InfoNews
When an AI Agent Is the Incident, the Identity Record Is the Evidence
- Published
- Record updated
Summary
NIST, CISA, and NSA jointly published a 14-page voluntary guide of ten practices for incident readiness and response when AI agents act without direction. The guide defines a control incident as an agent taking significant actions that undermine controls, policies, or human oversight. The article argues that responders should work from identity records, such as which credentials were used and what authority stood behind them, rather than first determining intent.