![\"\"](\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/04\/delinea-headshot-chris-kelly-lr.jpg\")
Kelly (Delinea)<\/p>\nAt RSAC 2026, AI\u2019s rapid integration into organizations highlighted the critical role of identity security in mitigating risks posed by agentic AI. Chris Kelly, Delinea\u2019s president for go-to-market, emphasizes that as AI shifts from a tool to an autonomous agent, every AI action must be tied to a verified identity and governed by real-time policies. In this Q&A, Kelly also stresses that just-in-time access is essential for managing AI agents and privileged users.<\/p>\n
Kelly (Delinea)<\/p>\n
What was the big trend coming out of RSAC 2026, and how do you see that trend shaping the industry in the next 12 to 18 months?<\/p>\n
Kelly: AI is already everywhere, but it became clear at RSAC that identity is at the core of enabling secure AI innovation \u2013 especially as we step further into the agentic AI era. Over the next year and a half, we\u2019ll see a growing push to govern AI agents more comprehensively. Companies are beginning to understand that the security risks of agentic AI are beginning to catch up with their potential to drive innovation. Their volume is already outpacing the security controls organizations have in place, so I think we\u2019ll see a shift from a \u201cspeed over security\u201d mentality to a \u201csecurity to enable growth\u201d approach.\u00a0\u00a0<\/p>\n
\u00a0<\/p>\n
Delinea\u2019s recent messaging is around AI agents. As we move to more AI-as-an-actor (not just a tool), how can CISOs maintain an audit trail for an agent making real-time decisions?<\/p>\n
Kelly: To maintain an audit trail for AI agents acting in real time, CISOs need to move beyond basic logging. Every action should be tied to a verified identity, evaluated against policy at the moment of execution and recorded with enough context to explain what happened, why it happened and what systems or data were involved.\u00a0<\/p>\n
That\u2019s especially important as organizations treat AI as an actor rather than a tool. Standing privileges create too much risk; the better approach is dynamic, just-in-time access so AI agents only get the permissions they need for a specific task, with access revoked once the task is complete, to ensure every action is fully attributable and auditable. AI agents are a new class of privileged user, and should be governed as such.<\/p>\n
\u00a0<\/p>\n
Continuous automation: Is the goal to make the password vault obsolete in favor of Just in Time access, or do they co-exist (and why)?<\/p>\n
Kelly: Password vaults aren\u2019t going away, but they\u2019re no longer enough on their own. Vaults are still essential for securing credentials, but organizations also need just-in-time access to reduce standing privilege and grant elevated access only when it\u2019s needed.\u00a0 For most organizations, vault and JIT work together to reduce risk in automated environments.\u00a0<\/p>\n
Delinea is emphasizing identity resilience. For a CISO on a budget, is resiliency more about buying additional backup tools or about a fundamental change in how they architect their identity stack?<\/p>\n Kelly: Identity resilience is more about strengthening the way identity is managed than adding backup tools. The biggest gains come from getting the basics right: enforcing least privilege and just-in-time access across environments. That doesn\u2019t mean ripping and replacing your entire identity stack. Resilience improves when organizations build stronger controls around the identities and access paths that matter most.\u00a0<\/p>\n \u00a0<\/p>\n If IT leaders only change one thing about identity governance in 2026, what should that be?<\/p>\n Kelly: The main identity goal for IT leaders in 2026 should be to treat non-human identities with the same governance as human users. You can\u2019t secure what you can\u2019t see, so the first step is discovering every identity, understanding what access it has and identifying where privileges are excessive, persistent or unmanaged.<\/p>\n \u00a0<\/p>\n Meet Chris:<\/p>\n Chris Kelly is the President of Go-To-Market (GTM) at Delinea<\/a>, overseeing Global Sales, Channel and Customer Success. With more than 25 years of experience in the cybersecurity industry, Chris has a proven track record of scaling businesses and leading high-performing teams at every stage of growth, from startups to global enterprises.<\/p>\n \u00a0<\/p>\n![\"\"](\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/04\/Deliniea-637x358.png\")
<\/a>Source: Delinea\u2019s \u201c2026 Identity Security Report\u201d<\/p>\n