When AI Starts Acting, Who Controls What It Can Do?

There is a new piece in The Data Wire with Richard Galvez and Andrea Moccia of Options Technology on what changes when AI begins to act.

CyberArk’s 2025 identity-security research found that machine identities outnumber human identities 82 to 1, and 42% of them carry privileged or sensitive access.

Agents will likely inherit some of that access. For a bank, the question may be less what an agent was asked to do and more what it could discover and do with the access it already has.

Is that question being asked at your institution before agents reach production?