaders, security professionals, compliance officers and GRC specialists
Introduction
As AI agents increasingly authenticate to systems, access sensitive data and execute actions with privileges comparable to human users, organisations face a fundamental governance challenge. The webinar “Governing Every Identity in the Agentic Era,” hosted by JumpCloud, examines how identity and access management practices must evolve to address environments where autonomous software agents operate at scale. This 40-minute session is aimed at IT leaders, security professionals and compliance officers grappling with the operational and regulatory complexities of managing both human and machine identities.
About This Event
This live virtual webinar brings together expertise from JumpCloud, a provider of identity and access management solutions, and Vanta, a compliance automation platform. The session focuses on practical frameworks for governing identities across the full spectrum—from traditional human users to service accounts and the emerging category of AI agents that can independently interact with enterprise systems.
The Identity Governance Challenge in Agentic Environments
Traditional identity and access management architectures were designed primarily with human users in mind. AI agents introduce complications that existing governance models struggle to address. These autonomous entities often accumulate privileges over time, may lack clear ownership attribution, and can operate continuously without the natural access review cycles that occur when employees change roles or leave organisations.
The webinar addresses several interconnected challenges. Visibility remains a primary concern—many organisations lack comprehensive inventories of the AI agents operating within their environments, making it difficult to assess risk exposure. Without proper classification, security teams cannot distinguish between agents performing low-risk automation and those with access to sensitive systems or data.
Over-privileged access represents another significant risk. Agents frequently receive broad permissions during initial deployment to ensure functionality, but these elevated privileges often persist long after they are necessary. Implementing least-privilege policies for non-human identities requires different approaches than those used for human users, including more granular access controls and automated privilege reviews.
Compliance Implications and Regulatory Developments
The regulatory landscape adds urgency to these governance challenges. The EU AI Act introduces specific requirements for organisations deploying AI systems, including obligations around transparency, human oversight and risk management. Existing frameworks such as SOC 2 and ISO 27001 also apply to AI agent activities, requiring organisations to demonstrate appropriate controls over all entities accessing their systems.
The session includes perspectives from Vanta on continuous compliance and evidence management. As audit requirements expand to encompass AI agent governance, organisations need mechanisms to document how agent identities are provisioned, what access they maintain, and how that access is reviewed and revoked. Centralised credential management becomes essential—the ability to rapidly revoke agent access across systems when security incidents occur or when agents are decommissioned.
Who Should Attend
This webinar is designed for professionals responsible for identity governance, security architecture and compliance within organisations adopting AI and automation technologies. IT managers and security engineers will find value in the technical frameworks discussed, while compliance managers and GRC specialists can gain insight into how emerging regulations apply to agent identities. The content is particularly relevant for mid-sized to large enterprises and organisations operating in regulated industries where demonstrating control over all system access is essential.
Lifecycle Approaches to Agent Identity Management
The webinar presents identity lifecycle management as the foundational framework for governing agents effectively. This encompasses discovery mechanisms to identify agents operating across the environment, classification systems to categorise agents by risk and function, ongoing access reviews to ensure privileges remain appropriate, and decommissioning processes that ensure complete credential revocation when agents are retired. By treating agent identities with the same rigour applied to human identities, organisations can reduce their attack surface while maintaining the operational benefits that AI agents provide.