What did your agents do yesterday?

Could you tell me what every AI agent in your business did yesterday?

Only 23% of the roughly 300 security leaders BCG surveyed have applied monitoring or logging to their agents, and fewer than 20% have adopted governance for non-human identities.

So what? Everyone is building agents now but far fewer organisations can tell you which agents exist, what each one can access and what it did yesterday. We are creating a workforce of non-human actors without building the identity and management system around them.

A new joiner gets a name, an owner, the access their role needs and someone who reviews their work, and that access is switched off the day they leave. Why wouldn't you make sure every agent has the same before it touches a live system?