{"id":66369,"date":"2026-06-08T17:12:09","date_gmt":"2026-06-08T17:12:09","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/66369\/"},"modified":"2026-06-08T17:12:09","modified_gmt":"2026-06-08T17:12:09","slug":"ai-agents-need-governance-before-scale","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/66369\/","title":{"rendered":"AI Agents Need Governance Before Scale"},"content":{"rendered":"

\n Agentic AI<\/a>
\n ,
\n Artificial Intelligence & Machine Learning<\/a>
\n ,
\n Events<\/a>\n <\/p>\n

1Password’s Dave Lewis on Unchecked Privilege and Security Debt<\/p>\n

Anna Delaney<\/a> (annamadeline<\/a>) \u2022
\n June 8, 2026 \u00a0 \u00a0 <\/p>\n

\"AI<\/p>\n

Dave Lewis, global advisory CISO, 1Password<\/p>\n

Treating non-human identities as service accounts rather than privileged actors has created a governance gap widening with every deployment, said Dave Lewis, global advisory CISO at 1Password.<\/p>\n

See Also: Know Thy Enemy: Threats to Cyber Resilience<\/a><\/p>\n

Most organizations deploying artificial intelligence agents have skipped the foundational step: understanding what those agents can access, what credentials they hold and what happens when something goes wrong. Agents are designed to complete tasks, and without strict guardrails, they can take actions that may result in unintended privilege escalation.<\/p>\n

The blast radius of a poorly governed agent environment is far larger than most organizations have accounted for. “If we don’t get the fundamentals in place – securing the credentials, securing the access and making sure you have an overarching security governance program in place – the problems are going to compound,” Lewis said.<\/p>\n

In this video interview with ISMG at Infosecurity Europe 2026<\/a>, Lewis also discussed:<\/p>\n

Why token burn rates are forcing organizations toward an inevitable course correction;
\nHow accountability for agent actions ultimately falls on human leadership, not the technology;
\nHow security debt and rising AI costs could force organizations to reassess deployments.<\/p>\n

Lewis has 30 years of industry experience in IT security operations and management. He currently also sits on the advisory boards of Sightline Security, Byos.io and Knostic AI. He has previously worked in critical infrastructure for nine years as well as for companies including Duo Security, Akamai, Cisco, AMD and IBM.<\/p>\n