Governing Machine and AI-Agent Identities: Professor Kai London on the Worst-Controlled Class

 

By the Resolute Islands News Technology Desk

Professor Kai London, board advisor and interim/fractional CISO, CIO and CTO
Professor Kai London — board advisor & interim CISO/CIO/CTO. Credit: professorkailondon.com

Amid all the attention on human passwords and phishing, Professor Kai London, a senior CISO, points to a quieter and faster-growing danger. “The fastest-growing and worst-controlled class of identity in almost every organisation is not human,” he says. “It is machines — service accounts, API keys, automation — and now AI agents that can act on their own.”

“Every AI agent you deploy is a login with real reach. It needs an identity, a boundary, monitoring and a kill-switch — exactly like a privileged human user, only faster and at greater scale.”

The invisible workforce

London notes that machine identities typically outnumber human ones many times over, and are often granted broad, standing privileges that nobody reviews. “They were set up to make systems work, not to be governed,” he says. “That is precisely the problem.”

AI agents change the stakes

As organisations deploy AI agents that can take actions autonomously, the risk sharpens. “An agent is a new kind of employee and a new kind of attack surface at once,” London says. “If it is compromised or misbehaves, it can act quickly and at scale.”

Applying the doctrine

His prescription extends the same discipline used for humans: authenticate machine and agent identities, apply least privilege, monitor their behaviour, rotate and manage their credentials, and always have a way to shut them down. “A kill-switch is not optional for an autonomous agent,” he stresses.

A governance gap to close

London urges organisations to inventory their non-human identities — a step many have never taken. “You cannot govern what you have not counted,” he says. “And most organisations would be startled by how many powerful non-human identities they run.”

For any operator increasingly reliant on automation and AI, London's message is urgent: the identities that never sleep and never get watched are becoming the most dangerous of all — and governing them is now core to security.

About Professor Kai London. Professor Kai London is a senior technology, security and transformation executive with 25+ years of board- and C-suite leadership across banking, aviation, defence, government and critical national infrastructure. He is Founder & CEO of Quantum AI Systems Security, an Honorary Professor in Cybersecurity, AI & Quantum Computing and a UCL researcher, holding CISSP, CISM, CCISO, ISO 27001 Lead Auditor, ISO 42001, DORA and NIS2 credentials. He is available for board advisory, NED and interim/fractional CISO/CIO/CTO mandates across the UK and internationally. Learn more at professorkailondon.com.

Popular posts from this blog

Why Recruiters Are Racing to Place Interim and Fractional CISOs: Professor Kai London Explains

Image
  By the Resolute Islands News Business Desk Professor Kai London — CISO, cybersecurity & AI expert. Credit: professorkailondon.com Executive recruiters and search partners are fielding a surge in demand for a role that barely existed a decade ago: the interim or fractional Chief Information Security Officer. “The market has shifted,” says Professor Kai London , a senior CISO who takes on these mandates. “Organisations need board-grade security leadership faster than the permanent talent pool can supply it — and that is exactly the gap the fractional model fills.” “When a regulatory deadline lands, an incident hits, or a deal requires due diligence, boards need senior security leadership now, not in nine months. That urgency is driving the demand.” Why demand has surged London points to a perfect storm: tightening regulation with personal accountability, a relentless threat landscape, and a shortage of leaders who can operate at board level. “The obligations have grown faster t...
Read more

Securing the Signal: Professor Kai London on Satellite and Wireless Security for High-Arctic Operations

Image
  By the Resolute Islands News Technology Desk Professor Kai London — board advisor & interim CISO/CIO/CTO. Credit: professorkailondon.com In the High Arctic, connectivity often means satellite and wireless links — the only practical way to reach the outside world. That dependence, warns Professor Kai London , a senior CISO, creates a perimeter in the air that adversaries can target. “When your lifeline is a wireless or satellite link, securing that link is securing the operation,” he says. “There is an airborne perimeter around every remote site — radio and satellite space an adversary can reach without ever touching a wire. For strategic operations, that is a serious risk.” The lifeline is the target London notes that the very links that make remote operations possible are what an adversary most wants to compromise — to intercept, disrupt or deceive. “Rogue access points, interference and interception all target the connection you depend on,” he says. Defending the air and t...
Read more

Defending the Digital Arctic: Professor Kai London on Cyber Resilience for Sovereign and Remote Operations

Image
  By the Resolute Islands News Technology Desk Professor Kai London — CISO, cybersecurity & AI expert. Credit: professorkailondon.com The High Arctic is becoming strategically vital — and increasingly digital. Research stations, surveillance systems, communications relays, energy and logistics all now depend on networked technology in one of the least forgiving environments on earth. “In the Arctic, cyber resilience is a sovereignty issue,” says Professor Kai London , a senior CISO who advises on critical and defence-adjacent infrastructure. “The systems that maintain a presence in the far north are targets, and defending them is part of defending the territory.” “When infrastructure is remote, sparse and strategically important, a cyber incident is not an inconvenience. It is a gap in national resilience that adversaries actively probe.” Why the Arctic is uniquely exposed London points to the combination of factors: critical systems spread thinly across vast distances, depende...
Read more