Full Segment Notes
AI agents are rapidly embedding into core enterprise workflows with broad access to sensitive systems and the ability to act autonomously, creating new challenges for security leaders tasked with enabling innovation while maintaining control. In this interview, Matt Immler will discuss why organizations must know about every agent operating in their environment and how to bring those agents under governance.This segment is sponsored by Okta. Visit https://securityweekly.com/oktarsac to learn more about them!Read the interview summary from SC Media here: Okta’s Matt Immler on knowing your AI agents through visibility, control, and accountability
Key Moments
- 0:00 - – RSAC 2026 Intro & Okta Identity Overview
- 0:52 - – Why Identity Security Is Evolving Beyond the “Front Door”
- 01:16 - – Agentic AI vs Prompt-Based AI Explained
- 01:44 - – What Is an AI Identity? (Non-Human Identities)
- 02:38 - – Risks of Non-Deterministic AI Decision-Making
- 03:09 - – Human vs AI Identity: Key Differences
- 03:35 - – What Is a “First-Class Identity” for AI Agents?
- 04:13 - – Applying Security Policies to AI Agents
- 05:25 - – Guardrails for Agentic AI & Prompt Injection Risks
- 05:36 - – Can AI Use Multi-Factor Authentication (MFA)?
- 06:04 - – Authorization & Least Privilege for AI Systems
- 06:57 - – Why Human-in-the-Loop Still Matters
- 07:42 - – Future Risk: AI Creating Its Own Approvers
- 09:34 - – Are AI Agents Becoming Digital Humans?
- 10:14 - – Raising Kids in an AI-Driven World
- 11:23 - – How Okta Detects AI vs Human Behavior
- 12:03 - – Identifying AI Through Behavioral Patterns
- 12:48 - – AI Using Human Credentials: Security Risks
- 13:14 - – Stopping Unauthorized AI Access with Browser Controls
- 13:51 - – Behavioral Security & Zero Trust for AI Identities
Guest
Matt Immler is the Regional Chief Security Officer for Okta in the Eastern Americas, where he leverages his Identity expertise to drive customer success. Matt’s background includes Auth0 Security and Compliance, in addition to previous roles in information security, network operations and software engineering.
